Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
www.debian.org/security/2013/dsa-2692 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00165.html - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2002 State: PUBLISHED Published: 2013-06-15T20:00:00 Last Updated: 2024-08-06T15:20:37.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html - http://www.ubuntu.com/usn/USN-1865-1 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html - http://www.debian.org/security/2013/dsa-2680 - http://www.open
sts.opensuse.org/opensuse-updates/2013-06/msg00138.html - http://www.debian.org/security/2013/dsa-2680 - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.securityfocus.com/bid/60137 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2003 State: PUBLISHED Published: 2013-06-15T20:00:00 Last Updated: 2024-08-06T15:20:37.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60121 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106791.html - http://www.debian.org/security/2013/dsa-2681 - http://www.ubuntu.com/usn/USN-1856-1 - http://www.openwall.com/lists/oss-security/2013/05/23/3 -
ecurity/2013/dsa-2681 - http://www.ubuntu.com/usn/USN-1856-1 - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2004 State: PUBLISHED Published: 2013-06-15T20:00:00 Last Updated: 2024-08-06T15:20:37.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1854-1 - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23 - http://www.debian.org/sec
s/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23 - http://www.debian.org/security/2013/dsa-2693
CVE ID: CVE-2013-2005 State: PUBLISHED Published: 2013-06-15T20:00:00 Last Updated: 2024-08-06T15:20:37.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html - http://www.ubuntu.com/usn/USN-1865-1 - http://www.sec
edoraproject.org/pipermail/package-announce/2013-May/106785.html - http://www.ubuntu.com/usn/USN-1865-1 - http://www.securityfocus.com/bid/60133 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html - http://www.debian.org/security/2013/dsa-2680 - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2006 State: PUBLISHED Published: 2013-05-21T18:00:00 Last Updated: 2024-08-06T15:20:37.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openstack/keystone/commit/c5037dd6b82909efaaa8720e8cfa8bdb8b4a0edd - http://www.securityfocus.com/bid/59411 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html - https://bugs.launchpad.net/ossn/+bug/11682
p://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html - https://bugs.launchpad.net/ossn/+bug/1168252 - http://rhn.redhat.com/errata/RHSA-2013-0806.html - http://www.openwall.com/lists/oss-security/2013/04/24/1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.html - https://bugs.launchpad.net/keystone/+bug/1172195 - http://www.openwall.com/lists/oss-security/2013/04/24/2
CVE ID: CVE-2013-2007 State: PUBLISHED Published: 2013-05-21T18:00:00 Last Updated: 2024-08-06T15:20:37.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html - http://osvdb.org/93032 - https://bugzilla.redhat.com/show_bug.cgi?id=956082 - http://www.securitytracker.com/id/1028521 - http://www.securityfocus.com/bid/59675 - http://www.openwall.com/lists/oss-security/2
w.securitytracker.com/id/1028521 - http://www.securityfocus.com/bid/59675 - http://www.openwall.com/lists/oss-security/2013/05/06/5 - http://secunia.com/advisories/53325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84047 - http://rhn.redhat.com/errata/RHSA-2013-0791.html - http://rhn.redhat.com/errata/RHSA-2013-0896.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67
CVE ID: CVE-2013-2008 State: PUBLISHED Published: 2020-02-07T13:06:07 Last Updated: 2024-08-06T15:20:37.440Z Vendors: Super Cache Plugin authors Products: Super Cache Plugin Problem Types: XSS Description: WordPress Super Cache Plugin 1.3 has XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/24/10 - http://www.openwall.com/lists/oss-security/2013/04/24/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83798
CVE ID: CVE-2013-2009 State: PUBLISHED Published: 2020-02-07T13:09:37 Last Updated: 2024-08-06T15:20:37.479Z Vendors: WP Super Cache Plugin authors Products: WP Super Cache Plugin Problem Types: Remote PHP Code Execution Vulnerability Description: WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/24/10 - http://www.openwall.com/lists/oss-security/2013/04/24/8 - http://www.securityfocus.com/bid/59470 - http://www.openwall.com/lists/oss-security/2013/04/24/12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83799
CVE ID: CVE-2013-2010 State: PUBLISHED Published: 2020-02-12T14:45:51 Last Updated: 2024-08-06T15:20:37.485Z Vendors: W3 Total Cache Plugin authors Products: W3 Total Cache Plugin Problem Types: Remote PHP Code Execution Vulnerability Description: WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130999/WordPress-W3-Total-Cache-PHP-Code-Execution.html - http://www.securityfocus.com/bid/59316 - http://www.exploit-db.com/exploits/25137 - http://www.openwall.com/lists/oss-security/2013/04/24/9
CVE ID: CVE-2013-2011 State: PUBLISHED Published: 2019-12-26T20:54:37 Last Updated: 2024-08-06T15:20:37.426Z Vendors: Super Cache Plugin Products: Super Cache Plugin Problem Types: Other Description: WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2011 - http://www.securityfocus.com/bid/59473 - http://www.openwall.com/lists/oss-security/2013/04/25/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83800
