Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5944 State: PUBLISHED Published: 2013-10-03T10:00:00 Last Updated: 2024-08-06T17:29:42.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-176087.pdf
CVE ID: CVE-2013-5945 State: PUBLISHED Published: 2020-02-11T01:54:15 Last Updated: 2024-08-06T17:29:42.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary SQL commands via the password to (1) the login.authenticate function in share/lua/5.1/teamf1lualib/login.lua or (2) captivePortal.lua. Additional Analyst Notes: - CVE Program Container: References: - http://tsd.dlink.com.tw/temp/PMD/12
captivePortal.lua. Additional Analyst Notes: - CVE Program Container: References: - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.exploit-db.com/exploits/30061
CVE ID: CVE-2013-5946 State: PUBLISHED Published: 2013-12-19T02:00:00 Last Updated: 2024-08-06T17:29:42.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "Ping or Trace an IP Address" or (2) "Perform a DNS Lookup" section. Additional Analyst Notes: - CVE Program Container: References: - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2
ion. Additional Analyst Notes: - CVE Program Container: References: - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf - http://www.exploit-db.com/exploits/30061
CVE ID: CVE-2013-5948 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T17:29:41.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/59 - http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29 - https://support.t-mobile.com/docs/DOC-21994 - http://seclists.org/fulldisclosure/2014/
oad.aspx?m=RT-N66U+%28VER.B1%29 - https://support.t-mobile.com/docs/DOC-21994 - http://seclists.org/fulldisclosure/2014/Apr/66
CVE ID: CVE-2013-5951 State: PUBLISHED Published: 2014-03-25T15:00:00 Last Updated: 2024-08-06T17:29:41.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) application.js.php in scripts/ or (2) admin.php, (3) copy_move.php, (4) functions.php, (5) header.php, or (6) upload.php in include/. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0273.html - http://secunia.com/advisories/57387 - http://www.securityfocus
neohapsis.com/archives/fulldisclosure/2014-03/0273.html - http://secunia.com/advisories/57387 - http://www.securityfocus.com/bid/66262 - http://www.debian.org/security/2014/dsa-2882 - http://secunia.com/advisories/57482
CVE ID: CVE-2013-5952 State: PUBLISHED Published: 2014-03-19T14:00:00 Last Updated: 2024-08-06T17:29:42.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com_freichat) component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) xhash parameter to client/chat.php or (3) toname parameter to client/plugins/upload/upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57361 - http://packetstormsecurity.com/files/125737 - http://www.securityfocus.com/bid/66254 - http://archives.neohapsis.com/
- http://packetstormsecurity.com/files/125737 - http://www.securityfocus.com/bid/66254 - http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0275.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/91824
CVE ID: CVE-2013-5953 State: PUBLISHED Published: 2014-03-19T14:00:00 Last Updated: 2024-08-06T17:29:41.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) calid or (2) paletteDefault parameter in an editevent action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125738 - http://secunia.com/advisories/57360 - http://archives.neohapsis.com/archives/fulldisclos
tormsecurity.com/files/125738 - http://secunia.com/advisories/57360 - http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0276.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/91820
CVE ID: CVE-2013-5954 State: PUBLISHED Published: 2014-04-25T10:00:00 Last Updated: 2024-08-06T17:29:41.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete (1) users via admin/agency-user-unlink.php, (2) advertisers via admin/advertiser-delete.php, (3) banners via admin/banner-delete.php, (4) campaigns via admin/campaign-delete.php, (5) channels via admin/channel-delete.php, (6) affiliate websites via admin/affiliate-delete.php, or (7) zones via admin/zone-delete.php. Additional Analyst Notes: - CVE P
liate websites via admin/affiliate-delete.php, or (7) zones via admin/zone-delete.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/May/68 - http://packetstormsecurity.com/files/125735 - http://seclists.org/fulldisclosure/2014/Mar/270 - http://www.securityfocus.com/bid/66251 - http://www.securityfocus.com/archive/1/532108/100/0/threaded - http://www.revive-adserver.com/security/revive-sa-2014-001/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/91889
CVE ID: CVE-2013-5955 State: PUBLISHED Published: 2014-03-19T14:00:00 Last Updated: 2024-08-06T17:29:42.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manage.php in the PBBooking (com_pbbooking) component 2.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the an arbitrary parameter in an edit action to administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91823 - http://www.securityfocus.com/bid/66257 - http://seclists.org/fulldisclosure/2014/Mar/269
