Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ibm.com/support/docview.wss?uid=isg400001843 - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=blob_plain%3Bf=CHANGES%3Bhb=refs/heads/OpenSSL_1_0_1-stable - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html - http://www-01.ibm.com/support/docview.wss?uid=isg400001841 - http://www.ubuntu.com/usn/USN-2079-1 - http://rhn.redhat.com/errata/RHSA-2014-0015.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=197e0ea817ad64820789d86711d55ff50d71f631 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html - https://bugzilla.redhat.com/show_bug.cgi?id=1049058 -
raproject.org/pipermail/package-announce/2014-August/136470.html - https://bugzilla.redhat.com/show_bug.cgi?id=1049058 - http://rhn.redhat.com/errata/RHSA-2014-0041.html - http://www.openssl.org/news/vulnerabilities.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html
CVE ID: CVE-2013-4354 State: PUBLISHED Published: 2013-11-23T17:00:00 Last Updated: 2024-08-06T16:38:01.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/19/3 - https://bugs.launchpad.net/glance/+bug/1226078 - http://www.openwall.com/lists/oss-security/2013/09/19/2
CVE ID: CVE-2013-4355 State: PUBLISHED Published: 2013-10-01T17:00:00 Last Updated: 2024-08-06T16:38:01.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://www.openwall.com/lists/oss-security/2013/09/30/1 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://rhn.redhat.com/
enwall.com/lists/oss-security/2013/09/30/1 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://rhn.redhat.com/errata/RHSA-2013-1790.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html
CVE ID: CVE-2013-4356 State: PUBLISHED Published: 2013-10-09T22:00:00 Last Updated: 2024-08-06T16:38:01.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54962 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/lists/oss-security/2013/09/30/2 - http://www.securityfocus.com/bid/62709
CVE ID: CVE-2013-4357 State: PUBLISHED Published: 2019-12-31T18:34:45 Last Updated: 2024-08-06T16:38:01.915Z Vendors: eglibc Products: eglibc Problem Types: Other Description: The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4357 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4357 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4357 - https://access.redhat.com/security/cve/cve-2013-4357 - http://www.openwall.com/lists/oss-security/2015/01/28/18 - http://www.openwall.com/l
at.com/security/cve/cve-2013-4357 - http://www.openwall.com/lists/oss-security/2015/01/28/18 - http://www.openwall.com/lists/oss-security/2015/01/29/21 - http://www.openwall.com/lists/oss-security/2015/02/24/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95103 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00020.html - http://www.openwall.com/lists/oss-security/2013/09/17/4 - http://www.openwall.com/lists/oss-security/2013/09/17/8 - http://www.securityfocus.com/bid/67992 - http://www.ubuntu.com/usn/USN-2306-1 - http://www.ubuntu.com/usn/USN-2306-2 - http://www.ubuntu.com/usn/USN-2306-3
CVE ID: CVE-2013-4358 State: PUBLISHED Published: 2013-12-24T19:00:00 Last Updated: 2024-08-06T16:38:02.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service (crash) via vectors related to alternating bit depths in H.264 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ffmpeg.org/security.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=072be3e8969f24113d599444be4d6a0ed04a6602
CVE ID: CVE-2013-4359 State: PUBLISHED Published: 2013-09-30T19:00:00 Last Updated: 2024-08-06T16:38:02.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in an authentication request, which triggers a large memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://kingcope.wordpress.com/2013/09/11/proftpd-mod_sftpmod_sftp_pam-invalid-pool-allocation-in-kbdint-authentication/ - http://www.openwall.com/lists/oss-security/2013/09/17/6 - http://www.debian.org/security/2013/d
kbdint-authentication/ - http://www.openwall.com/lists/oss-security/2013/09/17/6 - http://www.debian.org/security/2013/dsa-2767 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00032.html - http://bugs.proftpd.org/show_bug.cgi?id=3973
CVE ID: CVE-2013-4360 State: REJECTED Published: 2017-05-16T20:00:00 Last Updated: 2017-05-16T19:57:01 Description: No description available.