CVE ID: CVE-2013-2012 State: PUBLISHED Published: 2019-10-31T19:50:51 Last Updated: 2024-08-06T15:20:37.350Z Vendors: autojump Products: autojump Problem Types: Untrusted Search Path Description: autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2012 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2012 - http://www.openwall.com/lists/oss-security/2013/04/25/14 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83827 - https://github.com/wting/autojump/commit/ad09ee27d402be797b3
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/83827 - https://github.com/wting/autojump/commit/ad09ee27d402be797b3456abff6edeb4291edfec - https://github.com/wting/autojump/commit/c763b2afadb188ab52849c21d43d2e8fe5b8800a
CVE ID: CVE-2013-2013 State: PUBLISHED Published: 2013-10-01T20:00:00 Last Updated: 2024-08-06T15:20:37.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/23/4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16937 - https://bugs.launchpad.net/python-keystoneclient/+bug/938315
CVE ID: CVE-2013-2014 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T15:20:37.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84347 - http://lists.fedoraproject.org/pipermail/package-announce/2013-July/111914.html - https://bugs.launchpad.net/keystone/+bug/1098177 - http://secunia.com/advisories/53397 - http://www.securityfocus.com/bid/59936 - https://bugs.launchpad.net/keystone/+b
- http://secunia.com/advisories/53397 - http://www.securityfocus.com/bid/59936 - https://bugs.launchpad.net/keystone/+bug/1099025
CVE ID: CVE-2013-2015 State: PUBLISHED Published: 2013-04-29T10:00:00 Last Updated: 2024-08-06T15:20:37.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/0e9a9a1ad619e7e987815d20262d36a2f95717ca - http://www.kernel.o
r: References: - https://github.com/torvalds/linux/commit/0e9a9a1ad619e7e987815d20262d36a2f95717ca - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0e9a9a1ad619e7e987815d20262d36a2f95717ca - https://bugzilla.redhat.com/show_bug.cgi?id=957123 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.openwall.com/lists/oss-security/2013/04/26/16
CVE ID: CVE-2013-2016 State: PUBLISHED Published: 2019-12-30T21:47:07 Last Updated: 2024-08-06T15:20:37.490Z Vendors: qemu Products: qemu (virtio-rng) Problem Types: Other Description: A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu address space and thus increase their privileges on the host. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2016 - https://bugzilla.redhat.com/show_
m Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2016 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2016 - https://access.redhat.com/security/cve/cve-2013-2016 - http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00002.html - http://www.openwall.com/lists/oss-security/2013/04/29/5 - http://www.openwall.com/lists/oss-security/2013/04/29/6 - http://www.securityfocus.com/bid/59541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83850 - https://github.com/qemu/qemu/commit/5f5a1318653c08e435cfa52f60b6a712815b659d
CVE ID: CVE-2013-2017 State: PUBLISHED Published: 2013-05-03T10:00:00 Last Updated: 2024-08-06T15:20:37.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of skb consumption in conjunction with a double-free error. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6ec82562ffc6f297d0de36d65776cff8e5704867 - https://bugzilla.redhat.com/show_bug.cgi?id=957705 - http://ftp.osuos
mit%3Bh=6ec82562ffc6f297d0de36d65776cff8e5704867 - https://bugzilla.redhat.com/show_bug.cgi?id=957705 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://www.openwall.com/lists/oss-security/2013/04/29/10 - https://github.com/torvalds/linux/commit/6ec82562ffc6f297d0de36d65776cff8e5704867 - https://support.f5.com/csp/article/K39655464
CVE ID: CVE-2013-2018 State: PUBLISHED Published: 2020-02-19T23:40:32 Last Updated: 2024-08-06T15:20:37.356Z Vendors: BOINC Products: BOINC Problem Types: SQL Injection Description: Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/28/3 - http://www.openwall.com/lists/oss-security/2013/04/29/11
CVE ID: CVE-2013-2019 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T15:20:37.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multiple file_signature elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/28/3 - http://www.securityfocus.com/bid/59565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83930 - http://www.openwall.com/lists/oss-security/2013/04/29/11
CVE ID: CVE-2013-2020 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:37.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53150 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html - htt
ge-announce/2013-June/109514.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html - http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html - http://support.apple.com/kb/HT5892 - https://github.com/vrtadmin/clamav-devel/commit/270e368b99e93aa5447d46c797c92c3f9f39f375 - http://www.ubuntu.com/usn/USN-1816-1 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00020.html - http://secunia.com/advisories/53182 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.openwall.com/