CVE ID: CVE-2013-5956 State: PUBLISHED Published: 2014-04-25T10:00:00 Last Updated: 2024-08-06T17:29:42.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery (com_youtubegallery) component 3.4.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the videofile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Mar/264 - http://packetstormsecurity.com/files/125732/Joomla-Youtube-Gallery-3.4.0-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2014/Mar/288
CVE ID: CVE-2013-5957 State: PUBLISHED Published: 2013-11-27T18:00:00 Last Updated: 2024-08-06T17:29:41.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL commands via the _value parameter to (1) ajax/jqState or (2) ajax/jqcounty. Additional Analyst Notes: - CVE Program Container: References: - https://www.navixia.com/blog/entry/navixia-finds-critical-vulnerability-in-civicrm-cve-2013-5957.html - https://www.navixia.com/company/navixia-news/395-navixia-finds-critical-vulnerability-in-civ
ivicrm-cve-2013-5957.html - https://www.navixia.com/company/navixia-news/395-navixia-finds-critical-vulnerability-in-civicrm.html - https://github.com/civicrm/civicrm-core/pull/1708.diff - https://civicrm.org/advisory/civi-sa-2013-009-sql-injection-vulnerability
CVE ID: CVE-2013-5958 State: PUBLISHED Published: 2014-12-27T18:00:00 Last Updated: 2024-08-06T17:29:42.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750. Additional Analyst Notes: - CVE Program Container: References: - http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released
CVE ID: CVE-2013-5959 State: PUBLISHED Published: 2013-09-28T19:00:00 Last Updated: 2024-08-06T17:29:41.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumption and dropped connections) via a recursive href in an HTML page, which triggers a large number of HTTP RW pipeline pre-fetch requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54991 - http://osvdb.org/97767 - https://kb.bluecoat.com/index?page=content&id=SA75 - http://www.securitytracker.com/id/1029088
CVE ID: CVE-2013-5960 State: PUBLISHED Published: 2013-09-30T10:00:00 Last Updated: 2024-08-06T17:29:42.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protection mechanisms via an attack against the intended cipher mode in a non-default configuration, a different vulnerability than CVE-2013-5679. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
bility than CVE-2013-5679. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62415 - http://lists.owasp.org/pipermail/esapi-dev/2013-August/002285.html - http://code.google.com/p/owasp-esapi-java/issues/detail?id=306 - https://github.com/ESAPI/esapi-java-legacy/issues/359 - https://github.com/esapi/esapi-java-legacy/issues/306 - https://github.com/ESAPI/esapi-java-legacy/blob/master/documentation/esapi4java-core-2.1.0.1-release-notes.txt - http://owasp-esapi-java.googlecode.com/svn/trunk/documentation/ESAPI-security-bulletin1.pdf
CVE ID: CVE-2013-5961 State: PUBLISHED Published: 2013-09-30T16:00:00 Last Updated: 2024-08-06T17:29:42.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in lazy-seo/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87384 - http://packetstormsecurity.com/files/123349 - http://www.exploit-db.com/exploits/28452 - http://osvdb.org/97662
CVE ID: CVE-2013-5962 State: PUBLISHED Published: 2013-09-30T16:00:00 Last Updated: 2024-08-06T17:29:42.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123303 - http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606 - http://www.vulnerabil
ity.com/files/123303 - http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606 - http://www.vulnerability-lab.com/get_content.php?id=1080 - http://www.exploit-db.com/exploits/28377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87172 - http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html - http://secunia.com/advisories/54894
CVE ID: CVE-2013-5963 State: PUBLISHED Published: 2013-09-30T16:00:00 Last Updated: 2024-08-06T17:29:42.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/wpdb/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87166 - http://plugins.trac.wordpress.org/changeset?reponame=&old=774214%40simple-dropbox-upload-form%2Ftrunk&new=774214%
7166 - http://plugins.trac.wordpress.org/changeset?reponame=&old=774214%40simple-dropbox-upload-form%2Ftrunk&new=774214%40simple-dropbox-upload-form%2Ftrunk - http://wordpress.org/plugins/simple-dropbox-upload-form/changelog - http://packetstormsecurity.com/files/123235 - http://secunia.com/advisories/54856
