Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.x?alertId=32157 - http://www.securitytracker.com/id/1029492 - http://osvdb.org/100911 - http://www.securityfocus.com/bid/64281 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89691
CVE ID: CVE-2013-6966 State: PUBLISHED Published: 2013-12-17T02:00:00 Last Updated: 2024-08-06T17:53:46.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36031. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029492 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32149 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89686 - http://osvd
ter/content/CiscoSecurityNotice/CVE-2013-6966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89686 - http://osvdb.org/100909
CVE ID: CVE-2013-6967 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89685 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6967 - http://www.securitytracker.com/id/1029493 - http://osvdb.org/100912
CVE ID: CVE-2013-6968 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029492 - http://osvdb.org/100913 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89688 - http://tools.ci
content/CiscoSecurityNotice/CVE-2013-6968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89688 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32147
CVE ID: CVE-2013-6969 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89684 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6969 - http://www.securityfocus.com/bid/64305 - http://osvdb.org/101003
CVE ID: CVE-2013-6970 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64306 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6970 - http://osvdb.org/101002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89708
CVE ID: CVE-2013-6971 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029492 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6971 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89653 - http://osvd
com/security/center/viewAlert.x?alertId=32146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89653 - http://osvdb.org/100910
CVE ID: CVE-2013-6972 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100914 - http://www.securitytracker.com/id/1029492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89652 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6972 - http://tools.cisco.com/security/center/viewAlert.x?alertId=321
curity/center/content/CiscoSecurityNotice/CVE-2013-6972 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32145 - http://www.securityfocus.com/bid/64282
CVE ID: CVE-2013-6973 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:46.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6973 - http://www.securityfocus.com/bid/64286 - http://www.securitytracker.com/id/1029492 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32144 - http://osvdb.org/100915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89651
CVE ID: CVE-2013-6974 State: PUBLISHED Published: 2014-01-10T11:00:00 Last Updated: 2024-08-06T17:53:46.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029594 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6974 - http://secunia.com/advisories/56353 - http://osvdb.org/101894 - http://www.securityfocus.com/bid/64752
CVE ID: CVE-2013-6975 State: PUBLISHED Published: 2014-05-20T10:00:00 Last Updated: 2024-08-06T17:53:45.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=34260 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6975 - http://www.securityfocus.com/bid/67426
CVE ID: CVE-2013-6976 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:53:45.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64341 - http://www.nerdbox.it/cisco-epc3925-csrf-vulnerability/ - http://packetstormsecurity.com/files/124449/Cisco-EPC3925-Cross-Site-Request-Forgery.html - ht
925-csrf-vulnerability/ - http://packetstormsecurity.com/files/124449/Cisco-EPC3925-Cross-Site-Request-Forgery.html - http://www.exploit-db.com/exploits/30362/ - http://osvdb.org/101097
CVE ID: CVE-2013-6978 State: PUBLISHED Published: 2013-12-21T11:00:00 Last Updated: 2024-08-06T17:53:45.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101162 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32219 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978 - http://www.securitytracker.c
=32219 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6978 - http://www.securitytracker.com/id/1029520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89834 - http://www.securityfocus.com/bid/64421
CVE ID: CVE-2013-6979 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T17:53:45.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89901 - http://www.securitytracker.com/id/1029537 - http://osvdb.org/101351 - http://www.securityfocus.com/bid/64502 - http://tools
p://www.securitytracker.com/id/1029537 - http://osvdb.org/101351 - http://www.securityfocus.com/bid/64502 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6979
CVE ID: CVE-2013-6981 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:53:46.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029538 - http://secunia.com/advisories/56206 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32281 - http://osvdb.org/101423 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6981 - http://www.securityfocus.com/bid/64514
CVE ID: CVE-2013-6982 State: PUBLISHED Published: 2014-01-08T21:00:00 Last Updated: 2024-08-06T17:53:46.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6982 - http://www.securitytracker.com/id/1029568 - https://exchange.xforce.ibmcloud.com/vulne
scoSecurityNotice/CVE-2013-6982 - http://www.securitytracker.com/id/1029568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90119 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32325 - http://osvdb.org/101713 - http://secunia.com/advisories/56169 - http://www.securityfocus.com/bid/64670
CVE ID: CVE-2013-6983 State: PUBLISHED Published: 2013-12-31T11:00:00 Last Updated: 2024-08-06T17:53:45.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh35615. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6983 - http://secunia.com/advisories/56273 - http://www.securitytracker.com/id/1029547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90011 - http://www.securityfocus.com/bid/64551 - http://o
1029547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90011 - http://www.securityfocus.com/bid/64551 - http://osvdb.org/101514
CVE ID: CVE-2013-6985 State: PUBLISHED Published: 2013-12-09T16:00:00 Last Updated: 2024-08-06T17:53:45.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Dec/35 - http://www.securityfocus.com/bid/64110
