Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
edoraproject.org/pipermail/package-announce/2013-May/106965.html - http://openwall.com/lists/oss-security/2013/05/21/1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38443 - https://moodle.org/mod/forum/discuss.php?d=228930 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
CVE ID: CVE-2013-2080 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T15:27:40.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core_grade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37475 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html - http://op
=HEAD&st=commit&s=MDL-37475 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html - http://openwall.com/lists/oss-security/2013/05/21/1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html - https://moodle.org/mod/forum/discuss.php?d=228931
CVE ID: CVE-2013-2081 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T15:27:40.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37822 - https://moodle.org/mod/forum/discuss.php?d=228933 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html - http://openwall.co
scuss.php?d=228933 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html - http://openwall.com/lists/oss-security/2013/05/21/1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
CVE ID: CVE-2013-2082 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T15:27:40.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37245 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html - http://openwall.com/lists/oss-security/2013/05/21/1 - http://lists.f
g/pipermail/package-announce/2013-May/106965.html - http://openwall.com/lists/oss-security/2013/05/21/1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html - https://moodle.org/mod/forum/discuss.php?d=228934 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
CVE ID: CVE-2013-2083 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T15:27:40.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885 - http://openwall.com/lis
-May/106965.html - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885 - http://openwall.com/lists/oss-security/2013/05/21/1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html - https://moodle.org/mod/forum/discuss.php?d=228935
CVE ID: CVE-2013-2084 State: REJECTED Published: 2022-06-27T15:58:44 Last Updated: 2022-06-27T15:58:44 Description: No description available.
CVE ID: CVE-2013-2085 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:27:41.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0.6 allows remote authenticated users to access arbitrary files via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-020/
CVE ID: CVE-2013-2086 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:27:41.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-027/
CVE ID: CVE-2013-2087 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T15:27:40.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) movie title to modules/gallery/controllers/movies.php or (2) key variable to modules/gallery/views/error_admin.html.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/apps/trac/gallery/ticket/2064 - http://www.openwall.com/lists/oss-security/2013/05/14/1 - http://www.openwall.com/lists/oss-security/2013/05/13/2 - http://osvdb.org/92691
.com/lists/oss-security/2013/05/14/1 - http://www.openwall.com/lists/oss-security/2013/05/13/2 - http://osvdb.org/92691 - http://www.securityfocus.com/bid/59469 - http://osvdb.org/92740 - http://galleryproject.org/gallery_3_0_7
CVE ID: CVE-2013-2088 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T15:27:40.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvTxsMFeHgc8bK2V-2PrSrKoBffTi8%2BxbHA5tocrrewWew%40mail.gmail.com%3E - http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvRK51pQsybfvsAzjxQJrmVpL0fEa1K4WGkU
- http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvRK51pQsybfvsAzjxQJrmVpL0fEa1K4WGkUP9Tzz6KFDw%40mail.gmail.com%3E - https://subversion.apache.org/security/CVE-2013-2088-advisory.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18772 - https://www.exploit-db.com/exploits/40507/ - http://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html
CVE ID: CVE-2013-2089 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:27:40.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted file, then accessing it via a direct request to the file in /data. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-026/
CVE ID: CVE-2013-2090 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T15:27:40.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_meta_data function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84271 - http://www.vapid.dhs.org/advisories/cremefraiche-cmd-inj.html - http://secunia.com/advisories/53391 - http://packetsto
- http://www.vapid.dhs.org/advisories/cremefraiche-cmd-inj.html - http://secunia.com/advisories/53391 - http://packetstormsecurity.com/files/121635/Ruby-Gem-Creme-Fraiche-0.6-Command-Injection.html - http://osvdb.org/93395
