Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4385 State: PUBLISHED Published: 2013-10-09T14:44:00 Last Updated: 2024-08-06T16:45:12.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62690 - http://lists.nongnu.org/archive/html/chicken-announce/2013-09/msg00001.html - http://lists.nongnu.org/archive/html/c
0 - http://lists.nongnu.org/archive/html/chicken-announce/2013-09/msg00001.html - http://lists.nongnu.org/archive/html/chicken-announce/2013-09/msg00000.html - http://lists.gnu.org/archive/html/chicken-announce/2013-10/msg00000.html - https://security.gentoo.org/glsa/201612-54 - http://secunia.com/advisories/55009
CVE ID: CVE-2013-4386 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T16:45:14.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/foreman-announce/GKMNXM66Z84 - http://projects.theforeman.org/issues/3160 - http://rhn.redhat.com/errata/RHSA-2013-1522.html
CVE ID: CVE-2013-4387 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T16:45:14.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2024-1 - https://bugzilla.redhat.com/sho
yst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2024-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1011927 - https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47 - http://rhn.redhat.com/errata/RHSA-2013-1490.html - http://www.ubuntu.com/usn/USN-2039-1 - http://www.ubuntu.com/usn/USN-2022-1 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://www.ubuntu.com/usn/USN-2038-1 - http://www.ubuntu.com/usn/USN-2021-1 - http://www.ubuntu.com/usn/USN-2019-1 - http://www.ubuntu.com/usn/USN-2049-1 - http://rhn.redhat.com/errata/RHSA-2014-0284.html - http://www.ubuntu.com/usn/USN-2045-1 - http://www.ubuntu.com/usn/USN-2050-1 - http://w
.com/errata/RHSA-2014-0284.html - http://www.ubuntu.com/usn/USN-2045-1 - http://www.ubuntu.com/usn/USN-2050-1 - http://www.ubuntu.com/usn/USN-2041-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47 - http://www.openwall.com/lists/oss-security/2013/09/29/1
CVE ID: CVE-2013-4388 State: PUBLISHED Published: 2013-10-11T22:00:00 Last Updated: 2024-08-06T16:45:13.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18086 - http://secunia.com/advisories/59793 - http://www.videolan.org/developers/vlc-branch/NEWS - http://www.securityfocus.com/bid/62724 - htt
com/advisories/59793 - http://www.videolan.org/developers/vlc-branch/NEWS - http://www.securityfocus.com/bid/62724 - http://www.openwall.com/lists/oss-security/2013/10/01/2 - http://www.securitytracker.com/id/1029120 - http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=9794ec1cd268c04c8bca13a5fae15df6594dff3e
CVE ID: CVE-2013-4389 State: PUBLISHED Published: 2013-10-17T00:00:00 Last Updated: 2024-08-06T16:45:13.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2887 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html - https://groups.google.com/forum/message/raw?msg=ruby-secu
://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html - https://groups.google.com/forum/message/raw?msg=ruby-security-ann/yvlR1Vx44c8/elKJkpO2KVgJ - http://lists.opensuse.org/opensuse-updates/2013-12/msg00094.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00091.html - http://www.debian.org/security/2014/dsa-2888
CVE ID: CVE-2013-4390 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-17T00:15:43.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the resource parameter, related to "a custom login form and XSS." Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/SLING-3141 - http://www.securityfocus.com/bid/63241 - http://mail-archives.apache.org/mod_mbox/sling-dev
org/jira/browse/SLING-3141 - http://www.securityfocus.com/bid/63241 - http://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4qdFxEW9NXBJoMsrBama8LFNyir%2B61A0Vfzp4njEpeU%3Dw%40mail.gmail.com%3E - http://secunia.com/advisories/55249
CVE ID: CVE-2013-4391 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T16:45:13.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=859051 - https://security.gentoo.org/glsa/201612-34 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 - http://www.debian.org/security/2013/dsa-2777 -
sa/201612-34 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 - http://www.debian.org/security/2013/dsa-2777 - http://www.openwall.com/lists/oss-security/2013/10/01/9 - http://cgit.freedesktop.org/systemd/systemd/commit/?id=505b6a61c22d5565e9308045c7b9bf79f7d0517e
CVE ID: CVE-2013-4392 State: PUBLISHED Published: 2013-10-28T22:00:00.000Z Last Updated: 2025-06-09T15:43:12.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=859060 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 - http://www.openwall.com/lists/oss-security/2013/10/01/9
CVE ID: CVE-2013-4393 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T16:45:13.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service (logging service blocking) via a crafted file descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-34 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 - http://www.openwall.com/lists/oss-security/2013/10/01/9 - https://bugzilla.redhat.com/show_bug.cgi?id=859104
CVE ID: CVE-2013-4394 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T16:45:14.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors involving "special and control characters." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-34 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 - https://bugzilla.redhat.c
