Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2027 State: PUBLISHED Published: 2015-02-13T15:00:00 Last Updated: 2024-08-06T15:20:37.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:158 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html - https://bugzilla.redhat.com/show_bug.cgi?id=947949 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://advisories.mageia.org/M
id=947949 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://advisories.mageia.org/MGASA-2015-0096.html
CVE ID: CVE-2013-2028 State: PUBLISHED Published: 2013-07-18T01:00:00 Last Updated: 2024-08-06T15:20:37.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html - http://www.osvdb.org/93037 - http://lists.fedoraproject.org/pipermail/package
ipermail/nginx-announce/2013/000112.html - http://www.osvdb.org/93037 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105176.html - http://www.vnsecurity.net/2013/05/analysis-of-nginx-cve-2013-2028/ - http://secunia.com/advisories/55181 - http://www.securityfocus.com/bid/59699 - http://security.gentoo.org/glsa/glsa-201310-04.xml - https://github.com/rapid7/metasploit-framework/pull/1834 - http://nginx.org/download/patch.2013.chunked.txt - http://packetstormsecurity.com/files/121675/Nginx-1.3.9-1.4.0-Denial-Of-Service.html
CVE ID: CVE-2013-2029 State: PUBLISHED Published: 2013-11-23T17:00:00 Last Updated: 2024-08-06T15:20:37.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1526.html - https://bugzilla.redhat.com/show_bug.cgi?id=958015
CVE ID: CVE-2013-2030 State: PUBLISHED Published: 2013-12-27T01:00:00 Last Updated: 2024-08-06T15:20:37.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/09/2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html - http://lists.opens
urity/2013/05/09/2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html - http://lists.openstack.org/pipermail/openstack-announce/2013-May/000098.html - https://bugs.launchpad.net/nova/+bug/1174608 - https://bugzilla.redhat.com/show_bug.cgi?id=958285
CVE ID: CVE-2013-2031 State: PUBLISHED Published: 2013-11-15T18:16:00 Last Updated: 2024-08-06T15:20:37.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CDATA section containing valid UTF-7 encoded sequences in a SVG file, which is then incorrectly interpreted as UTF-8 by Chrome and Firefox. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105825.html - http://secunia.com/advisories/57472 - https://bugzilla.wikimedia.org/show_bug.cgi?id=47304 - http://secun
/105825.html - http://secunia.com/advisories/57472 - https://bugzilla.wikimedia.org/show_bug.cgi?id=47304 - http://secunia.com/advisories/55433 - http://www.debian.org/security/2014/dsa-2891 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106293.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105784.html - http://www.securityfocus.com/bid/59594 - http://security.gentoo.org/glsa/glsa-201310-21.xml - http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-April/000129.html - http://www.openwall.com/lists/oss-security/2013/05/01/2
CVE ID: CVE-2013-2032 State: PUBLISHED Published: 2013-11-15T18:16:00 Last Updated: 2024-08-06T15:20:37.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extension that only implements one of these blocks. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105825.html - http://secunia.com/advisories/55433 - http://lists.fedoraproject.org/pipermail/package-ann
nounce/2013-May/105825.html - http://secunia.com/advisories/55433 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106293.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105784.html - http://security.gentoo.org/glsa/glsa-201310-21.xml - http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-April/000129.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=46590
CVE ID: CVE-2013-2033 State: PUBLISHED Published: 2014-04-10T14:00:00 Last Updated: 2024-08-06T15:20:37.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb - https://exchange.xforce.ibmcloud.com/vulnerabilities/84004 - http://osvdb.org/92982
CVE ID: CVE-2013-2034 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T15:20:37.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb - http://o
am Container: References: - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb - http://osvdb.org/92981