CVE ID: CVE-2013-6986 State: PUBLISHED Published: 2013-12-12T17:00:00 Last Updated: 2024-08-06T17:53:46.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers to obtain sensitive information by reading data elements, as demonstrated by password elements. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124330/ZippyYum-3.4-Insecure-Data-Storage.html - http://archives.neohapsis.com/archives/bugtraq/2013-12/0040.html - http://seclists.org/fulldisclosure/2013/Dec/39 - http://osvdb.org/100745
CVE ID: CVE-2013-6987 State: PUBLISHED Published: 2013-12-31T15:00:00 Last Updated: 2024-08-06T17:53:45.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. (dot dot) in the (1) path parameter to file_delete.cgi or (2) folder_path parameter to file_share.cgi in webapi/FileStation/; (3) dlink parameter to fbdownload/; or unspecified parameters to (4) html5_upload.cgi, (5) file_download.cgi, (6) file_sharing.cgi, (7) file_MVCP.cgi, or (8) file_rename.cgi in webapi/FileStati
5_upload.cgi, (5) file_download.cgi, (6) file_sharing.cgi, (7) file_MVCP.cgi, or (8) file_rename.cgi in webapi/FileStation/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89892 - http://www.synology.com/en-us/releaseNote/model/DS114 - http://packetstormsecurity.com/files/124563 - http://www.exploit-db.com/exploits/30475 - http://seclists.org/fulldisclosure/2013/Dec/177
CVE ID: CVE-2013-6990 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T17:53:45.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/96200 - http://www.fortiguard.com/advisory/FG-IR-13-016/
CVE ID: CVE-2013-6991 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T17:53:45.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WP-Cron Dashboard plugin 1.1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the procname parameter to wp-admin/tools.php. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/support/topic/wp-cron-dashboard-115-security-vulnerability-notification-xss - https://www.htbridge.com/advisory/HTB23189 - http://www.securityfocus.com/archive/1/530536/100/0/threaded
CVE ID: CVE-2013-6992 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T17:53:46.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the aafireadcode parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64534 - http://osvdb.org/101435 - https://www.htbridge.com/advisory/HTB23188 - http://w
http://www.securityfocus.com/bid/64534 - http://osvdb.org/101435 - https://www.htbridge.com/advisory/HTB23188 - http://www.securityfocus.com/archive/1/530539/100/0/threaded
CVE ID: CVE-2013-6993 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T17:53:45.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ad-minister plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the key parameter in a delete action to wp-admin/tools.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530540/100/0/threaded - https://www.htbridge.com/advisory/HTB23187 - http://wordpress.org/support/topic/ad-minister-06-security-vulnerability-notification-xss
CVE ID: CVE-2013-6994 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:53:45.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koto/exceed-mitm
CVE ID: CVE-2013-6995 State: REJECTED Published: 2013-12-21T21:00:00 Last Updated: 2013-12-21T20:57:00 Description: No description available.
CVE ID: CVE-2013-6997 State: PUBLISHED Published: 2014-01-09T00:00:00 Last Updated: 2024-08-06T17:53:45.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an HTML email with crafted CSS code containing wildcards or (2) office documents containing "crafted hyperlinks with script URL handlers." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90113 - http://www.securityfocus.com/bid/64676 - http://software.open-xchange.com/OX6/doc/Release_Notes_f
ulnerabilities/90113 - http://www.securityfocus.com/bid/64676 - http://software.open-xchange.com/OX6/doc/Release_Notes_for_Public_Patch_Release_1766_7.4.0_Rev21_2013_12_13.pdf - http://www.osvdb.org/101714 - http://www.securitytracker.com/id/1029554 - http://www.osvdb.org/101715 - http://www.securityfocus.com/archive/1/530681/100/0/threaded
CVE ID: CVE-2013-6998 State: REJECTED Published: 2014-12-27T18:00:00 Last Updated: 2014-12-30T22:57:01 Description: No description available.
CVE ID: CVE-2013-6999 State: PUBLISHED Published: 2013-12-07T01:00:00 Last Updated: 2024-08-06T17:53:45.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 SP2 does not properly validate the tagPROCESSINFO pW32Job field, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted NtUserValidateHandleSecure call for an owned object. NOTE: the vendor reportedly disputes the significance of this report, stating that "it appears to be a local DOS ... we don't consider it a security vulnerability. Additional Analyst Notes: - CVE
ng that "it appears to be a local DOS ... we don't consider it a security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64057 - http://pastebin.com/raw.php?i=we0ZSQC0 - http://secunia.com/advisories/55633
CVE ID: CVE-2013-7000 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T17:53:45.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63879 - http://www.nowsms.com/nowsms20131115 - http://secunia.com/advisories/55805
CVE ID: CVE-2013-7001 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T17:53:45.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows remote attackers to cause a denial of service via a malformed MM1 message that is routed to a (1) MM4 or (2) MM7 connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63879 - http://www.nowsms.com/nowsms20131115 - http://secunia.com/advisories/55805
CVE ID: CVE-2013-7002 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T17:53:46.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89525 - http://secunia.com/advisories/54505 - http://packetstormsecurity.com/files/124344 - http://ropchain.org/advisories/CVE-2013-7002.txt - http://archives.neohapsis.com/archives/bugtraq/2013-12/0032.html
CVE ID: CVE-2013-7003 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T17:53:45.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full name field, (2) company field, or (3) filename to chat.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64202 - http://osvdb.org/100828 - http://seclists.org/bugtraq/2013/Dec/42 - http://packetstormsecurity.com/files/124374/LiveZilla-5.1.1.0-Cross-Site-Scripting.html
CVE ID: CVE-2013-7004 State: PUBLISHED Published: 2013-12-19T02:00:00 Last Updated: 2024-08-06T17:53:46.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a hardcoded account of username gkJ9232xXyruTRmY, which makes it easier for remote attackers to obtain access by leveraging knowledge of the username. Additional Analyst Notes: - CVE Program Container: References: - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf -
iner: References: - http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf - http://www.exploit-db.com/exploits/30061 - http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf - http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf