Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18103 - https://code.google.com/p/chromium/issues/detail?id=294206 - https://code.google.com/p/chromium/issues/detail?id=284792 - https://code.google.com/p/chromium/issues/detail?id=274020 - https://code.google.com/p/chromium/issues/detail?id=264211 - https://code.google.com/p/chromium/issues/detail?id=276111 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - http://www.debian.org/security/2013/dsa-2785 - https://code.google.com/p/chromium/issues/detail?id=265731 - https://code.google.com/p/chromium/issues/detail?id=288771 - https://code.google.com/p/chromium/issues/detail?id=254728 - http://lists.opensuse.org/opensuse-securi
etail?id=288771 - https://code.google.com/p/chromium/issues/detail?id=254728 - http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html - https://code.google.com/p/chromium/issues/detail?id=294202 - https://code.google.com/p/chromium/issues/detail?id=288761 - https://code.google.com/p/chromium/issues/detail?id=246724 - https://code.google.com/p/chromium/issues/detail?id=266593 - https://code.google.com/p/chromium/issues/detail?id=299016 - https://code.google.com/p/chromium/issues/detail?id=260138 - https://code.google.com/p/chromium/issues/detail?id=279286 - https://code.google.com/p/chromium/issues/detail?id=277656 - https://code.google.com/p/chromium/issues/detail?id=2940
- https://code.google.com/p/chromium/issues/detail?id=277656 - https://code.google.com/p/chromium/issues/detail?id=294023 - https://code.google.com/p/chromium/issues/detail?id=257852 - https://code.google.com/p/chromium/issues/detail?id=269835 - https://code.google.com/p/chromium/issues/detail?id=267068 - https://code.google.com/p/chromium/issues/detail?id=293521 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html - https://code.google.com/p/chromium/issues/detail?id=285380 - https://code.google.com/p/chromium/issues/detail?id=278366 - https://code.google.com/p/chromium/issues/detail?id=289648 - https://code.google.com/p/chromium/issues/detail?id=265493
CVE ID: CVE-2013-2924 State: PUBLISHED Published: 2013-10-02T10:00:00 Last Updated: 2024-08-06T15:52:21.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=275803 - http://bugs.icu-project.org/trac/ticket/10318 - http://lists.opensuse.o
.google.com/p/chromium/issues/detail?id=275803 - http://bugs.icu-project.org/trac/ticket/10318 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - http://www.debian.org/security/2013/dsa-2785 - http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html - http://jvn.jp/en/jp/JVN85336306/index.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19017 - http://www.debian.org/security/2013/dsa-2786 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html - http://www.securityfocus.com/bid/64758 - https://src.chromium.org/viewvc/chrome?revision=219151&view=revision - http://www.oracle.com/technetwork/to
/bid/64758 - https://src.chromium.org/viewvc/chrome?revision=219151&view=revision - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
CVE ID: CVE-2013-2925 State: PUBLISHED Published: 2013-10-16T20:00:00 Last Updated: 2024-08-06T15:52:21.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same XMLHttpRequest object. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=292422 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - http://www.debian.org/security/2013/dsa-2
id=292422 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - http://www.debian.org/security/2013/dsa-2785 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html - https://src.chromium.org/viewvc/blink?revision=158146&view=revision - http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18866 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html - http://googlechromereleases.blogspot.com/2013/10/stable-channel-update_15.html
CVE ID: CVE-2013-2926 State: PUBLISHED Published: 2013-10-16T20:00:00 Last Updated: 2024-08-06T15:52:21.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to list elements. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://lists.opensuse.org/opensuse-updates/2014-01/msg000
rt.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - https://src.chromium.org/viewvc/blink?revision=158727&view=revision - http://www.debian.org/security/2013/dsa-2785 - https://code.google.com/p/chromium/issues/detail?id=294456 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html - http://support.apple.com/kb/HT6162 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18837 - http://archives.neohapsis.com/archives/
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18837 - http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html - http://googlechromereleases.blogspot.com/2013/10/stable-channel-update_15.html
CVE ID: CVE-2013-2927 State: PUBLISHED Published: 2013-10-16T20:00:00 Last Updated: 2024-08-06T15:52:21.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to submission for FORM elements. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT6537 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - http://www.debian.org/security/2013/dsa-2