CVE ID: CVE-2013-2035 State: PUBLISHED Published: 2013-08-28T17:18:00 Last Updated: 2024-08-06T15:20:37.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0029.html - http://rhn.redhat.com/errata/RHSA-2013-1029.html - http://secunia.com/advisories/53415 - http://www.osvdb.org/93411 - http://rhn.redhat.c
.com/errata/RHSA-2013-1029.html - http://secunia.com/advisories/53415 - http://www.osvdb.org/93411 - http://rhn.redhat.com/errata/RHSA-2015-0034.html - http://rhn.redhat.com/errata/RHSA-2014-0254.html - https://github.com/jline/jline2/issues/85 - http://rhn.redhat.com/errata/RHSA-2013-1785.html - http://www.securitytracker.com/id/1029431 - http://rhn.redhat.com/errata/RHSA-2013-1784.html - https://github.com/fusesource/hawtjni/commit/92c266170ce98edc200c656bd034a237098b8aa5 - http://rhn.redhat.com/errata/RHSA-2014-0400.html - http://rhn.redhat.com/errata/RHSA-2014-0245.html - http://rhn.redhat.com/errata/RHSA-2013-1786.html - http://secunia.com/advisories/57915 - https://github.com/jruby/jru
- http://rhn.redhat.com/errata/RHSA-2013-1786.html - http://secunia.com/advisories/57915 - https://github.com/jruby/jruby/issues/732 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2035 - http://secunia.com/advisories/54108
CVE ID: CVE-2013-2036 State: PUBLISHED Published: 2013-06-24T16:13:00 Last Updated: 2024-08-06T15:20:37.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53228 - https://drupal.org/node/1983356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83986 - https://drupal.org/node/1984212
CVE ID: CVE-2013-2037 State: PUBLISHED Published: 2014-01-18T21:00:00 Last Updated: 2024-08-06T15:20:37.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/httplib2/+bug/1175272 - http://seclists.org/oss-sec/2013/q2/257 - http://code.google.com/p/httplib2/issues/detail?id=282 - h
lib2/+bug/1175272 - http://seclists.org/oss-sec/2013/q2/257 - http://code.google.com/p/httplib2/issues/detail?id=282 - http://www.ubuntu.com/usn/USN-1948-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706602 - http://www.securityfocus.com/bid/52179
CVE ID: CVE-2013-2038 State: PUBLISHED Published: 2014-02-06T16:00:00 Last Updated: 2024-08-06T15:20:37.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was also reported, but it might not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/gpsd.git/commit/?id=dd9c3c2830cb8f8fd8491ce68c82698dc5538f50 - http://www.osvdb.or
s: - http://git.savannah.gnu.org/cgit/gpsd.git/commit/?id=dd9c3c2830cb8f8fd8491ce68c82698dc5538f50 - http://www.osvdb.org/93000 - http://ubuntu.com/usn/usn-1820-1 - http://openwall.com/lists/oss-security/2013/05/08/1 - http://openwall.com/lists/oss-security/2013/05/02/20 - http://lists.nongnu.org/archive/html/gpsd-dev/2013-05/msg00000.html - http://www.osvdb.org/93001
CVE ID: CVE-2013-2039 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-020/
CVE ID: CVE-2013-2040 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-021/
CVE ID: CVE-2013-2041 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tag parameter to apps/bookmarks/ajax/addBookmark.php or (2) dir parameter to apps/files/ajax/newfile.php, which is passed to apps/files/js/files.js. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-021/
CVE ID: CVE-2013-2042 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the url parameter to (1) apps/bookmarks/ajax/addBookmark.php or (2) apps/bookmarks/ajax/editBookmark.php. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-021/
CVE ID: CVE-2013-2043 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: apps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly check the ownership of a calendar, which allows remote authenticated users to download arbitrary calendars via the calendar_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-024/
CVE ID: CVE-2013-2044 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Login Page (index.php) in ownCloud before 5.0.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-022/
CVE ID: CVE-2013-2045 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T15:20:37.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/db.php in ownCloud Server 5.0.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/93384 - http://seclists.org/oss-sec/2013/q2/324 - http://owncloud.org/about/security/advisories/oC-SA-2013-019
CVE ID: CVE-2013-2046 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T15:20:37.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q2/324 - http://owncloud.org/about/security/advisories/oC-SA-2013-019 - http://osvdb.org/93383 - http://www.securityfocus.com/bid/59969
