Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7447 State: PUBLISHED Published: 2016-02-17T15:00:00 Last Updated: 2024-08-06T18:09:17.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mate-desktop/eom/issues/93 - http://www.ubuntu.com/usn/USN-2898-2 - http://www.openwall.com/lists/oss-security/2016/02/10/6 -
desktop/eom/issues/93 - http://www.ubuntu.com/usn/USN-2898-2 - http://www.openwall.com/lists/oss-security/2016/02/10/6 - http://www.ubuntu.com/usn/USN-2898-1 - https://bugs.launchpad.net/ubuntu/+source/gtk+2.0/+bug/1540811 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00010.html - https://git.gnome.org/browse/gtk+/tree/NEWS - http://www.securityfocus.com/bid/83239 - http://www.openwall.com/lists/oss-security/2016/02/10/2 - https://bugzilla.gnome.org/show_bug.cgi?id=703220 - https://git.gnome.org/browse/gtk+/commit?id=894b1ae76a32720f4bb3d39cf460402e3ce331d6
CVE ID: CVE-2013-7448 State: PUBLISHED Published: 2016-02-23T19:00:00 Last Updated: 2024-08-06T18:09:16.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/19/5 - https://github.com/yarolig/didiwiki/commit/5e5c796617e1712905dc5462b94bd5e6c08d15ea - https://github.com/OpenedHand/didiwiki/pull/1/files - http://www.openwall.com/lists/oss-security/2016/02/19/7 - http://www.openwall.com/lists/oss-security/2016/02/19/6 - http://ww
//www.openwall.com/lists/oss-security/2016/02/19/7 - http://www.openwall.com/lists/oss-security/2016/02/19/6 - http://www.openwall.com/lists/oss-security/2016/02/19/4 - http://www.debian.org/security/2016/dsa-3485
CVE ID: CVE-2013-7449 State: PUBLISHED Published: 2016-04-21T14:00:00 Last Updated: 2024-08-06T18:09:16.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hexchat/hexchat/commit/c9b63f7f9be01692b03fa15275135a4910a7e02d - http://www.ubuntu.com/usn/USN-2945-1 - https://github.com/hexchat/hexchat/issues/524 - http://hexch
5275135a4910a7e02d - http://www.ubuntu.com/usn/USN-2945-1 - https://github.com/hexchat/hexchat/issues/524 - http://hexchat.readthedocs.org/en/latest/changelog.html - https://bugzilla.redhat.com/show_bug.cgi?id=1081839
CVE ID: CVE-2013-7450 State: PUBLISHED Published: 2017-04-03T15:00:00 Last Updated: 2024-08-06T18:09:16.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1328345 - http://www.openwall.com/lists/oss-security/2016/04/18/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1003326 - https://github.com/pulp/pulp/pull/627 - http://www.openwall.com/lists/oss-security/2016/05/20/1 - http://www.openwall.com/lists/oss-security/2016/04/18/11
CVE ID: CVE-2013-7451 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T18:09:16.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/41 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2013-7452 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T18:09:16.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/41 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2013-7453 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T18:09:16.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/41 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2013-7454 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T18:09:16.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/41 - http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE ID: CVE-2013-7455 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-06T18:09:16.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler. Additional Analyst Notes: - CVE Program Container: References: - https://penteston.com/OSVDB-105462 - http://www.ubuntu.com/usn/USN-2961-1 - http://www.kb.cert.org/vuls/id/369800 - https://github.com/mm2/Little-CMS/commit/fefaaa43c382eee632ea3ad0cfa915335140e1db
CVE ID: CVE-2013-7456 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T18:09:17.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90859 - http://www.openwall.com/lists/oss-security/2016/05/26/3 - https://bugs.php.net/bug.php?id=72227 -
focus.com/bid/90859 - http://www.openwall.com/lists/oss-security/2016/05/26/3 - https://bugs.php.net/bug.php?id=72227 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.debian.org/security/2016/dsa-3602 - https://github.com/php/php-src/commit/7a1aac3343af85b4af4df5f8844946eaa27394ab?w=1 - https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a - http://php.net/ChangeLog-5.php - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://www.debian.org/security/2016/dsa-3587 - http://www.ubuntu.com/usn/USN-3030-1
