Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1886 State: PUBLISHED Published: 2014-01-24T16:00:00 Last Updated: 2024-08-06T15:20:37.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to viewing certificates. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=924870 - http://rhn.redhat.com/errata/RHSA-2013-0856.html - http://osvdb
: - https://bugzilla.redhat.com/show_bug.cgi?id=924870 - http://rhn.redhat.com/errata/RHSA-2013-0856.html - http://osvdb.org/93613 - http://www.securitytracker.com/id/1029685 - http://www.securityfocus.com/bid/60085
CVE ID: CVE-2013-1887 State: PUBLISHED Published: 2013-03-27T23:00:00Z Last Updated: 2024-09-16T20:57:54.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51540 - http://packetstormsecurity.com/files/120892/Drupal-Views-7.x-Cross-Site-Scripting.html - http://drupal.org/node/1948358 - http://www.osvdb.org/91576 - http://www.openwall.com/lists/oss-s
-Site-Scripting.html - http://drupal.org/node/1948358 - http://www.osvdb.org/91576 - http://www.openwall.com/lists/oss-security/2013/03/25/4 - http://seclists.org/fulldisclosure/2013/Mar/193 - http://drupalcode.org/project/views.git/commitdiff/ddf8181bd13f69ffbeeee14ae72168418785d7ac - http://www.openwall.com/lists/oss-security/2013/03/22/8 - http://www.securityfocus.com/bid/58621 - http://drupal.org/node/1948354
CVE ID: CVE-2013-1888 State: PUBLISHED Published: 2013-08-16T10:00:00 Last Updated: 2024-08-06T15:20:37.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/03/22/10 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105989.html - https://github.com/pypa/pip/pull/734/files - https://github.com/pypa/pip/pull/780/files - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105952.html - https://github.com/
ip/pull/780/files - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105952.html - https://github.com/pypa/pip/issues/725 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106311.html
CVE ID: CVE-2013-1889 State: PUBLISHED Published: 2019-11-08T15:07:10 Last Updated: 2024-08-06T15:20:37.077Z Vendors: libapache2-mod-ruid2 Products: libapache2-mod-ruid2 Problem Types: Other Description: mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1889 - http://www.openwall.com/lists/oss-security/2013/03/23/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83035 - https://sourceforge.net/p/mod-ruid/mailman/mod-ruid-announce/thread/514C503E.4020109%40users.sour
ulnerabilities/83035 - https://sourceforge.net/p/mod-ruid/mailman/mod-ruid-announce/thread/514C503E.4020109%40users.sourceforge.net/
CVE ID: CVE-2013-1890 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T15:20:37.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud Server before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) new_name parameter to apps/bookmarks/ajax/renameTag.php or (2) multiple unspecified parameters to unknown files in apps/contacts/ajax/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83245 - http://www.securityfocus.com/bid/58852 - http://owncloud.org/about/security/advisories/oC-SA-2013-011
CVE ID: CVE-2013-1891 State: PUBLISHED Published: 2022-06-24T15:00:17 Last Updated: 2024-08-06T15:20:37.240Z Vendors: n/a Products: opencart Problem Types: CWE-22 Description: In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-98.html - https://seclists.org/fulldisclosure/2013/Mar/176 - https://www.openwall.com/lists/oss-security/2013/03/24/1
CVE ID: CVE-2013-1892 State: PUBLISHED Published: 2013-10-01T20:00:00 Last Updated: 2024-08-06T15:20:37.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1170.html - http://www.exploit-db.com/exploits/24947 - http://www.openwall.com/lists/oss-security/2013/03/25/9 - h
-2013-1170.html - http://www.exploit-db.com/exploits/24947 - http://www.openwall.com/lists/oss-security/2013/03/25/9 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101630.html - http://blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce/ - http://www.exploit-db.com/exploits/24935 - https://jira.mongodb.org/browse/SERVER-9124 - http://www.mongodb.org/about/alerts/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101679.html
CVE ID: CVE-2013-1893 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T15:20:37.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in addressbookprovider.php in ownCloud Server before 5.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to the contacts application. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-012 - http://www.securityfocus.com/bid/58855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83253
CVE ID: CVE-2013-1894 State: REJECTED Published: 2013-11-23T18:00:00 Last Updated: 2013-11-23T18:28:53 Description: No description available.
CVE ID: CVE-2013-1895 State: PUBLISHED Published: 2020-01-28T14:30:24 Last Updated: 2024-08-06T15:20:37.112Z Vendors: py-bcrypt Products: py-bcrypt Problem Types: Other Description: The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/03/26/2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101387.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101382.html
kage-announce/2013-April/101387.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101382.html - http://www.securityfocus.com/bid/58702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83039
CVE ID: CVE-2013-1896 State: PUBLISHED Published: 2013-07-10T20:00:00 Last Updated: 2024-08-06T15:20:37.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a MERGE request in which the URI is configured for handling by the mod_dav_svn module, but a certain href attribute in XML data refers to a non-DAV URI. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?view=log - http://www-01.ibm.com/support/doc
- http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?view=log - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03922406-1%257CdocLocale%253D%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken - http://rhn.redhat.com/errata/RHSA-2013-1209.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18835 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?r1=1482522&r2
3Aorg.mitre.oval%3Adef%3A18835 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/mod_dav.c?r1=1482522&r2=1485668&diff_format=h - http://lists.opensuse.org/opensuse-updates/2013-08/msg00029.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19747 - http://support.apple.com/kb/HT6150 - http://rhn.redhat.com/errata/RHSA-2013-1156.html - http://www.ubuntu.com/usn/USN-1903-1 - https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03922406-1%257CdocLocale%253D%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoke
ate%3DdocId%253Demr_na-c03922406-1%257CdocLocale%253D%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://www.securityfocus.com/bid/61129 - http://www.apache.org/dist/httpd/Announcement2.2.html - http://rhn.redhat.com/errata/RHSA-2013-1208.html - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1896 - https://httpd.apache.org/security/vulnerabilities_24.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00030.html - http://secunia.com/advisories/55032 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00026.html - https://list
- http://secunia.com/advisories/55032 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00026.html - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201
3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3
8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.o
- https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96
aef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2013-1897 State: PUBLISHED Published: 2013-05-13T23:00:00Z Last Updated: 2024-08-06T15:20:36.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101323.
