Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2798 State: PUBLISHED Published: 2013-08-09T23:00:00Z Last Updated: 2024-09-17T02:31:55.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-219-01
CVE ID: CVE-2013-2799 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-2800 State: PUBLISHED Published: 2013-08-22T01:00:00Z Last Updated: 2024-09-17T01:51:23.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service (memory consumption or memory corruption, instance shutdown, and data-collection outage) via crafted C37.118 configuration packets. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-225-02
CVE ID: CVE-2013-2801 State: PUBLISHED Published: 2013-08-22T01:00:00Z Last Updated: 2024-09-16T22:21:19.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service (instance shutdown and data-collection outage) via crafted C37.118 configuration packets that trigger an invalid read operation. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-225-02
CVE ID: CVE-2013-2802 State: PUBLISHED Published: 2013-08-21T21:00:00Z Last Updated: 2024-09-16T23:45:42.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows remote attackers to execute arbitrary code; read, modify, or create files; or obtain file metadata via function opcodes. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-231-01
CVE ID: CVE-2013-2803 State: PUBLISHED Published: 2013-09-09T10:00:00Z Last Updated: 2024-09-16T20:48:09.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-248-01
CVE ID: CVE-2013-2804 State: PUBLISHED Published: 2013-08-28T01:00:00Z Last Updated: 2024-09-16T19:39:55.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP Master Driver in Software Toolbox TOP Server before 5.12.140.0 allows remote attackers to cause a denial of service (master-station infinite loop) via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service (master-station infinite loop) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://support.softwaretoolbox.com/app/answers/detail/a_id/3014 - http://ics-cert.us-cert.gov/advisories/ICSA-13-234-02
CVE ID: CVE-2013-2805 State: PUBLISHED Published: 2019-03-26T17:04:00 Last Updated: 2024-08-06T15:52:20.500Z Vendors: Rockwell Automation Products: RSLinx Enterprise Software Problem Types: CWE-125 Description: Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with an incorrect value in the “Record Data Size” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to
ize” field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to this vulnerability can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599 Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02
CVE ID: CVE-2013-2806 State: PUBLISHED Published: 2019-03-26T16:47:24 Last Updated: 2024-08-06T15:52:21.058Z Vendors: Rockwell Automation Products: RSLinx Enterprise Software Problem Types: CWE-190 Description: Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the “End of Current Record” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to a specifically oversized value, the service will calculate an undersized value for the “Total Record Size
ld modified to a specifically oversized value, the service will calculate an undersized value for the “Total Record Size.” Then the service will calculate an incorrect value for the “End of Current Record” field causing access violations that lead to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation security advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599 Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02
CVE ID: CVE-2013-2807 State: PUBLISHED Published: 2019-03-26T16:35:16 Last Updated: 2024-08-06T15:52:20.544Z Vendors: Rockwell Automation Products: RSLinx Enterprise Software Problem Types: CWE-190 Description: Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the “Total Record Size” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to a specifically oversized value, the service will calculate an undersized value for the “Total Record Size” th
odified to a specifically oversized value, the service will calculate an undersized value for the “Total Record Size” that will cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599 Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02
CVE ID: CVE-2013-2808 State: PUBLISHED Published: 2013-10-05T10:00:00Z Last Updated: 2024-09-16T17:14:50.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote attackers to execute arbitrary code via a crafted HTTP request to the Connect broker on TCP port 6000. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-277-01
CVE ID: CVE-2013-2809 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2024-08-06T15:52:19.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service (interface shutdown) via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-098-01
CVE ID: CVE-2013-2810 State: PUBLISHED Published: 2014-12-08T11:00:00 Last Updated: 2024-08-06T15:52:21.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-13-259-01A - http://www.securityfocus.com/bid/71425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99131
CVE ID: CVE-2013-2811 State: PUBLISHED Published: 2013-11-22T01:00:00 Last Updated: 2024-08-06T15:52:21.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805 - http://ics-cert.us-cert.gov/advisories/ICSA-13-2
- http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805 - http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01 - http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02 - http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdf
CVE ID: CVE-2013-2813 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T15:52:21.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service (reboot or link outage) via a crafted DNP3 TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-346-01
CVE ID: CVE-2013-2814 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T15:52:21.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled exception and process crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-346-02
CVE ID: CVE-2013-2815 State: REJECTED Published: 2017-03-15T18:00:00 Last Updated: 2017-03-15T17:57:01 Description: No description available.