security.gentoo.org/glsa/201612-34 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 - https://bugzilla.redhat.com/show_bug.cgi?id=862324 - http://www.debian.org/security/2013/dsa-2777 - http://www.openwall.com/lists/oss-security/2013/10/01/9
CVE ID: CVE-2013-4395 State: PUBLISHED Published: 2020-02-12T15:33:53 Last Updated: 2024-08-06T16:45:14.831Z Vendors: SMF Products: SMF Problem Types: XSS Description: Simple Machines Forum (SMF) through 2.0.5 has XSS Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/01/8 - http://www.openwall.com/lists/oss-security/2013/10/02/1 - http://www.openwall.com/lists/oss-security/2013/10/02/3
CVE ID: CVE-2013-4396 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T16:45:12.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-10/msg00056.html - http://rhn.redhat.com/errata/RHSA-2013-1426.html - http://lists.opensuse.org/opensuse-
e-updates/2013-10/msg00056.html - http://rhn.redhat.com/errata/RHSA-2013-1426.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00060.html - http://www.debian.org/security/2013/dsa-2784 - http://www.ubuntu.com/usn/USN-1990-1 - http://www.securityfocus.com/bid/62892 - http://openwall.com/lists/oss-security/2013/10/08/6 - https://bugzilla.redhat.com/show_bug.cgi?id=1014561 - http://lists.x.org/archives/xorg-announce/2013-October/002332.html
CVE ID: CVE-2013-4397 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:45:14.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) name or (2) link in an archive, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://lists.feep.net:8080/pipermail/libtar/2013-October/000361.html - http://rhn.redhat.com/errata/RHSA-2013-1418.html - http://secunia.com/advisories/55253 - http://www.securitytracker.c
- http://rhn.redhat.com/errata/RHSA-2013-1418.html - http://secunia.com/advisories/55253 - http://www.securitytracker.com/id/1029166 - https://source.android.com/security/bulletin/2018-01-01 - http://www.openwall.com/lists/oss-security/2013/10/10/6 - http://secunia.com/advisories/55188 - http://repo.or.cz/w/libtar.git/commitdiff/45448e8bae671c2f7e80b860ae0fc0cedf2bdc04 - http://www.securitytracker.com/id/1040106 - http://www.debian.org/security/2013/dsa-2817 - http://www.securityfocus.com/bid/62922 - http://www.openwall.com/lists/oss-security/2013/10/10/4
CVE ID: CVE-2013-4398 State: REJECTED Published: 2013-10-13T10:00:00Z Last Updated: 2024-09-17T04:24:16.972Z Description: No description available.
CVE ID: CVE-2013-4399 State: PUBLISHED Published: 2014-12-12T15:00:00 Last Updated: 2024-08-06T16:45:13.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service (use-after-free and crash) by registering an event handler and then closing the connection. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8294aa0c1
95 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8294aa0c1750dcb49d6345cd9bd97bf421580d8b - http://www.securityfocus.com/bid/62972 - http://security.libvirt.org/2013/0013.html
CVE ID: CVE-2013-4400 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T16:45:12.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=3e2f27e13b94f7302ad948bcacb5e02c859a25fc - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7fcc799ad5d8f3e55b89b94e599903e3c092
7302ad948bcacb5e02c859a25fc - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7fcc799ad5d8f3e55b89b94e599903e3c092467 - http://wiki.libvirt.org/page/Maintenance_Releases - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8c3586ea755c40d5e01b22cb7b5c1e668cdec994 - https://bugzilla.redhat.com/show_bug.cgi?id=1015228 - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/121370.html
CVE ID: CVE-2013-4401 State: PUBLISHED Published: 2013-11-02T18:00:00 Last Updated: 2024-08-06T16:45:13.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - https://bugzilla.redhat.com/show_bug.cgi?id=1015259
isories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - https://bugzilla.redhat.com/show_bug.cgi?id=1015259 - http://wiki.libvirt.org/page/Maintenance_Releases - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=57687fd6bf7f6e1b3662c52f3f26c06ab19dc96c - http://www.ubuntu.com/usn/USN-2026-1 - http://secunia.com/advisories/55210 - http://www.securitytracker.com/id/1029241
CVE ID: CVE-2013-4402 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T16:45:14.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1015685 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00020.html - http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000334.html - http://www.ubuntu.com/usn/USN-1987-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=72
announce/2013q4/000334.html - http://www.ubuntu.com/usn/USN-1987-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725433 - http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000333.html - http://www.debian.org/security/2013/dsa-2773 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00025.html - http://rhn.redhat.com/errata/RHSA-2013-1459.html - http://www.debian.org/security/2013/dsa-2774
CVE ID: CVE-2013-4403 State: REJECTED Published: 2013-12-19T22:00:00 Last Updated: 2013-12-19T21:57:00 Description: No description available.