tes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101323.html - https://git.fedorahosted.org/cgit/389/ds.git/commit/?h=389-ds-base-1.2.11&id=5a18c828533a670e7143327893f8171a19062286 - https://bugzilla.redhat.com/show_bug.cgi?id=928105 - https://fedorahosted.org/freeipa/ticket/3540 - http://rhn.redhat.com/errata/RHSA-2013-0742.html - https://fedorahosted.org/389/ticket/47308
CVE ID: CVE-2013-1898 State: PUBLISHED Published: 2013-04-09T20:00:00Z Last Updated: 2024-09-16T21:03:22.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://vapid.dhs.org/advisories/thumbshooter-ruby-gem-remoteexec.html - http://seclists.org/fulldisclosure/2013/Mar/218 - http://osvdb.org/91839 - http://www.openwall.com/lists/oss-security/2013/03/26/3 - http://www.openwall.com/lists/oss-security/2013/03/26/13
CVE ID: CVE-2013-1899 State: PUBLISHED Published: 2013-04-04T17:00:00 Last Updated: 2024-08-06T15:20:37.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen). Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/current/static/release-9-2-4.html - http://www.postgresql.org/about/news/1
References: - http://www.postgresql.org/docs/current/static/release-9-2-4.html - http://www.postgresql.org/about/news/1456/ - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html - http://www.postgresql.org/support/security/faq/2013-04-04/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 - http://support.apple.com/kb/HT5892 - http://www.postgresql.org/docs/current/static/release-9-0-13.html - http://www.ubuntu.com/usn/USN-1789-1 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/1028
ves/security-announce/2013/Sep/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html - http://www.postgresql.org/docs/current/static/release-9-1-9.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html - http://www.debian.org/security/2013/dsa-2658 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html - http://support.apple.com/kb/HT5880
CVE ID: CVE-2013-1900 State: PUBLISHED Published: 2013-04-04T17:00:00 Last Updated: 2024-08-06T15:20:36.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions." Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/current/static/release-8-4-17.html - http://www.postgresql.org/docs/current/static/release-9-2-4.html - http://www.postgresql.org/about/news/1456/
-17.html - http://www.postgresql.org/docs/current/static/release-9-2-4.html - http://www.postgresql.org/about/news/1456/ - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html - http://www.debian.org/security/2013/dsa-2657 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 - http://support.apple.com/kb/HT5892 - http://www.postgresql.org/docs/current/static/release-9-0-13.html - http://www.ubuntu.com/usn/USN-1789-1 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://lists.
isory/cpuoct2017-3236626.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html - http://www.postgresql.org/docs/current/static/release-9-1-9.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html - http://rhn.redhat.com/errata/RHSA-2013-1475.html - http://www.debian.org/security/2013/dsa-2658 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html - http://support.apple.com/kb/HT588
l - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html - http://support.apple.com/kb/HT5880
CVE ID: CVE-2013-1901 State: PUBLISHED Published: 2013-04-04T17:00:00 Last Updated: 2024-08-06T15:20:36.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/current/static/release-9-2-4.html - http://www.postgresql.org/about/news/1456/ - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html - http://lists.opensuse.org/open
news/1456/ - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:142 - http://support.apple.com/kb/HT5892 - http://www.ubuntu.com/usn/USN-1789-1 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html - http://www.postgresql.org/docs/current/static/release-9-1-9.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html - http://www.deb
/static/release-9-1-9.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html - http://www.debian.org/security/2013/dsa-2658 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html - http://support.apple.com/kb/HT5880
CVE ID: CVE-2013-1902 State: PUBLISHED Published: 2013-04-04T17:00:00 Last Updated: 2024-08-06T15:20:36.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X." Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news/1456/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.postgresql.org/support/security/
CVE ID: CVE-2013-1903 State: PUBLISHED Published: 2013-04-04T17:00:00 Last Updated: 2024-08-06T15:20:37.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news/1456/ - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.postgresql.org/support/security/
CVE ID: CVE-2013-1904 State: PUBLISHED Published: 2014-02-08T00:00:00 Last Updated: 2024-08-06T15:20:37.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013. Additional Analyst Notes: - CVE Program Container: References: - http://habrahabr.ru/post/174423/ - http://sourceforge.net/p/roundcubemail/news/2013/03/security-updates-086-and-073/ - http://lists.roundc
u/post/174423/ - http://sourceforge.net/p/roundcubemail/news/2013/03/security-updates-086-and-073/ - http://lists.roundcube.net/pipermail/dev/2013-March/022328.html - http://lists.opensuse.org/opensuse-updates/2013-04/msg00080.html - http://www.openwall.com/lists/oss-security/2013/03/28/8
CVE ID: CVE-2013-1905 State: PUBLISHED Published: 2013-06-20T23:00:00 Last Updated: 2024-08-06T15:20:36.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Mar/241 - http://secunia.com/advisories/52775 - http://osvdb.org/91745 - http://drupal.org/node/1954588 - http://www.securityfocus.com/bid/58758 - http://packetstormsecurity.com/files/120985/Drupal-Zero-Point-7.x-Cross-Site-Scripting.html -