Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0331 State: PUBLISHED Published: 2013-03-19T14:00:00 Last Updated: 2024-08-06T14:25:09.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=914879 - http://rhn.redhat.com/errata/RHSA-2013-0638.html - http://www.openwall.com/lists/oss-security/2013/02/21/7 - http://www.securityfocus.com/bid/57994 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.org/disp
4 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
CVE ID: CVE-2013-0332 State: PUBLISHED Published: 2013-03-20T15:00:00Z Last Updated: 2024-09-16T17:38:26.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or (3) action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zoneminder.com/forums/viewtopic.php?f=1&t=17979 - http://www.zoneminder.com/wiki/index.php/Change_History - http://www.debian.org/security/2013/dsa-2640 - http://www.openwall.com/lists/oss-security/2013/02/21/8 - http://bugs.debian.org/cgi-bin/bugreport.
rity/2013/dsa-2640 - http://www.openwall.com/lists/oss-security/2013/02/21/8 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700912 - http://www.openwall.com/lists/oss-security/2013/02/21/9
CVE ID: CVE-2013-0333 State: PUBLISHED Published: 2013-01-30T11:00:00 Last Updated: 2024-08-06T14:25:09.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/628463 - http://www.debian.org/security/2013/
tes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/628463 - http://www.debian.org/security/2013/dsa-2613 - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html - https://groups.google.com/group/rubyonrails-security/msg/52179af76915e518?dmode=source&output=gplain - http://rhn.redhat.com/errata/RHSA-2013-0201.html - http://rhn.redhat.com/errata/RHSA-2013-0202.html - https://puppet.com/security/cve/cve-2013-0333 - http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/ - http://rhn.redhat.com/errata/RHSA-2013-0203
blog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/ - http://rhn.redhat.com/errata/RHSA-2013-0203.html
CVE ID: CVE-2013-0334 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T14:25:09.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201609-02 - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140609.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140654.html - http://bundler.io/blog/2014/08/14/bundler-may-install-gems-f
t.org/pipermail/package-announce/2014-October/140654.html - http://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve-2013-0334.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140655.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00092.html - http://www.securityfocus.com/bid/70099
CVE ID: CVE-2013-0335 State: PUBLISHED Published: 2013-03-22T21:00:00 Last Updated: 2024-08-06T14:25:09.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/90657 - http://secunia.com/advisories/52728 - https://bugs.launchpad.net/nova/+bug/1125378 - http://www.openwall.com/lists/oss-security/2013/02/26/7 - https://review.openstack.org/#/c/22872/ - http://www.ubuntu.
- http://www.openwall.com/lists/oss-security/2013/02/26/7 - https://review.openstack.org/#/c/22872/ - http://www.ubuntu.com/usn/USN-1771-1 - https://review.openstack.org/#/c/22758 - http://rhn.redhat.com/errata/RHSA-2013-0709.html - http://secunia.com/advisories/52337 - https://review.openstack.org/#/c/22086/
CVE ID: CVE-2013-0336 State: PUBLISHED Published: 2014-11-03T23:00:00 Last Updated: 2024-08-06T14:25:09.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=913751 - https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=7b45e33400355df44e75576ef7f70a39d163bf8e - http://www.securityfocus.