CVE ID: CVE-2013-2047 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting for the password parameter, which makes it easier for physically proximate attackers to guess the password. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-023/
CVE ID: CVE-2013-2048 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-025/
CVE ID: CVE-2013-2049 State: PUBLISHED Published: 2018-05-01T19:00:00 Last Updated: 2024-08-06T15:20:37.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=959041
CVE ID: CVE-2013-2050 State: PUBLISHED Published: 2014-01-11T01:00:00 Last Updated: 2024-08-06T15:20:37.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124609/cfme_manageiq_evm_pass_reset.rb.txt - http://secunia.com/advisories/56181 - http://www.securityfocus.com/bid/64524 - https://exch
geiq_evm_pass_reset.rb.txt - http://secunia.com/advisories/56181 - http://www.securityfocus.com/bid/64524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89984 - https://bugzilla.redhat.com/show_bug.cgi?id=959062
CVE ID: CVE-2013-2051 State: PUBLISHED Published: 2013-07-09T17:00:00 Last Updated: 2024-08-06T15:20:37.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60187 - https://bugzilla.redhat.com/show_bug.cgi?id=959047 - http://rhn.redhat.com/errata/RHSA-2013-0869.html
CVE ID: CVE-2013-2052 State: PUBLISHED Published: 2013-07-09T17:00:00Z Last Updated: 2024-09-16T19:00:23.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2053 and CVE-2013-2054. Additional Analyst Notes: - CVE Program Container: References: - https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html - https://libreswan.org/security/CVE-201
erences: - https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html - https://libreswan.org/security/CVE-2013-2052/CVE-2013-2052.txt
CVE ID: CVE-2013-2053 State: PUBLISHED Published: 2013-07-09T17:00:00 Last Updated: 2024-08-06T15:20:37.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054. Additional Analyst Notes: - CVE Program Container: References: - https://www.openswan.org/news/13 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00008.html
erences: - https://www.openswan.org/news/13 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00008.html - http://rhn.redhat.com/errata/RHSA-2013-0827.html - http://www.securityfocus.com/bid/59838 - https://bugzilla.redhat.com/show_bug.cgi?id=960229 - https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html - http://www.debian.org/security/2014/dsa-2893
CVE ID: CVE-2013-2054 State: PUBLISHED Published: 2013-07-09T17:00:00Z Last Updated: 2024-08-06T15:20:37.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records. NOTE: this might be the same vulnerability as CVE-2013-2053 and CVE-2013-2054. Additional Analyst Notes: - CVE Program Container: References: - https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html - http://www.securityfocus.com/
iner: References: - https://lists.libreswan.org/pipermail/swan-announce/2013/000003.html - http://www.securityfocus.com/bid/59837 - http://download.strongswan.org/security/CVE-2013-2054/CVE-2013-2054.txt
CVE ID: CVE-2013-2055 State: PUBLISHED Published: 2014-02-10T23:00:00 Last Updated: 2024-08-06T15:20:37.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain sensitive information via vectors that cause raw HTML templates to be rendered without being processed and reading the information that is outside of wicket:panel markup. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Feb/38 - https://wicket.apache.org/2014/02/06/cve-2013-2055.html - http://osvdb.org/102955 - https://wicket.apache.o
014/Feb/38 - https://wicket.apache.org/2014/02/06/cve-2013-2055.html - http://osvdb.org/102955 - https://wicket.apache.org/2013/05/17/wicket-6.8.0-released.html - http://www.securityfocus.com/bid/65431
CVE ID: CVE-2013-2056 State: PUBLISHED Published: 2013-07-31T10:00:00Z Last Updated: 2024-08-06T15:20:37.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0848.html - http://www.osvdb.org/93566 - http://secunia.com/advisories/53487
CVE ID: CVE-2013-2057 State: PUBLISHED Published: 2020-02-11T17:41:01 Last Updated: 2024-08-06T15:20:37.509Z Vendors: YaBB Products: YaBB Problem Types: Local File Include Description: YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84034 - http://www.openwall.com/lists/oss-security/2013/05/05/1