m/advisories/53182 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.openwall.com/lists/oss-security/2013/04/29/20 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html - http://www.securityfocus.com/bid/59434 - http://www.openwall.com/lists/oss-security/2013/04/25/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:159 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html - https://bugzilla.clamav.net/show_bug.cgi?id=7055 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html - http://support.apple.com/kb/HT5880
CVE ID: CVE-2013-2021 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:37.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53150 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html - http://lists.opensuse.or
-May/105575.html - http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html - http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html - http://support.apple.com/kb/HT5892 - http://www.ubuntu.com/usn/USN-1816-1 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00020.html - https://github.com/vrtadmin/clamav-devel/commit/24ff855c82d3f5c62bc5788a5776cefbffce2971 - http://secunia.com/advisories/53182 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.openwall.com/lists/oss-security/2013/04/29/20 - http://lists.apple.com/archives/security-announce/2013/Sep/msg0
tp://www.openwall.com/lists/oss-security/2013/04/29/20 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html - http://www.securityfocus.com/bid/59434 - http://www.openwall.com/lists/oss-security/2013/04/25/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:159 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html - https://bugzilla.clamav.net/show_bug.cgi?id=7053 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html - http://support.apple.com/kb/HT5880
CVE ID: CVE-2013-2022 State: PUBLISHED Published: 2013-08-17T16:00:00 Last Updated: 2024-08-06T15:20:37.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.23 allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id parameters, a different vulnerability than CVE-2013-1942 and CVE-2013-2023, as demonstrated by using the alert function in the jQuery parameter. NOTE: these are the same parameters as CVE-2013-1942, but the fix for CVE-2013-1942 uses a blacklist for the jQuery parameter. Additional Analyst Notes
ters as CVE-2013-1942, but the fix for CVE-2013-1942 uses a blacklist for the jQuery parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/happyworm/jPlayer/commit/c5fe17bb4459164bd59153b57248cf94b8867373 - http://marc.info/?l=oss-security&m=136773622321563&w=2 - http://www.openwall.com/lists/oss-security/2013/06/27/7 - http://marc.info/?l=oss-security&m=136570964825921&w=2 - http://www.jplayer.org/2.3.0/release-notes/ - http://www.openwall.com/lists/oss-security/2013/07/04/5 - http://seclists.org/fulldisclosure/2013/Apr/192 - http://marc.info/?l=oss-security&m=136726705917858&w=2
CVE ID: CVE-2013-2023 State: PUBLISHED Published: 2013-08-15T17:00:00 Last Updated: 2024-08-06T15:20:37.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to incomplete blacklists, a different vulnerability than CVE-2013-1942 and CVE-2013-2022. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/happyworm/jPlayer/commit/8ccc429598d62eebe9f65a0a4e6fd406a123c8b4 - https://github.com/happyworm/jPlayer/commit/c2417972
happyworm/jPlayer/commit/8ccc429598d62eebe9f65a0a4e6fd406a123c8b4 - https://github.com/happyworm/jPlayer/commit/c2417972af1295be8dcc07470b0e3d25b0a77e0b - http://marc.info/?l=oss-security&m=136773622321563&w=2 - http://www.openwall.com/lists/oss-security/2013/06/27/7 - https://github.com/happyworm/jPlayer/issues/162 - http://marc.info/?l=oss-security&m=136570964825921&w=2 - http://www.jplayer.org/latest/release-notes/ - http://www.openwall.com/lists/oss-security/2013/07/04/5 - http://seclists.org/fulldisclosure/2013/Apr/192 - http://marc.info/?l=oss-security&m=136726705917858&w=2
CVE ID: CVE-2013-2024 State: PUBLISHED Published: 2019-10-31T19:57:23 Last Updated: 2024-08-06T15:20:37.412Z Vendors: chicken Products: chicken Problem Types: Metacharacters Description: OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2024 - https://access.redhat.com/security/cve/cve-2013-2024 - http://www.securityfocus.com/bid/59320 - http://www.openwall.com/lists/oss-security/2013/04/29/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85064 - https://security.gentoo.org/glsa/201612-54 - https://lists.nongnu.
/exchange.xforce.ibmcloud.com/vulnerabilities/85064 - https://security.gentoo.org/glsa/201612-54 - https://lists.nongnu.org/archive/html/chicken-announce/2013-04/msg00000.html
CVE ID: CVE-2013-2025 State: PUBLISHED Published: 2014-04-25T17:00:00 Last Updated: 2024-08-06T15:20:37.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ushahidi/Ushahidi_Web/issues/1009 - https://github.com/ushahidi/Ushahidi_Web/pull/1056 - http://www.securityfocus.com/bid/59410 - https://github.com/rjmackay/Ushahidi_Web/commit/593719ff805a302e3ab2f2e535c875f90a04ea56 - https://wiki.ushahidi.com/display/WIKI/1+May+2013+-+CVE-2
Ushahidi_Web/commit/593719ff805a302e3ab2f2e535c875f90a04ea56 - https://wiki.ushahidi.com/display/WIKI/1+May+2013+-+CVE-2013-2025
CVE ID: CVE-2013-2026 State: REJECTED Published: 2013-09-26T10:00:00Z Last Updated: 2024-09-16T22:20:20.132Z Description: No description available.