CVE ID: CVE-2013-2816 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T15:52:20.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service (reboot or link outage) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-346-01
CVE ID: CVE-2013-2817 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T15:52:21.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click. Additional Analyst Notes: - CVE Program Container: References: - http://www.meau.com/eprise/main/sites/public/Products/Software/-MC_Works - http://ics-cert.us-cert.gov/advisories/ICSA-14-051-02
CVE ID: CVE-2013-2818 State: PUBLISHED Published: 2013-12-01T15:00:00 Last Updated: 2024-08-06T15:52:20.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service (infinite loop and DNP3 service disruption) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-282-01A
CVE ID: CVE-2013-2819 State: PUBLISHED Published: 2014-01-15T16:00:00 Last Updated: 2024-08-06T15:52:19.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action. Additional Analyst Notes: - CVE Program Container: References: - http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
CVE ID: CVE-2013-2820 State: PUBLISHED Published: 2014-01-15T16:00:00 Last Updated: 2024-08-06T15:52:20.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388. Additional Analyst Notes: - CVE Program Container: References: - http://www.sierrawireless.com/resources/support/airlink/docs/raven%20security%20vulnerability%202014-01-10.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-14-007-01A
CVE ID: CVE-2013-2821 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T15:52:21.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow remote attackers to cause a denial of service (driver crash and process restart) via a crafted DNP3 TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01
CVE ID: CVE-2013-2822 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T15:52:20.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically proximate attackers to cause a denial of service (driver crash and process restart) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-352-01
CVE ID: CVE-2013-2823 State: PUBLISHED Published: 2013-11-22T01:00:00 Last Updated: 2024-08-06T15:52:19.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805 - http://ics-cert.us-cert.gov
ontainer: References: - http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15805 - http://ics-cert.us-cert.gov/advisories/ICSA-13-297-01 - http://ics-cert.us-cert.gov/advisories/ICSA-13-297-02 - http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15805/en_US/GEIP13-04%20Security%20Advisory%20-%20Proficy%20HMI%20SCADA%20DNP3%20Driver%20from%20Catapult%20Software.pdf
CVE ID: CVE-2013-2824 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T15:52:20.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.citect.schneider-electric.com/security-DoS - http://ics-cert.us-cert.gov/advisories/ICSA-13-350-01
CVE ID: CVE-2013-2825 State: PUBLISHED Published: 2013-12-04T20:00:00 Last Updated: 2024-08-06T15:52:20.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service (CPU consumption and communication outage) via crafted input. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-337-01
CVE ID: CVE-2013-2826 State: PUBLISHED Published: 2014-01-15T16:00:00 Last Updated: 2024-08-06T15:52:20.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than on the server, which allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01
CVE ID: CVE-2013-2827 State: PUBLISHED Published: 2014-01-15T16:00:00 Last Updated: 2024-08-06T15:52:20.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01
CVE ID: CVE-2013-2828 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2024-08-06T15:52:20.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service (interface shutdown) via crafted input over a serial line. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-098-01
CVE ID: CVE-2013-2829 State: PUBLISHED Published: 2014-02-13T22:00:00 Last Updated: 2024-08-06T15:52:20.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed DNP3 packet. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-14-010-01
CVE ID: CVE-2013-2830 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T15:52:20.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-005
CVE ID: CVE-2013-2832 State: PUBLISHED Published: 2013-04-16T20:00:00Z Last Updated: 2024-09-16T20:01:39.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html - https://code.google.com/p/chromium/issues/detail?id=227197 - http://git.chromium.org/gitweb/?p=chromiumos/over
os.html - https://code.google.com/p/chromium/issues/detail?id=227197 - http://git.chromium.org/gitweb/?p=chromiumos/overlays/chromiumos-overlay.git%3Ba=commit%3Bh=9181705680e1f53fd1e895ebe84c1b7f18c5c380
CVE ID: CVE-2013-2833 State: PUBLISHED Published: 2013-04-16T20:00:00Z Last Updated: 2024-09-17T01:06:31.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html - http://git.chromium.org/gitweb/?p=chromiumos/overlays/chromiumos-overlay.git%3Ba=com
channel-update-for-chrome-os.html - http://git.chromium.org/gitweb/?p=chromiumos/overlays/chromiumos-overlay.git%3Ba=commit%3Bh=9181705680e1f53fd1e895ebe84c1b7f18c5c380 - https://code.google.com/p/chromium/issues/detail?id=227181
CVE ID: CVE-2013-2834 State: PUBLISHED Published: 2013-04-16T20:00:00Z Last Updated: 2024-09-16T17:18:41.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=227158 - http://googlechromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html - http://git.chromium.org/gitweb/?p=chromi
echromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html - http://git.chromium.org/gitweb/?p=chromiumos/overlays/chromiumos-overlay.git%3Ba=commit%3Bh=9181705680e1f53fd1e895ebe84c1b7f18c5c380
CVE ID: CVE-2013-2835 State: PUBLISHED Published: 2013-04-16T20:00:00Z Last Updated: 2024-09-16T19:05:07.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/04/stable-channel-update-for-chrome-os.html - https://code.google.com/p/chromium/issues/detail?id=196456
CVE ID: CVE-2013-2836 State: PUBLISHED Published: 2013-05-22T10:00:00 Last Updated: 2024-08-06T15:52:20.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=226012 - https://code.google.com/p/chromium/issues/detail?id=223034 - https://code.google.com/p/chromium/issues/detail?id=181438 - https://code.google.com/p/chromium/issues/detail?id=222036 - https://code.google.com/p/chromium/issues/detail?id=2