Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
urityfocus.com/bid/58758 - http://packetstormsecurity.com/files/120985/Drupal-Zero-Point-7.x-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83137 - https://drupal.org/node/1953840
CVE ID: CVE-2013-1906 State: PUBLISHED Published: 2013-06-24T16:13:00Z Last Updated: 2024-09-16T18:29:22.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Rules module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with the "administer rules" permission to inject arbitrary web script or HTML via a rule tag. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1954592 - https://drupal.org/node/1954508 - http://secunia.com/advisories/52768
CVE ID: CVE-2013-1907 State: PUBLISHED Published: 2013-07-16T18:00:00 Last Updated: 2024-08-06T15:20:37.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/120991/Drupal-Common-Groups-7.x-Access-Bypass-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2013/Mar/242 - http://secunia.com/advisories/52795 - https://drupal.org/node/1954764 -
tp://seclists.org/fulldisclosure/2013/Mar/242 - http://secunia.com/advisories/52795 - https://drupal.org/node/1954764 - http://secunia.com/advisories/52769 - https://drupal.org/node/1954948 - https://drupal.org/node/1954762 - http://osvdb.org/91748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83133
CVE ID: CVE-2013-1908 State: PUBLISHED Published: 2013-07-16T18:00:00Z Last Updated: 2024-09-16T22:02:29.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/120995/Drupal-Common-Wikis-7.x-Access-Bypass-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2013/Mar/244 - https://drupal.org/node/1954768 - http://secunia.com/advisories/52795 -
tp://seclists.org/fulldisclosure/2013/Mar/244 - https://drupal.org/node/1954768 - http://secunia.com/advisories/52795 - https://drupal.org/node/1954766 - http://secunia.com/advisories/52766 - https://drupal.org/node/1954948 - http://osvdb.org/91747
CVE ID: CVE-2013-1909 State: PUBLISHED Published: 2013-08-23T16:00:00Z Last Updated: 2024-09-16T17:42:38.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53968 - http://svn.apache.org/viewvc?view=revision&revision=1460013 - https://issues.apache.org/jira/browse/QPID-4918 - http://rhn.redhat.com/errat
rg/viewvc?view=revision&revision=1460013 - https://issues.apache.org/jira/browse/QPID-4918 - http://rhn.redhat.com/errata/RHSA-2013-1024.html - http://qpid.apache.org/releases/qpid-0.22/release-notes.html - http://secunia.com/advisories/54137
CVE ID: CVE-2013-1910 State: PUBLISHED Published: 2019-10-31T18:36:26 Last Updated: 2024-08-06T15:20:37.295Z Vendors: yum Products: yum Problem Types: Denial of Service - Malformed Input Description: yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1910 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1910 - https://access.redhat.com/security/cve/cve-2013-1910 - http://www.securityfocus.com/bid/58533 - http://www.open
3-1910 - https://access.redhat.com/security/cve/cve-2013-1910 - http://www.securityfocus.com/bid/58533 - http://www.openwall.com/lists/oss-security/2013/03/29/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83348
CVE ID: CVE-2013-1911 State: PUBLISHED Published: 2013-04-03T00:00:00 Last Updated: 2024-08-06T15:20:36.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name. Additional Analyst Notes: - CVE Program Container: References: - http://otiose.dhs.org/advisories/ldoce-0.0.2-cmd-exec.html - http://www.securityfocus.com/bid/58783 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0010.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83163 - http://www.openwall.com/lists/oss-security/2013/03/31/3 - http://osvdb.o
nge.xforce.ibmcloud.com/vulnerabilities/83163 - http://www.openwall.com/lists/oss-security/2013/03/31/3 - http://osvdb.org/91870
CVE ID: CVE-2013-1912 State: PUBLISHED Published: 2013-04-10T15:00:00 Last Updated: 2024-08-06T15:20:37.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/1037
Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103794.html - http://rhn.redhat.com/errata/RHSA-2013-0868.html - http://secunia.com/advisories/52725 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103730.html - http://www.debian.org/security/2013/dsa-2711 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103770.html - http://www.securityfocus.com/bid/58820 - http://www.ubuntu.com/usn/USN-1800-1 - http://www.openwall.com/lists/oss-security/2013/04/03/1 - http://rhn.redhat.com/errata/RHSA-2013-0729.html
CVE ID: CVE-2013-1913 State: PUBLISHED Published: 2013-12-12T18:00:00 Last Updated: 2024-08-06T15:20:37.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64105 - https://bugzilla.redhat.com/show_bug.cgi?id=947868 - http://rhn.redhat.com/errata/RHSA-2013-1778.html -