CVE ID: CVE-2013-5964 State: PUBLISHED Published: 2013-09-30T19:00:00Z Last Updated: 2024-09-17T00:55:58.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag title. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2075287 - http://seclists.org/fulldisclosure/2013/Aug/287 - http://osvdb.org/96750 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0184.html - https://drupal.org/node/2076221
CVE ID: CVE-2013-5965 State: PUBLISHED Published: 2013-09-30T19:00:00 Last Updated: 2024-08-06T17:29:41.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive information by reading a node listing. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2031621 - http://www.openwall.com/lists/oss-security/2013/09/11/9 - http://secunia.com/advisories/54550 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0184.html - https://drupal.org/node/2076315
CVE ID: CVE-2013-5966 State: PUBLISHED Published: 2013-11-19T15:00:00Z Last Updated: 2024-09-17T02:37:20.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0101.html - https://github.com/zkoss/zk/blob/v5.0.13/zkdoc/release-note - http://secunia.com/advisories/55690
CVE ID: CVE-2013-5967 State: PUBLISHED Published: 2013-10-09T14:44:00Z Last Updated: 2024-09-16T18:43:56.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-iso27001-potential.php, (2) radar-iso27001-A12IS_acquisition-pot.php, (3) radar-iso27001-A11AccessControl-pot.php, (4) radar-iso27001-A10Com_OP_Mgnt-pot.php, or (5) radar-pci-potential.php in RadarReport/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62790 -
RadarReport/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62790 - http://osvdb.org/ref/97/ossim-sql.txt - http://osvdb.org/98052
CVE ID: CVE-2013-5968 State: PUBLISHED Published: 2013-10-29T01:00:00 Last Updated: 2024-08-06T17:29:41.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character. Additional Analyst Notes: - CVE Program Container: References: - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B9B8E7A8A-2A00-4456-A7CC-8C2E74AA7EA5%7D - http://www.securitytracker.com/id/1029237 - http://osvdb.org/98919 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0120.htm
ecuritytracker.com/id/1029237 - http://osvdb.org/98919 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0120.html - http://seclists.org/fulldisclosure/2013/Oct/230
CVE ID: CVE-2013-5970 State: PUBLISHED Published: 2013-10-21T10:00:00 Last Updated: 2024-08-06T17:29:42.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88135 - http://www.securityfocus.com/bid/63216 - http://www.securitytracker.com/id/1029206 - http://www.vmware.com/security/advisories/VMSA-2013-0012.html - http://osvdb.org/98719
CVE ID: CVE-2013-5971 State: PUBLISHED Published: 2013-10-21T10:00:00 Last Updated: 2024-08-06T17:29:42.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/98718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88134 - http://www.securityfocus.com/bid/63218 - http://www.vmware.com/security/advisories/VMSA-2013-0012.html
CVE ID: CVE-2013-5972 State: PUBLISHED Published: 2013-11-16T15:00:00Z Last Updated: 2024-09-17T01:56:56.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2013-0013.html
CVE ID: CVE-2013-5973 State: PUBLISHED Published: 2013-12-23T15:00:00 Last Updated: 2024-08-06T17:29:42.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89938 - http://www.securityfocus.com/archive/1/530482/100/0/threaded - http://osvdb.org/101387 - http://jvn.jp/en/jp/JVN13154935/index.h
ww.securityfocus.com/archive/1/530482/100/0/threaded - http://osvdb.org/101387 - http://jvn.jp/en/jp/JVN13154935/index.html - http://www.vmware.com/security/advisories/VMSA-2013-0016.html - http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000123.html - http://www.securityfocus.com/bid/64491 - http://www.securitytracker.com/id/1029529
CVE ID: CVE-2013-5974 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5975 State: PUBLISHED Published: 2013-10-01T20:00:00 Last Updated: 2024-08-06T17:29:42.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The access policy logon page (logon.inc) in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029079 - http://secunia.com/advisories/54844 - http://support.f5.com/kb/en-us/solutions/public/14000/700/sol14700.html
CVE ID: CVE-2013-5976 State: PUBLISHED Published: 2013-10-01T20:00:00 Last Updated: 2024-08-06T17:29:41.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRH_Session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54941 - http://www.securitytracker.com/id/1029079 - http://www.securityfocus.com/bid/62596 - http://support.f5.com/kb/en-us/solutions/public/14000/700/sol14712.html
CVE ID: CVE-2013-5977 State: PUBLISHED Published: 2013-11-01T14:00:00 Last Updated: 2024-08-06T17:29:42.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that (1) create or modify products or conduct cross-site scripting (XSS) attacks via the (2) Product name or (3) Price description field in a product save action via a request to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-10/0048