CVE ID: CVE-2013-2091 State: PUBLISHED Published: 2019-11-20T19:52:37 Last Updated: 2024-08-06T15:27:40.597Z Vendors: dolibarr Products: dolibarr Problem Types: SQL Injection Description: SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2091 - http://www.openwall.com/lists/oss-security/2013/05/14/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84248 - https://github.com/Dolibarr/dolibarr/commit/9427e32e2ed54c1a2bc519a88c057207836df489
CVE ID: CVE-2013-2092 State: PUBLISHED Published: 2019-11-20T20:09:11 Last Updated: 2024-08-06T15:27:40.702Z Vendors: dolibarr Products: dolibarr Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2092 - http://www.openwall.com/lists/oss-security/2013/05/14/3 - https://github.com/Dolibarr/dolibarr/commit/8a90598b23e1b2689848187941f7a96b04907005
CVE ID: CVE-2013-2093 State: PUBLISHED Published: 2019-11-20T20:13:17 Last Updated: 2024-08-06T15:27:40.625Z Vendors: dolibarr Products: dolibarr Problem Types: Other Description: Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/14/3 - https://security-tracker.debian.org/tracker/CVE-2013-2093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84249 - https://github.com/Dolibarr/dolibarr/commit/526a80dd202bbca396687a502d52c27e06e97fff
CVE ID: CVE-2013-2094 State: PUBLISHED Published: 2013-05-14T20:00:00.000Z Last Updated: 2025-10-22T00:05:42.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.html - http://lkml.ind
rity/advisories?name=MDVSA-2013:176 - http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.html - http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/03652.html - http://lists.centos.org/pipermail/centos-announce/2013-May/019733.html - http://www.ubuntu.com/usn/USN-1826-1 - http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/03976.html - http://www.ubuntu.com/usn/USN-1838-1 - https://bugzilla.redhat.com/show_bug.cgi?id=962792 - https://github.com/torvalds/linux/commit/8176cced706b5e5d15887584150764894e94e02f - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 - http://www.ubuntu.com/usn/USN-1828-1 - http://lists.centos.org/pipermail/centos-announce/2013-May/019729.html -
-3.8.9 - http://www.ubuntu.com/usn/USN-1828-1 - http://lists.centos.org/pipermail/centos-announce/2013-May/019729.html - http://www.ubuntu.com/usn/USN-1827-1 - http://www.ubuntu.com/usn/USN-1836-1 - http://www.osvdb.org/93361 - http://www.exploit-db.com/exploits/33589 - http://rhn.redhat.com/errata/RHSA-2013-0830.html - http://news.ycombinator.com/item?id=5703758 - http://www.openwall.com/lists/oss-security/2013/05/14/6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8176cced706b5e5d15887584150764894e94e02f - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00008.html - http://packetstormsecurity.com/files/121616/semtex.c - http://lists.opensu
use-security-announce/2013-05/msg00008.html - http://packetstormsecurity.com/files/121616/semtex.c - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://twitter.com/djrbliss/statuses/334301992648331267 - http://www.reddit.com/r/netsec/comments/1eb9iw - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html - http://www.ubuntu.com/usn/USN-1825-1 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html
CVE ID: CVE-2013-2095 State: PUBLISHED Published: 2019-12-10T13:21:05 Last Updated: 2024-08-06T15:27:40.725Z Vendors: rubygem-openshift-origin-controller Products: rubygem-openshift-origin-controller Problem Types: cartridge_cache.rb URI.prase() command injection Description: rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2095 - https://access.redhat.com/security/cve/cve-2013-2095
CVE ID: CVE-2013-2096 State: PUBLISHED Published: 2013-07-09T17:00:00 Last Updated: 2024-08-06T15:27:40.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not contain a large amount of data. Additional Analyst Notes: - CVE Program Container: References: - https://review.openstack.org/#/c/28717/ - https://review.openstack.org/#/c/28901/ - http://www.ubuntu.com/usn/USN-1831-1 - http://lists.openstack.org/pipermail/openstack-announce/2
nstack.org/#/c/28901/ - http://www.ubuntu.com/usn/USN-1831-1 - http://lists.openstack.org/pipermail/openstack-announce/2013-May/000102.html - https://review.openstack.org/#/c/29192/ - http://www.securityfocus.com/bid/59924
CVE ID: CVE-2013-2097 State: PUBLISHED Published: 2020-02-12T15:09:01 Last Updated: 2024-08-06T15:27:40.653Z Vendors: ZPanel Products: ZPanel Problem Types: Remote Command Execution Description: ZPanel through 10.1.0 has Remote Command Execution Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134030/Zpanel-10.1.0-Remote-Unauthenticated-Code-Execution.html - http://www.exploit-db.com/exploits/25519 - http://www.openwall.com/lists/oss-security/2013/05/16/12 - http://www.openwall.com/lists/oss-security/2013/05/16/16 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84364
CVE ID: CVE-2013-2098 State: REJECTED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T17:33:25.192Z Description: No description available.