CVE ID: CVE-2013-4361 State: PUBLISHED Published: 2013-10-01T17:00:00 Last Updated: 2024-08-06T16:38:01.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for the source effective address, which allows local HVM guests to obtain hypervisor stack information by reading the values used by the instruction. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.openwall.com/lists/oss-security/2013/09/30/3 - http://www.debian.org/security/2014/d
/2014-03/msg00021.html - http://www.openwall.com/lists/oss-security/2013/09/30/3 - http://www.debian.org/security/2014/dsa-3006 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html
CVE ID: CVE-2013-4362 State: PUBLISHED Published: 2013-09-30T20:00:00 Last Updated: 2024-08-06T16:38:01.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2765 - http://osvdb.org/97417 - http://osvdb.org/97416 - https://security.gentoo.org/glsa/201612-02 - http://seclists.org/oss-sec/2013/q3/627 - http://savannah.nongnu.org/bugs/?40034 - http://www.securityfocus.com/bid/62445
CVE ID: CVE-2013-4363 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:38:01.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.2, 1.8.24 through 1.8.26, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression. NOTE: this issue is due to an incomplete fix for CVE-2013-4287. Additional Analyst Notes: - CVE Program Container: Refere
OTE: this issue is due to an incomplete fix for CVE-2013-4287. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2013-4363 - http://www.openwall.com/lists/oss-security/2013/09/18/8 - http://blog.rubygems.org/2013/09/24/CVE-2013-4363.html - http://www.openwall.com/lists/oss-security/2013/09/14/3 - http://www.openwall.com/lists/oss-security/2013/09/20/1
CVE ID: CVE-2013-4364 State: PUBLISHED Published: 2018-01-08T19:00:00 Last Updated: 2024-08-06T16:38:01.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink attack on an unspecified file in /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1009734
CVE ID: CVE-2013-4365 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:38:01.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55197 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00059.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00055.html - http://www.debian.org/security/2013/dsa-2778 - http://svn.apache.org/v
suse.org/opensuse-updates/2013-10/msg00055.html - http://www.debian.org/security/2013/dsa-2778 - http://svn.apache.org/viewvc?view=revision&revision=1527362 - http://www.securityfocus.com/bid/62939 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00011.html - http://www.mail-archive.com/dev%40httpd.apache.org/msg58077.html
CVE ID: CVE-2013-4366 State: PUBLISHED Published: 2017-10-30T19:00:00 Last Updated: 2024-08-06T16:38:01.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/r1528614 - http://www.apache.org/dist/httpcomponents/httpclient/RELEASE_NOTES-4.3.x.txt
CVE ID: CVE-2013-4367 State: PUBLISHED Published: 2019-11-01T17:20:45 Last Updated: 2024-08-06T16:38:01.926Z Vendors: ovirt-engine Products: ovirt-engine Problem Types: Insecure Permissions Description: ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod() works when passed a mode of '-1'. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4367 - https://access.redhat.com/security/cve/cve-2013-4367
CVE ID: CVE-2013-4368 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:38:02.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified vectors related to stale data in a segment register. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.
.org/opensuse-security-announce/2014-04/msg00000.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/lists/oss-security/2013/10/10/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87799 - http://rhn.redhat.com/errata/RHSA-2013-1449.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html
CVE ID: CVE-2013-4369 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:38:01.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer dereference) by using the "@" character as the VIF rate configuration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87798 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/lists/oss-security/2013/10/10/11
CVE ID: CVE-2013-4370 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:38:01.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors that trigger a (1) use-after-free or (2) double free. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/att-61/xsa69.patch - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/li
org/oss-sec/2013/q4/att-61/xsa69.patch - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/lists/oss-security/2013/10/10/13
CVE ID: CVE-2013-4371 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:38:02.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in Xen 4.2.x and 4.3.x, when running "under memory pressure," returns the original pointer when the realloc function fails, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/lists/oss-security/2013/10/1
References: - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/lists/oss-security/2013/10/10/12
CVE ID: CVE-2013-4372 State: PUBLISHED Published: 2013-09-30T19:00:00 Last Updated: 2024-08-06T16:38:02.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers to inject arbitrary web script or HTML via the (1) user field in the create user page or (2) profile version to the create profile page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1862.html - http://www.securityfocus.com/bid/62659 - http://fusesource.com/issues/browse/FMC-495 - http://rhn.