kb/HT6537 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - http://www.debian.org/security/2013/dsa-2785 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0175.html - http://support.apple.com/kb/HT6254 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html - https://code.google.com/p/chromium/issues/detail?id=297478 - http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html - http://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html - http://googlechromereleases.blogspot.com/2013/10/stabl
ttp://archives.neohapsis.com/archives/bugtraq/2014-05/0128.html - http://googlechromereleases.blogspot.com/2013/10/stable-channel-update_15.html - https://src.chromium.org/viewvc/blink?revision=158428&view=revision - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19155
CVE ID: CVE-2013-2928 State: PUBLISHED Published: 2013-10-16T20:00:00 Last Updated: 2024-08-06T15:52:21.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://crbug.com/303772 - http://crbug.com/303657 - http://support.apple.com/kb/HT6163 - https://support.apple.com/kb/HT6537 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - http://www.debian.org/security/2013/dsa-2785 - https://oval.cisecurity.org/repository/search/definitio
1/msg00042.html - http://www.debian.org/security/2013/dsa-2785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19065 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00077.html - http://support.apple.com/kb/HT6162 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html - http://archives.neohapsis.com/archives/bugtraq/2014-04/0009.html - https://code.google.com/p/chromium/issues/detail?id=305790 - http://googlechromereleases.blogspot.com/2013/10/stable-channel-update_15.html
CVE ID: CVE-2013-2929 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T15:52:21.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0159.html - http://www.securityfocus.com/bid/64111 - http://rhn.redhat.com/errata/RHSA-2014-0285.html - https://www.kernel.org/pub/
http://www.securityfocus.com/bid/64111 - http://rhn.redhat.com/errata/RHSA-2014-0285.html - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.54 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2115-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2116-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d049f74f2dbe71354d43d393ac3a188947811348 - http://www.ubuntu.com/usn/USN-2114-1 - http://www.ubuntu.com/usn/USN-2070-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1028148 - http://www.ubuntu.com/usn/USN-2112-1 - http://lists.opensuse.org/opensuse-security-announce/2
/show_bug.cgi?id=1028148 - http://www.ubuntu.com/usn/USN-2112-1 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.com/usn/USN-2109-1 - https://access.redhat.com/errata/RHSA-2018:1252 - http://www.ubuntu.com/usn/USN-2111-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2 - http://rhn.redhat.com/errata/RHSA-2014-0100.html - http://www.ubuntu.com/usn/USN-2075-1 - https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348
CVE ID: CVE-2013-2930 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T15:52:21.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable function tracing via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12ae030d54ef250706da5642fc7697cc60ad0df7 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.ubuntu.com/usn/
697cc60ad0df7 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.ubuntu.com/usn/USN-2112-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://www.ubuntu.com/usn/USN-2074-1 - http://www.ubuntu.com/usn/USN-2068-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2 - https://github.com/torvalds/linux/commit/12ae030d54ef250706da5642fc7697cc60ad0df7 - http://www.ubuntu.com/usn/USN-2072-1 - http://rhn.redhat.com/errata/RHSA-2014-0100.html - http://www.ubuntu.com/usn/USN-2075-1
CVE ID: CVE-2013-2931 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T15:52:21.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=271235 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19183 - https://code.google.com/p/chromium/issues/detail?id=263255 - https://code.google.com/p/chromium/issues/detail?id=285578 - https://code.google.co
p/chromium/issues/detail?id=263255 - https://code.google.com/p/chromium/issues/detail?id=285578 - https://code.google.com/p/chromium/issues/detail?id=297556 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html - https://code.google.com/p/chromium/issues/detail?id=282738 - https://code.google.com/p/chromium/issues/detail?id=296276 - https://code.google.com/p/chromium/issues/detail?id=303232 - https://code.google.com/p/chromium/issues/detail?id=299993 - http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=302810 - https://code.google.com/p/chromium/issues/detail?id=315823 - http://lists.opensuse.org/open