://git.fedorahosted.org/cgit/freeipa.git/commit/?id=7b45e33400355df44e75576ef7f70a39d163bf8e - http://www.securityfocus.com/bid/58747 - https://fedorahosted.org/freeipa/ticket/3539 - http://secunia.com/advisories/52763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83132
CVE ID: CVE-2013-0337 State: PUBLISHED Published: 2013-10-27T00:00:00Z Last Updated: 2024-08-06T14:25:09.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55181 - http://www.openwall.com/lists/oss-security/2013/02/24/1 - http://www.openwall.com/lists/oss-security/2013/02/22/1 - http://security.gentoo.org/glsa/glsa-201310-04.xml - http://www.openwall.com/lists/oss-s
sts/oss-security/2013/02/22/1 - http://security.gentoo.org/glsa/glsa-201310-04.xml - http://www.openwall.com/lists/oss-security/2013/02/21/15
CVE ID: CVE-2013-0338 State: PUBLISHED Published: 2013-04-25T23:00:00 Last Updated: 2024-08-06T14:25:09.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52662 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00114.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
org/opensuse-updates/2013-03/msg00114.html - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=912400 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html - http://marc.info/?l=bugtraq&m=142798889927587&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.debian.org/security/2013/dsa-2652 - http://marc.info/?l=bugtraq&m=142798889927587&w=2 - http://secunia.com/advisories/55568 - https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab - http://www.ubuntu.com/usn/USN-1782-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:056
CVE ID: CVE-2013-0339 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T14:25:09.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because libxml2 already provides the ability to disable external entity expansion, the responsibility for reso
gued that because libxml2 already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed and each affected application would need its own CVE. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52662 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html - http://openwall.com/lists/oss-security/2013/02/21/24 - http://openwall.com/lists/oss-security/2013/02/22/3 - http://seclists.org/oss-sec/2013/q4/188 - http://seclists.org/oss-sec/2013/q4/184 - http://seclists.org/oss-sec/2013/q4/182 - ht
eclists.org/oss-sec/2013/q4/188 - http://seclists.org/oss-sec/2013/q4/184 - http://seclists.org/oss-sec/2013/q4/182 - http://www.ubuntu.com/usn/USN-1904-2 - http://www.ubuntu.com/usn/USN-1904-1 - http://www.debian.org/security/2013/dsa-2652 - https://bugzilla.redhat.com/show_bug.cgi?id=915149 - http://secunia.com/advisories/54172 - http://secunia.com/advisories/55568 - https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f - http://www.openwall.com/lists/oss-security/2013/04/12/6
CVE ID: CVE-2013-0340 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T14:25:10.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with applicat
rovides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2013/02/22/3 - http://www.openwall.com/lists/oss-security/2013/04/12/6 - http://www.osvdb.org/90634 - http://securitytracker.com/id?1028213 - https://security.gentoo.org/glsa/201701-21 - http://www.securityfocus.com/bid/58233 - https://support.apple.com/kb/HT212805 - https://support.apple.com/kb/HT212804 - https://support.apple.com/kb/HT212807 -
https://support.apple.com/kb/HT212805 - https://support.apple.com/kb/HT212804 - https://support.apple.com/kb/HT212807 - https://support.apple.com/kb/HT212819 - https://support.apple.com/kb/HT212814 - https://support.apple.com/kb/HT212815 - http://seclists.org/fulldisclosure/2021/Sep/33 - http://seclists.org/fulldisclosure/2021/Sep/34 - http://seclists.org/fulldisclosure/2021/Sep/40 - http://seclists.org/fulldisclosure/2021/Sep/35 - http://seclists.org/fulldisclosure/2021/Sep/38 - http://seclists.org/fulldisclosure/2021/Sep/39 - https://lists.apache.org/thread.html/r41eca5f4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rfb
4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/10/07/4 - http://seclists.org/fulldisclosure/2021/Oct/62 - http://seclists.org/fulldisclosure/2021/Oct/63 - http://seclists.org/fulldisclosure/2021/Oct/61
CVE ID: CVE-2013-0341 State: REJECTED Published: 2013-09-26T10:00:00Z Last Updated: 2024-09-16T18:45:27.213Z Description: No description available.
CVE ID: CVE-2013-0342 State: PUBLISHED Published: 2019-12-09T20:55:36 Last Updated: 2024-08-06T14:25:09.629Z Vendors: pyrad Products: pyrad Problem Types: Cryptography Description: The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=911685 - http://www.openwall.com/lists/oss-security/2013/02/15/9 - http://www.openwall.com/lists/oss-security/2013/02/22/2 - http://www.openwall.com/lists/oss-security/2013/02/21/27 - http://www
www.openwall.com/lists/oss-security/2013/02/22/2 - http://www.openwall.com/lists/oss-security/2013/02/21/27 - http://www.securityfocus.com/bid/57984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82134 - https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5
CVE ID: CVE-2013-0343 State: PUBLISHED Published: 2013-02-28T19:00:00 Last Updated: 2024-08-06T14:25:09.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2024-1 - http://openwall.com/lists/oss-security/2013/01/21/11
ram Container: References: - http://www.ubuntu.com/usn/USN-2024-1 - http://openwall.com/lists/oss-security/2013/01/21/11 - http://rhn.redhat.com/errata/RHSA-2013-1490.html - http://www.ubuntu.com/usn/USN-1977-1 - http://www.ubuntu.com/usn/USN-2039-1 - http://www.ubuntu.com/usn/USN-2022-1 - https://bugzilla.redhat.com/show_bug.cgi?id=914664 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://www.ubuntu.com/usn/USN-2038-1 - http://www.ubuntu.com/usn/USN-2020-1 - http://www.ubuntu.com/usn/USN-2021-1 - http://www.ubuntu.com/usn/USN-1976-1 - http://www.ubuntu.com/usn/USN-2019-1 - http://www.openwall.com/lists/oss-security/2013/02/22/6 - http://openwall.com/lists/oss-security/2013/01/16/7
-2019-1 - http://www.openwall.com/lists/oss-security/2013/02/22/6 - http://openwall.com/lists/oss-security/2013/01/16/7 - http://rhn.redhat.com/errata/RHSA-2013-1449.html - http://openwall.com/lists/oss-security/2012/12/05/4 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2023-1 - http://www.ubuntu.com/usn/USN-2050-1
CVE ID: CVE-2013-0344 State: REJECTED Published: 2021-08-19T15:37:53 Last Updated: 2021-08-19T15:37:53 Description: No description available.