CVE ID: CVE-2013-7457 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T18:09:16.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2013-7458 State: PUBLISHED Published: 2016-08-10T14:00:00 Last Updated: 2024-08-06T18:09:16.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/antirez/redis/pull/3322 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00030.html - https://github.com/antirez/redis/pull/1418 - https://github.com/antirez/redis/blob/3.2/00-RELEASENOTES - http://lists.opensuse.org/opensuse-updates/2016-08/msg00029.html - https://
com/antirez/redis/blob/3.2/00-RELEASENOTES - http://lists.opensuse.org/opensuse-updates/2016-08/msg00029.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832460 - https://github.com/antirez/linenoise/issues/121 - https://github.com/antirez/linenoise/pull/122 - http://www.debian.org/security/2016/dsa-3634 - https://github.com/antirez/redis/issues/3284
CVE ID: CVE-2013-7459 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-06T18:09:16.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1409754 - https://pony7.fr/ctf:public:32c3:cryptmsg - http://www.openwall.com/lists/oss-security/2016/12/27/8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
ists/oss-security/2016/12/27/8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJ37R2YLX56YZABFNAOWV4VTHTGYREAE/ - https://github.com/dlitz/pycrypto/issues/176 - http://www.securityfocus.com/bid/95122 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C6BWNADPLKDBBQBUT3P75W7HAJCE7M3B/ - https://security.gentoo.org/glsa/201702-14 - https://github.com/dlitz/pycrypto/commit/8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4
CVE ID: CVE-2013-7460 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T18:09:16.990Z Vendors: Intel Products: Application Control (MAC) Problem Types: A write protection and execution bypass vulnerability Description: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10054
CVE ID: CVE-2013-7461 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T18:09:17.246Z Vendors: Intel Products: Change Control (MCC) Problem Types: A write protection and execution bypass vulnerability Description: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10054
CVE ID: CVE-2013-7462 State: PUBLISHED Published: 2017-03-14T22:00:00 Last Updated: 2024-08-06T18:09:16.966Z Vendors: Intel Products: SaaS Control Console (SCC) Platform Problem Types: A directory traversal vulnerability Description: A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated users to view contents of arbitrary system files that did not have file system level read access restrictions via a null-byte injection exploit. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB
dditional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10056
CVE ID: CVE-2013-7463 State: PUBLISHED Published: 2017-04-19T17:00:00 Last Updated: 2024-08-06T18:09:16.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Gurpartap/aescrypt/issues/4 - http://www.securityfocus.com/bid/98035
CVE ID: CVE-2013-7464 State: PUBLISHED Published: 2018-08-08T00:00:00 Last Updated: 2024-08-06T18:09:16.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is not configured, the Anti-CSRF Token used is predictable and would permit an attacker to bypass the CSRF protections, because an automatically generated secret is not used. Additional Analyst Notes: - CVE Program Container: References: - http://repo.or.cz/csrf-magic.git/commit/9d2537f70d58b16aeba89779aaf1573b8d618e11 - http://repo.or.cz/csrf-magic.git/blob/HEAD:/NEWS.txt - http://csrf.htmlpurifier.org/news/2013/0717-1.0.4-released
CVE ID: CVE-2013-7465 State: PUBLISHED Published: 2018-10-05T05:00:00Z Last Updated: 2024-09-16T17:23:28.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/ultimate-server-android-vulns.html - http://www.vapidlabs.com/advisory.php?v=108
CVE ID: CVE-2013-7466 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-06T18:09:16.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation. Additional Analyst Notes: - CVE Program Container: References: - http://hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html
CVE ID: CVE-2013-7467 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-06T18:09:16.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter. Additional Analyst Notes: - CVE Program Container: References: - http://hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html
CVE ID: CVE-2013-7468 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-06T18:09:16.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/121391/public_phpInjection-smf204.txt
CVE ID: CVE-2013-7469 State: PUBLISHED Published: 2019-02-21T03:00:00 Last Updated: 2024-08-06T18:09:16.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/haiwen/seafile/issues/350 - https://drive.google.com/file/d/1rwYsnuhZZxmSR6Zs8rJlWW3R27XBOSJU/view