com/bid/64105 - https://bugzilla.redhat.com/show_bug.cgi?id=947868 - http://rhn.redhat.com/errata/RHSA-2013-1778.html - https://security.gentoo.org/glsa/201603-01 - http://www.debian.org/security/2013/dsa-2813 - http://www.ubuntu.com/usn/USN-2051-1
CVE ID: CVE-2013-1914 State: PUBLISHED Published: 2013-04-29T22:00:00 Last Updated: 2024-08-06T15:20:37.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0008.html - http://rhn.redhat.com/errata/RHSA-2013-1605.html - http://secunia.com/advisories/55113 - http://www.open
014-0008.html - http://rhn.redhat.com/errata/RHSA-2013-1605.html - http://secunia.com/advisories/55113 - http://www.openwall.com/lists/oss-security/2013/04/03/2 - http://www.ubuntu.com/usn/USN-1991-1 - https://bugzilla.redhat.com/show_bug.cgi?id=947882 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:284 - http://www.securityfocus.com/bid/58839 - http://sourceware.org/bugzilla/show_bug.cgi?id=15330 - http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=1cef1b19089528db11f221e938f60b9b048945d7 - http://www.openwall.com/lists/oss-security/2013/04/03/8 - http://www.openwall.com/lists/oss-security/2013/04/05/1 - https://security.gentoo.org/glsa/201503-04 - http://www.mandriva.c
://www.openwall.com/lists/oss-security/2013/04/05/1 - https://security.gentoo.org/glsa/201503-04 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:283 - http://secunia.com/advisories/52817 - http://rhn.redhat.com/errata/RHSA-2013-0769.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:163 - https://bugzilla.novell.com/show_bug.cgi?id=813121 - http://seclists.org/fulldisclosure/2021/Sep/0 - http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html
CVE ID: CVE-2013-1915 State: PUBLISHED Published: 2013-04-25T23:00:00 Last Updated: 2024-08-06T15:20:37.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html - https://github.com/SpiderLabs/ModSecurity/commit/d4d80b38aa85eccb26e3c61b04d16e8ca5de76fe - http://l
-08/msg00031.html - https://github.com/SpiderLabs/ModSecurity/commit/d4d80b38aa85eccb26e3c61b04d16e8ca5de76fe - http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html - http://www.openwall.com/lists/oss-security/2013/04/03/7 - http://www.securityfocus.com/bid/58810 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101911.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:156 - https://bugzilla.redhat.com/show_bug.cgi?id=947842 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101898.html - https://github.com/SpiderLabs/ModSecurity/blob/master/CHANGES - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/1026
m/SpiderLabs/ModSecurity/blob/master/CHANGES - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102616.html - http://secunia.com/advisories/52977 - http://secunia.com/advisories/52847 - http://www.debian.org/security/2013/dsa-2659 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html
CVE ID: CVE-2013-1916 State: PUBLISHED Published: 2022-06-24T15:00:17 Last Updated: 2024-08-06T15:20:36.928Z Vendors: n/a Products: WordPress Plugin User Photo Problem Types: CWE-434 Description: In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/user-photo/#developers - https://plugins.trac.wordpress.org/changeset/347137 - https://www.exploit-db.com/exploits/16181
CVE ID: CVE-2013-1917 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:37.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id/1028455 - http://s
ounce/2014-04/msg00000.html - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id/1028455 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html - http://www.openwall.com/lists/oss-security/2013/04/18/8 - http://www.debian.org/security/2012/dsa-2662 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html
CVE ID: CVE-2013-1918 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:37.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105533.html - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://secunia.com/advisories/53187 - http://www.debian.org/security/2013/dsa-2666 - ht
oo.org/glsa/glsa-201309-24.xml - http://secunia.com/advisories/53187 - http://www.debian.org/security/2013/dsa-2666 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.openwall.com/lists/oss-security/2013/05/02/8 - http://www.securityfocus.com/bid/59615
CVE ID: CVE-2013-1919 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:36.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html - http://www.debian.org/security/2013/dsa-2662 - http://lists.opensuse.org/opensuse-security-an
es/2013-06/msg00049.html - http://www.debian.org/security/2013/dsa-2662 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html - http://www.openwall.com/lists/oss-security/2013/04/18/6 - http://www.securityfocus.com/bid/59292 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104538.html
CVE ID: CVE-2013-1920 State: PUBLISHED Published: 2013-04-12T22:00:00 Last Updated: 2024-08-06T15:20:37.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisori
: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html - http://osvdb.org/92050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83226 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html - http://secunia.com/advisories/52857 - http://www.securityfocus.com/bid/58880 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://www.securitytracker.com/id/1028388 - http://www.ope
ensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://www.securitytracker.com/id/1028388 - http://www.openwall.com/lists/oss-security/2013/04/04/7
CVE ID: CVE-2013-1921 State: PUBLISHED Published: 2013-09-28T19:00:00 Last Updated: 2024-08-06T15:20:37.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0029.html - https://bugzilla.redhat.com/show_bug.cgi?id=948106 - http://rhn.redhat.com/errata/RHSA-2013-1209.html - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://rhn.redhat.com/errata/RHSA-2013-120
rata/RHSA-2013-1437.html - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://rhn.redhat.com/errata/RHSA-2013-1208.html
CVE ID: CVE-2013-1922 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:36.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103637.html - http://secunia.com/advisories/55082 - http://lists.fedora
roject.org/pipermail/package-announce/2013-April/103637.html - http://secunia.com/advisories/55082 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103621.html - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104036.html - http://www.openwall.com/lists/oss-security/2013/04/16/2 - http://www.securitytracker.com/id/1028426 - http://www.openwall.com/lists/oss-security/2013/04/15/3
CVE ID: CVE-2013-1923 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T15:20:36.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58854 - http://marc.info/?l=linux-nfs&m=136500502805121&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=948072 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00172.html - http://lists.opensuse.org/opensuse-updates
d=948072 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00172.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00142.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00146.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85331 - http://marc.info/?l=linux-nfs&m=136491998607561&w=2
CVE ID: CVE-2013-1924 State: PUBLISHED Published: 2020-02-12T15:39:09 Last Updated: 2024-08-06T15:20:37.282Z Vendors: Commerce Skrill Products: Commerce Skrill Problem Types: authentication error Description: Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2 Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/04/6 - http://drupal.org/node/1960338
CVE ID: CVE-2013-1925 State: PUBLISHED Published: 2013-07-16T18:00:00 Last Updated: 2024-08-06T15:20:37.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121072/Drupal-Chaos-Tool-Suite-7.x-Access-Bypass.html - https://drupal.org/node/1960406 - http://osvdb.org/91986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83254 - https://d
rupal.org/node/1960406 - http://osvdb.org/91986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83254 - https://drupal.org/node/1960424 - http://seclists.org/fulldisclosure/2013/Apr/8
CVE ID: CVE-2013-1926 State: PUBLISHED Published: 2013-04-29T22:00:00 Last Updated: 2024-08-06T15:20:37.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92543 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html - https://exchange.xforce.ibmc
/2013-05/msg00020.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83642 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:146 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html - http://secunia.com/advisories/53109 - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/34b6f60ae586 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html - http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html - http://secunia.com/advisories/53117 - http://rhn.redhat.com/errata/RHSA-2013-0753.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html - h
http://rhn.redhat.com/errata/RHSA-2013-0753.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html - http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/25dd7c7ac39c - http://www.ubuntu.com/usn/USN-1804-1 - http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS - http://www.securityfocus.com/bid/59281 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html - https://bugzilla.redhat.com/show_bug.cgi?id=916774 - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html
CVE ID: CVE-2013-1927 State: PUBLISHED Published: 2013-04-29T22:00:00 Last Updated: 2024-08-06T15:20:37.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92544 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:146 - http://lists.opensuse.org/opensuse-securi