RHSA-2013-1862.html - http://www.securityfocus.com/bid/62659 - http://fusesource.com/issues/browse/FMC-495 - http://rhn.redhat.com/errata/RHSA-2013-1286.html - http://fusesource.com/forge/git/fuseenterprise.git/?p=fuseenterprise.git%3Ba=commitdiff%3Bh=f5436ea1c5547c851bb6f92561272fe42c146e68 - https://bugzilla.redhat.com/show_bug.cgi?id=1011736 - https://github.com/jboss-fuse/fuse/commit/e280cb370323eeb759030919d5111ed809e8ded5
CVE ID: CVE-2013-4373 State: PUBLISHED Published: 2013-10-24T01:00:00 Last Updated: 2024-08-06T16:38:02.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88179 - https://bugzilla.redhat.com/show_bug.cgi?id=1011824 - http://rhn.redhat.com/errata/RHSA-2013-1448.html
CVE ID: CVE-2013-4374 State: PUBLISHED Published: 2019-11-04T21:16:52 Last Updated: 2024-08-06T16:38:01.916Z Vendors: RHQ Mongo DB Drift Server Products: RHQ Mongo DB Drift Server Problem Types: Malicious change set import due to insecure temporary file usage Description: An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4374 - https://access.redhat.com/security/cve/cve-2013-4374
CVE ID: CVE-2013-4375 State: PUBLISHED Published: 2014-01-19T18:00:00 Last Updated: 2024-08-06T16:38:01.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant reference consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://xenproject.org/downloads/xen-archives/supported-xen-43-series/xen-431.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.ubuntu.com/usn/USN-2092-1 - http://www.openwall.com/lists/oss-security/2013/10/10/14
CVE ID: CVE-2013-4376 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T16:38:02.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201310-19.xml - http://code.x2go.org/gitweb?p=x2goserver.git%3Ba=commit%3Bh=42264c88d7885474ebe3763b2991681ddfcfa69a - http://www.openwall.com/lists/oss-security/2013/09/25/11 - https://lists.berlios.de/piperm
474ebe3763b2991681ddfcfa69a - http://www.openwall.com/lists/oss-security/2013/09/25/11 - https://lists.berlios.de/pipermail/x2go-announcement/2013-May/000125.html
CVE ID: CVE-2013-4377 State: PUBLISHED Published: 2013-10-11T22:00:00 Last Updated: 2024-08-06T16:38:02.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-devel/2013-09/msg03347.html - https://bugzilla.redhat.com/show_bug.cgi?id=1012633 - http://secunia.com/advisories/55015 - http://www.ubuntu.com/usn/USN-2092-1 - http://www.openwall.com/lists/oss-security/2013/09/26/5
CVE ID: CVE-2013-4378 State: PUBLISHED Published: 2013-09-30T16:00:00Z Last Updated: 2024-09-17T00:51:25.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q3/679 - https://code.google.com/p/javamelody/source/detail?r=3515 - https://code.google.com/p/javamelody/wiki/ReleaseNotes - http://www.securityfocus.com/bid/62679 - https://code.google.com/p/javamelody/issues/detail?id=3
ody/wiki/ReleaseNotes - http://www.securityfocus.com/bid/62679 - https://code.google.com/p/javamelody/issues/detail?id=346 - http://osvdb.org/97778
CVE ID: CVE-2013-4379 State: PUBLISHED Published: 2013-10-09T17:00:00Z Last Updated: 2024-09-17T03:18:45.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access restrictions for a poll via a direct request to the node's URL instead of the hashed URL. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2081637 - https://drupal.org/node/2081647 - http://secunia.com/advisories/54634 - http://www.openwall.com/lists/oss-security/2013/09/27/6
CVE ID: CVE-2013-4380 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T16:45:14.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer mediafront" permission to inject arbitrary web script or HTML via the preset settings. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2086187 - https://drupal.org/node/2086191 - https://drupal.org/node/2086189 - https://drupal.org/node/2087051 - http://www.openwall.com/lists/oss-sec
node/2086191 - https://drupal.org/node/2086189 - https://drupal.org/node/2087051 - http://www.openwall.com/lists/oss-security/2013/09/27/6
CVE ID: CVE-2013-4381 State: REJECTED Published: 2013-10-21T18:00:00Z Last Updated: 2024-09-17T02:57:18.005Z Description: No description available.
CVE ID: CVE-2013-4382 State: REJECTED Published: 2013-10-21T18:00:00Z Last Updated: 2024-09-17T04:09:14.223Z Description: No description available.
CVE ID: CVE-2013-4383 State: PUBLISHED Published: 2014-01-31T15:00:00 Last Updated: 2024-08-06T16:45:13.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62340 - https://drupal.org/node/2087095 - https://drupal.org/node/2087089
CVE ID: CVE-2013-4384 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:45:14.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87285 - https://drupal.org/node/2092395 - http://osvdb.org/97503