CVE ID: CVE-2013-0345 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T14:25:09.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/90586 - http://www.openwall.com/lists/oss-security/2013/02/23/4 - http://www.openwall.com/lists/oss-security/2013/02/22/14 - http://www.securityfocus.com/bid/58125
CVE ID: CVE-2013-0346 State: PUBLISHED Published: 2014-02-15T00:00:00 Last Updated: 2024-08-06T14:25:09.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/23/5 - https://bugzilla.redhat.com/show_bug.cgi?id=924841
CVE ID: CVE-2013-0347 State: PUBLISHED Published: 2014-11-16T11:00:00 Last Updated: 2024-08-06T14:25:09.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q1/404 - http://seclists.org/oss-sec/2013/q1/415 - http://osvdb.org/90585 - http://www.securityfocus.com/bid/58126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82356 - http://seclists.org/oss-sec/2013/q1/405
CVE ID: CVE-2013-0348 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T14:25:09.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://opensource.dyc.edu/gitweb/?p=sthttpd.git%3Ba=commitdiff%3Bh=d2e186dbd58d274a0dea9b59357edc8498b5388d - http://www.openwall.com/lists/oss-security/2013/02/23/7 - https://bugs.gentoo.org/show_bug.cgi?id=458896 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00015.ht
2/23/7 - https://bugs.gentoo.org/show_bug.cgi?id=458896 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00015.html - https://bugzilla.redhat.com/show_bug.cgi?id=924857 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00050.html
CVE ID: CVE-2013-0349 State: PUBLISHED Published: 2013-02-28T19:00:00 Last Updated: 2024-08-06T14:25:09.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6 - http://www.ubuntu.com/usn/USN-1805-1 - http://www.ubuntu.com/usn/USN-1808-1 - http://www.openwall.com/lists/oss-security/2013/02/23/3
untu.com/usn/USN-1805-1 - http://www.ubuntu.com/usn/USN-1808-1 - http://www.openwall.com/lists/oss-security/2013/02/23/3 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - https://bugzilla.redhat.com/show_bug.cgi?id=914298 - https://github.com/torvalds/linux/commit/0a9ab9bdb3e891762553f667066190c1d22ad62b - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a9ab9bdb3e891762553f667066190c1d22ad62b
CVE ID: CVE-2013-0350 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T14:25:09.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: tmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q1/417 - http://osvdb.org/90588 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701211
CVE ID: CVE-2013-0351 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T14:25:09.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19439 - https://oval.cisecurity.org/repository/
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19439 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19199 - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.securityfocus.com/bid/57720 - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://rhn.redhat.com/errata/RHSA-2013-0236.html - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www.kb.cert.org/vuls/id/858729 - http://rhn.redhat.com/errata/RHSA-2013-0237.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - https://oval.cisecurity.org
.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16703 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2013-0352 State: PUBLISHED Published: 2013-01-17T01:30:00 Last Updated: 2024-08-06T14:25:09.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Content Management. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57365 - http://www.oracle.com/technetwork/topics/security/cp
m Container: References: - http://www.securityfocus.com/bid/57365 - http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html - http://secunia.com/advisories/57126 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://marc.info/?l=bugtraq&m=139344343412337&w=2
CVE ID: CVE-2013-0353 State: PUBLISHED Published: 2013-01-17T01:30:00 Last Updated: 2024-08-06T14:25:10.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 allows remote attackers to affect integrity via unknown vectors related to Enterprise Configuration Management. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html - http://www.mandriva.com/security/advisories
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150