Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4926 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine whether there is remaining packet data to process, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8828 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcom-sysact.c?r1=50478&r2=50477&pathrev=50478 - http:
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcom-sysact.c?r1=50478&r2=50477&pathrev=50478 - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://www.wireshark.org/security/wnpa-sec-2013-44.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17547 - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50478
CVE ID: CVE-2013-4927 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop and CPU consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50134 - https://www.wi
ensuse-updates/2013-08/msg00009.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50134 - https://www.wireshark.org/security/wnpa-sec-2013-45.html - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17636 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8831 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-btsdp.c?r1=50134&r2=50133&pathrev=50134 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.ht
ssectors/packet-btsdp.c?r1=50134&r2=50133&pathrev=50134 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html
CVE ID: CVE-2013-4928 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the dissect_headers function in epan/dissectors/packet-btobex.c in the Bluetooth OBEX dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8875 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
ttp://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://www.wireshark.org/security/wnpa-sec-2013-46.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50258 - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-btobex.c?r1=50258&r2=50257&pathrev=50258 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17540
CVE ID: CVE-2013-4929 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:41.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://secunia.com/advisories/54425 - http://www.wiresha
p://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50450 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dis-pdus.c?r1=50450&r2=50449&pathrev=50450 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17028 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8911 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - https://www.wireshark.org/security/wnpa
g/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - https://www.wireshark.org/security/wnpa-sec-2013-47.html - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html
CVE ID: CVE-2013-4930 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_dvbci_tpdu_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not validate a certain length value before decrementing it, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - https://www.wireshark.or
cunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - https://www.wireshark.org/security/wnpa-sec-2013-48.html - http://secunia.com/advisories/54178 - http://secunia.com/advisories/54425 - http://www.debian.org/security/2013/dsa-2734 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8916 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16929 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view
/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50474 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dvbci.c?r1=50474&r2=50473&pathrev=50474 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html
CVE ID: CVE-2013-4931 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:41.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop) via a crafted packet that is not properly handled by the GSM RR dissector. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8923 - http://an
4-0341.html - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8923 - http://anonsvn.wireshark.org/viewvc/trunk/epan/proto.c?r1=50504&r2=50503&pathrev=50504 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50504 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://www.wireshark.org/security/wnpa-sec-2013-49.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17325 - http://www.wireshark.org/docs/relnotes/wireshark-1.
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17325 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html
CVE ID: CVE-2013-4932 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM A Common dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allow remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50672 - http://secunia.com/advisories/54178 - http://
.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50672 - http://secunia.com/advisories/54178 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - http://www.debian.org/security/2013/dsa-2734 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_a_common.c?r1=50672&r2=50671&pathrev=50672 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17260 - https://www.wireshark.org/security/wnpa-sec-2013-50.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.
https://www.wireshark.org/security/wnpa-sec-2013-50.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8940
CVE ID: CVE-2013-4933 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:41.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49673 - https://oval.cisecur
-updates/2013-08/msg00009.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49673 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17412 - http://secunia.com/advisories/54178 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - http://www.debian.org/security/2013/dsa-2734 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - https://www.wireshark.org/security/wnpa-sec-2013-51.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - https://bugs.wireshark.org/bugzilla/show_bug
nsuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8742 - http://anonsvn.wireshark.org/viewvc/trunk/wiretap/netmon.c?r1=49673&r2=49672&pathrev=49673 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html
CVE ID: CVE-2013-4934 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize certain structure members, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc/trunk/wiretap/netmon.c?r1=49697&r2=49696&pathrev=49697 - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-0
1=49697&r2=49696&pathrev=49697 - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://secunia.com/advisories/54178 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17584 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - http://www.debian.org/security/2013/dsa-2734 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - https://www.wireshark.org/security/wnpa-sec-2013-51.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49697 - http://lists.opensuse.org/opensuse-updates/2
05.xml - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49697 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8742 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html
CVE ID: CVE-2013-4935 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not initialize a length field in certain abnormal situations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://secunia.com/advisories/5417
advisories/54371 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00009.html - http://secunia.com/advisories/54178 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - https://www.wireshark.org/security/wnpa-sec-2013-52.html - http://www.debian.org/security/2013/dsa-2734 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-per.c?r1=49985&r2=49984&pathrev=49985 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view=revisio
e-updates/2013-08/msg00004.html - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17417 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8722 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html
CVE ID: CVE-2013-4936 State: PUBLISHED Published: 2013-07-29T19:00:00 Last Updated: 2024-08-06T16:59:40.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2013-53.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50651 - http://secunia.com/advisories/54425 - http://www
ml - http://anonsvn.wireshark.org/viewvc?view=revision&revision=50651 - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8904 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16971 - http://secunia.com/advisories/54296 - http://anonsvn.wireshark.org/viewvc/trunk/plugins/profinet/packet-pn-rt.c?r1=50651&r2=50650&pathrev=50651
CVE ID: CVE-2013-4937 State: PUBLISHED Published: 2013-07-26T10:00:00Z Last Updated: 2024-09-17T02:46:42.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U with firmware before 3.0.4.372 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://reviews.cnet.com/8301-3132_7-57594003-98 - http://twitter.com/ASUSUSA/statuses/357612236392509440
CVE ID: CVE-2013-4938 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-16T20:02:33.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly support the sendname, sendemailaddr, and acceptgrades settings, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging an environment in which there was an ineffective attempt to enable the more secure values. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/d
the more secure values. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232497 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-40308
CVE ID: CVE-2013-4939 State: PUBLISHED Published: 2013-07-26T22:00:00 Last Updated: 2024-08-06T16:59:41.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232496 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39
s://moodle.org/mod/forum/discuss.php?d=232496 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39678 - http://yuilibrary.com/support/20130515-vulnerability/ - https://lists.apache.org/thread.html/d8b9403dbab85a51255614949938b619bd03b1c944c76c48c6996a0e%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/72837f969cdf9b63a7e7337edd069fa3b3950eea7c997cc2ff61aa0c%40%3Cissues.zookeeper.apache.org%3E
CVE ID: CVE-2013-4940 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-17T02:06:31.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232496 - http://git.mo
Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232496 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39678 - http://yuilibrary.com/support/20130515-vulnerability/
CVE ID: CVE-2013-4941 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-16T18:56:17.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232496 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=M
https://moodle.org/mod/forum/discuss.php?d=232496 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39678 - http://yuilibrary.com/support/20130515-vulnerability/
CVE ID: CVE-2013-4942 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-16T17:15:23.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232496 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commi
es: - https://moodle.org/mod/forum/discuss.php?d=232496 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39678 - http://yuilibrary.com/support/20130515-vulnerability/
CVE ID: CVE-2013-4943 State: PUBLISHED Published: 2013-08-09T19:00:00Z Last Updated: 2024-09-16T21:08:25.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-970879.pdf
CVE ID: CVE-2013-4944 State: PUBLISHED Published: 2013-07-29T21:00:00 Last Updated: 2024-08-06T16:59:40.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendship_request_message parameter to wp-admin/admin-ajax.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85416 - http://secunia.com/adviso
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85416 - http://secunia.com/advisories/54048 - http://wordpress.org/plugins/buddypress-extended-friendship-request/changelog/ - http://osvdb.org/94807