CVE ID: CVE-2013-2099 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T15:27:40.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=963260 - http://www.ubuntu.com/usn/USN-1984-1 - http://secunia.com/advisor
- https://bugzilla.redhat.com/show_bug.cgi?id=963260 - http://www.ubuntu.com/usn/USN-1984-1 - http://secunia.com/advisories/55116 - https://access.redhat.com/errata/RHSA-2016:1166 - http://www.ubuntu.com/usn/USN-1985-1 - http://bugs.python.org/issue17980 - http://secunia.com/advisories/55107 - http://rhn.redhat.com/errata/RHSA-2014-1690.html - http://www.ubuntu.com/usn/USN-1983-1 - http://www.openwall.com/lists/oss-security/2013/05/16/6
CVE ID: CVE-2013-2100 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T15:27:40.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2013/05/16/3 - https://security.gentoo.org/glsa/201507-16 - https://bugs.gentoo.org/show_bug.cgi?id=469888 - http://openwall.com/lists/oss-security/2013/05/15/5
g/glsa/201507-16 - https://bugs.gentoo.org/show_bug.cgi?id=469888 - http://openwall.com/lists/oss-security/2013/05/15/5 - http://www.securityfocus.com/bid/59878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84315
CVE ID: CVE-2013-2101 State: PUBLISHED Published: 2019-12-03T13:08:36 Last Updated: 2024-08-06T15:27:40.626Z Vendors: Katello Products: Katello Problem Types: Multiple XSS in various entities Description: Katello has multiple XSS issues in various entities Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2101 - https://access.redhat.com/security/cve/cve-2013-2101
CVE ID: CVE-2013-2102 State: PUBLISHED Published: 2013-10-28T21:00:00Z Last Updated: 2024-08-06T15:27:40.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, which allows remote attackers to obtain sensitive information (diagnostics) by accessing the service. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1437.html - https://bugzilla.redhat.com/show_bug.cgi?id=963984
CVE ID: CVE-2013-2103 State: PUBLISHED Published: 2019-12-03T13:11:05 Last Updated: 2024-08-06T15:27:40.659Z Vendors: OpenShift cartridge Products: OpenShift cartridge Problem Types: remote URL retrieval Description: OpenShift cartridge allows remote URL retrieval Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2103 - https://access.redhat.com/security/cve/cve-2013-2103
CVE ID: CVE-2013-2104 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T15:27:40.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/28/7 - http://www.ubuntu.com/usn/USN-1851-1 - http://rhn.redhat.com/errata/RHSA-2013-0944.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00198.h
851-1 - http://rhn.redhat.com/errata/RHSA-2013-0944.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00198.html - https://bugs.launchpad.net/python-keystoneclient/+bug/1179615 - http://www.ubuntu.com/usn/USN-1875-1
CVE ID: CVE-2013-2105 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T15:27:41.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/18/4 - http://vapid.dhs.org/advisories/show_in_browser.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84378
CVE ID: CVE-2013-2106 State: PUBLISHED Published: 2019-12-03T13:21:11 Last Updated: 2024-08-06T15:27:40.892Z Vendors: webauth Products: webauth Problem Types: credential disclosure Description: webauth before 4.6.1 has authentication credential disclosure Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2106 - https://access.redhat.com/security/cve/cve-2013-2106 - http://www.openwall.com/lists/oss-security/2013/05/18/6
CVE ID: CVE-2013-2107 State: PUBLISHED Published: 2014-05-23T00:00:00 Last Updated: 2024-08-06T15:27:40.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailonupdate_mailto parameter in the mail-on-update page to wp-admin/options-general.php. NOTE: a third party claims that 5.2.1 and 5.2.2 are also vulnerable, but the issue might require a separate CVE identifier since this might reflect an incomplete fix. Additional Analyst Notes: - CV
issue might require a separate CVE identifier since this might reflect an incomplete fix. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/93452 - http://seclists.org/oss-sec/2013/q2/356 - http://wordpress.org/plugins/mail-on-update/changelog - http://secunia.com/advisories/53449
CVE ID: CVE-2013-2108 State: PUBLISHED Published: 2020-02-10T16:07:03 Last Updated: 2024-08-06T15:27:41.077Z Vendors: WP Cleanfix Plugin authors Products: WP Cleanfix Plugin Problem Types: CSRF Description: WordPress WP Cleanfix Plugin 2.4.4 has CSRF Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84435 - http://www.openwall.com/lists/oss-security/2013/05/18/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84562
CVE ID: CVE-2013-2109 State: PUBLISHED Published: 2020-02-10T16:12:55 Last Updated: 2024-08-06T15:27:40.661Z Vendors: wp-cleanfix authors Products: wp-cleanfix Problem Types: Code Execution Description: WordPress plugin wp-cleanfix has Remote Code Execution Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/18/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84434
CVE ID: CVE-2013-2110 State: PUBLISHED Published: 2013-06-21T20:00:00 Last Updated: 2024-08-06T15:27:40.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted argument to the quoted_printable_encode function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60411 - http://www.ubuntu.com/usn/USN-1872-1 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=
bid/60411 - http://www.ubuntu.com/usn/USN-1872-1 - http://www.php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=64879 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://support.apple.com/kb/HT5880