CVE ID: CVE-2013-7470 State: PUBLISHED Published: 2019-04-23T02:22:33 Last Updated: 2024-08-06T18:09:16.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b - htt
ttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f2e5ddcc0d12f9c4c7b254358ad245c9dddce13b - https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7 - https://support.f5.com/csp/article/K21914362 - https://www.arista.com/en/support/advisories-notices/security-advisories/7098-security-advisory-40
CVE ID: CVE-2013-7471 State: PUBLISHED Published: 2019-06-11T20:46:45 Last Updated: 2024-08-06T18:09:16.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.s3cur1ty.de/m1adv2013-020 - https://www.exploit-db.com/exploits/27044
CVE ID: CVE-2013-7472 State: PUBLISHED Published: 2019-06-15T22:28:13 Last Updated: 2024-08-06T18:09:16.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2013/03/05/2 - https://wordpress.org/plugins/count-per-day/#developers
CVE ID: CVE-2013-7473 State: PUBLISHED Published: 2019-08-01T14:21:42 Last Updated: 2024-08-06T18:09:16.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account. Additional Analyst Notes: - CVE Program Container: References: - http://zeroscience.mk/blog/07/2013/windu-cms-2-2-multiple-stored-xss-and-csrf-vulnerabilities/
CVE ID: CVE-2013-7474 State: PUBLISHED Published: 2019-08-01T14:19:10 Last Updated: 2024-08-06T18:09:16.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users. Additional Analyst Notes: - CVE Program Container: References: - http://zeroscience.mk/blog/07/2013/windu-cms-2-2-multiple-stored-xss-and-csrf-vulnerabilities/
CVE ID: CVE-2013-7475 State: PUBLISHED Published: 2019-08-13T16:47:59 Last Updated: 2024-08-06T18:09:16.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-plugin plugin before 3.52 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-plugin/#developers
CVE ID: CVE-2013-7476 State: PUBLISHED Published: 2019-08-14T15:29:42 Last Updated: 2024-08-06T18:09:17.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-fields/#developers
CVE ID: CVE-2013-7477 State: PUBLISHED Published: 2019-08-22T12:25:52 Last Updated: 2024-08-06T18:09:16.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers
CVE ID: CVE-2013-7478 State: PUBLISHED Published: 2019-08-22T12:26:42 Last Updated: 2024-08-06T18:09:16.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers
CVE ID: CVE-2013-7479 State: PUBLISHED Published: 2019-08-22T12:27:29 Last Updated: 2024-08-06T18:09:16.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers
CVE ID: CVE-2013-7480 State: PUBLISHED Published: 2019-08-22T12:28:11 Last Updated: 2024-08-06T18:09:16.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers
CVE ID: CVE-2013-7481 State: PUBLISHED Published: 2019-08-22T12:46:07 Last Updated: 2024-08-06T18:09:17.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-plugin plugin before 3.3.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-plugin/#developers
CVE ID: CVE-2013-7482 State: PUBLISHED Published: 2019-08-22T13:12:14 Last Updated: 2024-08-06T18:09:16.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reflex-gallery plugin before 1.4.3 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/reflex-gallery/#developers
CVE ID: CVE-2013-7483 State: PUBLISHED Published: 2019-08-22T19:36:32 Last Updated: 2024-08-06T18:09:17.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/slidedeck2/#developers
CVE ID: CVE-2013-7484 State: PUBLISHED Published: 2019-11-30T00:00:00 Last Updated: 2024-08-06T18:09:16.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zabbix before 5.0 represents passwords in the users table with unsalted MD5. Additional Analyst Notes: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-16551 - https://support.zabbix.com/browse/ZBXNEXT-1898 - https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html
CVE ID: CVE-2013-7485 State: PUBLISHED Published: 2020-01-02T18:05:35 Last Updated: 2024-08-06T18:09:17.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or HTML via the publication name, which is not properly handled in an error message. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100385 - http://www.securitytracker.com/id/1029394 - http://xforce.is
Program Container: References: - http://osvdb.org/100385 - http://www.securitytracker.com/id/1029394 - http://xforce.iss.net/xforce/xfdb/89251 - http://secunia.com/advisories/55837 - http://xforce.iss.net/xforce/xfdb/89250 - http://seclists.org/bugtraq/2013/Nov/127 - http://packetstormsecurity.com/files/124185/Open-Xchange-frontend6-6.22.4-backend-7.4.0-Cross-Site-Scripting.html - https://forum.open-xchange.com/showthread.php?8090-Open-Xchange-releases-Security-Patch-2013-10-30-for-v7-2-2-and-v7-4-0