CVE ID: CVE-2013-4404 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T16:45:14.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive information or perform privileged operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=995038 - http://rhn.redhat.com/errata/RHSA-2013-1851.html - http://rhn.redhat.com/errata/RHSA-2013-1852.html
CVE ID: CVE-2013-4405 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T16:45:13.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1851.html - http://rhn.redhat.com/errata/RHSA-2013-1852.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=998561
CVE ID: CVE-2013-4406 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T16:45:14.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitive information by reading a Quick Tab. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2103187 - https://drupal.org/node/2103121 - http://www.openwall.com/lists/oss-security/2013/10/05/1 - https://drupal.org/node/2103127 - https://drupal.org/node/2103113 - http://www.openwall.com/lists/oss-se
/2013/10/05/1 - https://drupal.org/node/2103127 - https://drupal.org/node/2103113 - http://www.openwall.com/lists/oss-security/2013/10/04/14
CVE ID: CVE-2013-4407 State: PUBLISHED Published: 2013-11-23T00:00:00 Last Updated: 2024-08-06T16:45:14.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721634 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00018.html
ebian.org/cgi-bin/bugreport.cgi?bug=721634 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00018.html - http://www.debian.org/security/2013/dsa-2801 - https://metacpan.org/release/GETTY/HTTP-Body-1.23/ - https://www.openwall.com/lists/oss-security/2024/04/07/1 - http://git.shadowcat.co.uk/gitweb/gitweb.cgi?p=catagits/HTTP-Body.git%3Ba=commit%3Bh=13ac5b23c083bc56e32dd706ca02fca292bd2161 - http://git.shadowcat.co.uk/gitweb/gitweb.cgi?p=catagits/HTTP-Body.git%3Ba=commit%3Bh=cc75c886256f187cda388641931e8dafad6c2346 - http://www.openwall.com/lists/oss-security/2024/04/07/1
CVE ID: CVE-2013-4408 State: PUBLISHED Published: 2013-12-10T02:00:00 Last Updated: 2024-08-06T16:45:13.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=141660010015249&w=2 - http://www.ubuntu.com/usn/USN-2054-1 - http://rhn.redhat.com/errata/RHSA-2013-1805.html - http://www.samba.org/samba
2 - http://www.ubuntu.com/usn/USN-2054-1 - http://rhn.redhat.com/errata/RHSA-2013-1805.html - http://www.samba.org/samba/security/CVE-2013-4408 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://marc.info/?l=bugtraq&m=141660010015249&w=2 - http://www.samba.org/samba/ftp/patches/security/samba-4.1.2-CVE-2013-4408-CVE-2012-6150.patch - http://www.debian.org/security/2013/dsa-2812 - http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00063.html - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.htm
rity.gentoo.org/glsa/glsa-201502-15.xml - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - http://rhn.redhat.com/errata/RHSA-2013-1806.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://www.securityfocus.com/bid/64191 - http://rhn.redhat.com/errata/RHSA-2014-0009.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:299
CVE ID: CVE-2013-4409 State: PUBLISHED Published: 2019-11-04T20:45:44 Last Updated: 2024-08-06T16:45:14.736Z Vendors: Python Software Foundation; Beanbag Products: Djblets, Review Board Problem Types: eval() vulnerability Description: An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4409 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409 - https://access.redhat.com/security/cve/cve-2013-4409 - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html
dhat.com/security/cve/cve-2013-4409 - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html - http://www.securityfocus.com/bid/63029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88059
CVE ID: CVE-2013-4410 State: PUBLISHED Published: 2019-12-02T17:36:52 Last Updated: 2024-08-06T16:45:14.855Z Vendors: ReviewBoard Products: ReviewBoard Problem Types: access-control problems with REST API Description: ReviewBoard: has an access-control problem in REST API Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4410 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4410 - https://access.redhat.com/security/cve/cve-2013-4410 - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html - http://lists.fed