um/issues/detail?id=302810 - https://code.google.com/p/chromium/issues/detail?id=315823 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html - https://code.google.com/p/chromium/issues/detail?id=304226 - https://code.google.com/p/chromium/issues/detail?id=264574 - https://code.google.com/p/chromium/issues/detail?id=296804 - https://code.google.com/p/chromium/issues/detail?id=258723 - http://www.debian.org/security/2013/dsa-2799 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html - https://code.google.com/p/chromium/issues/detail?id=299835 - https://code.google.com/p/c
nnounce/2013-11/msg00026.html - https://code.google.com/p/chromium/issues/detail?id=299835 - https://code.google.com/p/chromium/issues/detail?id=306255 - https://code.google.com/p/chromium/issues/detail?id=286368 - https://code.google.com/p/chromium/issues/detail?id=314225
CVE ID: CVE-2013-2933 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-16T22:16:06.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2934 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-16T23:42:09.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 does not properly restrict access to web services, which has unspecified impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2935 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-17T01:41:42.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2936 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-16T19:09:12.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2937 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-17T04:13:49.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, related to debugging messages, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2938 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-16T23:31:30.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2939 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-16T20:36:31.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2940 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-16T22:16:01.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX137162
CVE ID: CVE-2013-2944 State: PUBLISHED Published: 2013-05-02T14:00:00 Last Updated: 2024-08-06T15:52:21.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature. Additional Analyst Notes: - CVE Program Container: References: - http://www.strongswan.org/blog/2013/04/30/strongswan-5.0.4-released-%28cve-2013-2944%29.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00121.html - http://www.debian.org/security/2013/dsa-2665 - http://www.securityfocus.com/bid/59580 - http://lists.opensuse.org/opensuse-updat
ww.debian.org/security/2013/dsa-2665 - http://www.securityfocus.com/bid/59580 - http://lists.opensuse.org/opensuse-updates/2013-05/msg00014.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00010.html - http://download.strongswan.org/patches/10_openssl_ecdsa_signature_patch/strongswan-4.3.5-5.0.3_openssl_ecdsa_signature.patch
CVE ID: CVE-2013-2945 State: PUBLISHED Published: 2014-04-02T15:00:00 Last Updated: 2024-08-06T15:52:21.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to execute arbitrary SQL commands via the show_statuses[] parameter. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-05/0004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83950 - http://www.securityfocus.com/bid/595
aq/2013-05/0004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83950 - http://www.securityfocus.com/bid/59599 - http://packetstormsecurity.com/files/121481/b2evolution-4.1.6-SQL-Injection.html - http://osvdb.org/92905 - http://b2evolution.net/news/2013/04/29/b2evolution-4-1-7-and-5-0-3 - https://www.htbridge.com/advisory/HTB23152
CVE ID: CVE-2013-2950 State: PUBLISHED Published: 2013-06-03T21:00:00 Last Updated: 2024-08-06T15:52:21.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21638864 - http://www-01.ibm.com/support/docview
ntainer: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21638864 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM85071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83618
CVE ID: CVE-2013-2951 State: PUBLISHED Published: 2018-07-11T16:00:00 Last Updated: 2024-08-06T15:52:21.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 7.0.0.x and 8.0.0.x write passwords to a trace file when tracing is enabled for the Selfcare Portlet (Profile Management), which allows local users to obtain sensitive information by reading the file. IBM X-Force ID: 83621. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21642097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83621
CVE ID: CVE-2013-2953 State: PUBLISHED Published: 2013-05-27T14:00:00Z Last Updated: 2024-09-17T02:57:27.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 relies on the MD5 algorithm for signatures in X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof SSL servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21637444
CVE ID: CVE-2013-2954 State: PUBLISHED Published: 2013-05-27T14:00:00 Last Updated: 2024-08-06T15:52:21.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not limit the number of incorrect authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21637444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83663