Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3340. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-15.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html - http://rhn.redhat.com/errata/RHSA-2013-0826.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16868 - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2013-3342 State: PUBLISHED Published: 2013-05-16T10:00:00 Last Updated: 2024-08-06T16:07:37.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 do not properly handle operating-system domain blacklists, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-15.html - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16063 - http://security.gentoo.org/glsa/gls
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16063 - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2013-3343 State: PUBLISHED Published: 2013-06-12T01:00:00 Last Updated: 2024-08-06T16:07:37.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (me
on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-16.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00016.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00179.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00164.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17030 - http://rhn.redhat.com/errata/RHSA-2013-0941.html
CVE ID: CVE-2013-3344 State: PUBLISHED Published: 2013-07-10T10:00:00 Last Updated: 2024-08-06T16:07:37.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-17.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00021.html - http://www.securityfoc
ins/apsb13-17.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00021.html - http://www.securityfocus.com/bid/61043
CVE ID: CVE-2013-3345 State: PUBLISHED Published: 2013-07-10T10:00:00 Last Updated: 2024-08-06T16:07:37.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-17.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00021.html
CVE ID: CVE-2013-3346 State: PUBLISHED Published: 2013-08-30T20:00:00.000Z Last Updated: 2025-11-21T15:52:39.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341. Additional Analyst
-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.adobe.com/support/security/bulletins/apsb13-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19054
CVE ID: CVE-2013-3347 State: PUBLISHED Published: 2013-07-10T10:00:00 Last Updated: 2024-08-06T16:07:37.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-17.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00021.htm
om/support/security/bulletins/apsb13-17.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00021.html
CVE ID: CVE-2013-3348 State: PUBLISHED Published: 2013-07-10T10:00:00 Last Updated: 2024-08-06T16:07:37.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.3.133 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028758 - http://www.adobe.com/support/security/bulletins/apsb13-18.html
CVE ID: CVE-2013-3349 State: PUBLISHED Published: 2013-07-10T10:00:00 Last Updated: 2024-08-06T16:07:37.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe ColdFusion 9.0 through 9.0.2, when the JRun application server is used, allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-19.html - http://www.securitytracker.com/id/1028757
CVE ID: CVE-2013-3350 State: PUBLISHED Published: 2013-07-10T10:00:00 Last Updated: 2024-08-06T16:07:37.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components (CFC) public methods via WebSockets. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-19.html - http://www.securitytracker.com/id/1028757 - http://stackoverflow.com/questions/17351214/cf10-websocket-p2p-can-invoke-any-public-functions-in-any-cfc-from-javascript-h
CVE ID: CVE-2013-3351 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-22.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18447
CVE ID: CVE-2013-3352 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3354 and CVE-2013-3355. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-22.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18590
CVE ID: CVE-2013-3353 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3356. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18369 - http://www.adobe.com/support/security/bulletins/apsb13-22.html
CVE ID: CVE-2013-3354 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3355. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18948 - http://www.adobe.com/support/security/bulletins/apsb13-22.html
CVE ID: CVE-2013-3355 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3354. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18826 - http://www.adobe.com/support/security/bulletins/apsb13-22.html
CVE ID: CVE-2013-3356 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3353. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18932 - http://www.adobe.com/support/security/bulletins/apsb13-22.html
CVE ID: CVE-2013-3357 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3358. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19064 - http://www.adobe.com/support/security/bulletins/apsb13-22.html
CVE ID: CVE-2013-3358 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3357. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-22.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18969
CVE ID: CVE-2013-3359 State: PUBLISHED Published: 2013-09-11T23:00:00Z Last Updated: 2024-09-17T04:18:55.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3360. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-23.html
CVE ID: CVE-2013-3360 State: PUBLISHED Published: 2013-09-11T23:00:00Z Last Updated: 2024-09-16T20:52:46.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3359. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-23.html
CVE ID: CVE-2013-3361 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324. Additional Analyst Notes: - CVE Program Container: Re
ulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00001.html - http://www.adobe.com/support/security/bulletins/apsb13-21.html - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00002.html - http://rhn.redhat.com/errata/RHSA-2013-1256.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00040.html
CVE ID: CVE-2013-3362 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324. Additional Analyst Notes: - CVE Program Container: Re
ulnerability than CVE-2013-3361, CVE-2013-3363, and CVE-2013-5324. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00001.html - http://www.adobe.com/support/security/bulletins/apsb13-21.html - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00002.html - http://rhn.redhat.com/errata/RHSA-2013-1256.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00040.html
CVE ID: CVE-2013-3363 State: PUBLISHED Published: 2013-09-11T23:00:00 Last Updated: 2024-08-06T16:07:37.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324. Additional Analyst Notes: - CVE Program Container: Re
ulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00001.html - http://www.adobe.com/support/security/bulletins/apsb13-21.html - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00002.html - http://rhn.redhat.com/errata/RHSA-2013-1256.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00040.html
CVE ID: CVE-2013-3365 State: PUBLISHED Published: 2014-02-04T16:00:00 Last Updated: 2024-08-06T16:07:37.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network prefix to internet/ipv6.asp; (2) remote port to adm/management.asp; (3) pptp username, (4) pptp password, (5) ip, (6) gateway, (7) l2tp username, or (8) l2tp password to internet/wan.asp; (9) NtpDstStart, (10) NtpDstEnd, or (11) NtpDstOffset to adm/time.asp; or (12) device url to adm/management.asp. NOTE: vectors 9, 10, and 11 can be exploited by unauthenticated remote attackers by leveragi
url to adm/management.asp. NOTE: vectors 9, 10, and 11 can be exploited by unauthenticated remote attackers by leveraging CVE-2013-3098. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/content/case-studies/routers/Vulnerability_Catalog.pdf - http://infosec42.blogspot.com/2013/07/exploit-trendnet-tew-812dru-csrfcommand.html
CVE ID: CVE-2013-3366 State: PUBLISHED Published: 2019-11-13T21:01:35 Last Updated: 2024-08-06T16:07:37.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
CVE ID: CVE-2013-3367 State: PUBLISHED Published: 2019-11-13T20:43:11 Last Updated: 2024-08-06T16:07:37.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
CVE ID: CVE-2013-3368 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-17T00:55:59.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with predictable name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://www.osvdb.org/93612 - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://secunia.com/adv
013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522
CVE ID: CVE-2013-3369 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-17T00:31:06.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary private components via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://www.osvdb.org/93610 - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/00022
cal.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522
CVE ID: CVE-2013-3370 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-17T00:00:42.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://www.osvdb.org/93609 - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.htm
-May/000226.html - http://www.osvdb.org/93609 - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522
CVE ID: CVE-2013-3371 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-16T16:27:42.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://www.osvdb.org/93608 - h
000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://www.osvdb.org/93608 - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522
CVE ID: CVE-2013-3372 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-17T02:31:37.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://www.osvdb
unce/2013-May/000226.html - http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html - http://www.osvdb.org/93607 - http://secunia.com/advisories/53505 - http://www.debian.org/security/2012/dsa-2670 - http://secunia.com/advisories/53522