Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
suse-security-announce/2013-05/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - https://bugzilla.mozilla.org/show_bug.cgi?id=722831 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17021 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-39.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
CVE ID: CVE-2013-0793 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history navigation, which allows remote attackers to conduct cross-site scripting (XSS) attacks or phishing attacks by leveraging control over navigation timing. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/
ainer: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/usn/USN-1791-1 - http://www.debian.org/security/2013/dsa-2699 - http://www.securityfocus.com/bid/58837 - https://bugzilla.mozilla.org/show_bug.cgi?id=803870 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16928 - http://rhn.redhat.com/errata/RHSA-2013-0696.html - http://www.mozilla.org/security/announce/2013/mfsa2013-38.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0697.html - http:
opensuse.org/opensuse-security-announce/2013-04/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0697.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
CVE ID: CVE-2013-0794 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to conduct phishing attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.mozilla.org/security/announce/2013/mfsa2013-37.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17065 - http://lists.opensuse.org/opensuse-securi
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17065 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - https://bugzilla.mozilla.org/show_bug.cgi?id=626775 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
CVE ID: CVE-2013-0795 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote attackers to bypass the Same Origin Policy or possibly execute arbitrary JavaScript code with chrome privileges via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-sec
rafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/usn/USN-1791-1 - http://www.debian.org/security/2013/dsa-2699 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - http://rhn.redhat.com/errata/RHSA-2013-0696.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=825697 - http://rhn.redhat.com/errata/RHSA-2013-0697.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://www.mozilla.org/security/announce/2013/mfsa2013-36.html - htt
/opensuse-security-announce/2013-04/msg00013.html - http://www.mozilla.org/security/announce/2013/mfsa2013-36.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16842
CVE ID: CVE-2013-0796 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (free of unallocated memory) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/u
iner: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/usn/USN-1791-1 - http://www.debian.org/security/2013/dsa-2699 - https://bugzilla.mozilla.org/show_bug.cgi?id=838413 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - https://bugzilla.mozilla.org/show_bug.cgi?id=827106 - http://rhn.redhat.com/errata/RHSA-2013-0696.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - http://www.mozilla.org/security/announce/2013/mfsa2013-35.html - http://rhn.redhat.com/errata/RHSA-2013-0697.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://list
om/errata/RHSA-2013-0697.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
CVE ID: CVE-2013-0797 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allows local users to gain privileges via a Trojan horse DLL file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
ity-announce/2013-05/msg00019.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17146 - http://www.mozilla.org/security/announce/2013/mfsa2013-34.html - https://bugzilla.mozilla.org/show_bug.cgi?id=830134 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
CVE ID: CVE-2013-0798 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 20.0 on Android uses world-writable and world-readable permissions for the app_tmp installation directory in the local filesystem, which allows attackers to modify add-ons before installation via an application that leverages the time window during which app_tmp is used. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=844832 - http://www.mozilla.org/security/announce/2013/mfsa2013-33.html - http://lists.opensuse.org/opensuse-security-announce/
- http://www.mozilla.org/security/announce/2013/mfsa2013-33.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
CVE ID: CVE-2013-0799 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155 - http://www.mozilla.org/security/announce/2
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17155 - http://www.mozilla.org/security/announce/2013/mfsa2013-32.html - https://bugzilla.mozilla.org/show_bug.cgi?id=848417 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html
CVE ID: CVE-2013-0800 State: PUBLISHED Published: 2013-04-03T10:00:00 Last Updated: 2024-08-06T14:41:47.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to execute arbitrary code via crafted values that trigger attempted use of a (1) negative box boundary or (2) negative box size, leading to an out-of-bounds write operation. Additional Analyst Notes: - CVE Program Con
ndary or (2) negative box size, leading to an out-of-bounds write operation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html - http://www.ubuntu.com/usn/USN-1791-1 - http://www.debian.org/security/2013/dsa-2699 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html - http://www.mozilla.org/security/announce/2013/mfsa2013-31.html - http://rhn.redhat.com/errata/RHSA-2013-0696.html - https://bugzilla.mozilla.org/show_bug.cgi?id=825721 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
ensuse-security-announce/2013-04/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16909 - http://rhn.redhat.com/errata/RHSA-2013-0697.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html
CVE ID: CVE-2013-0801 State: PUBLISHED Published: 2013-05-16T10:00:00 Last Updated: 2024-08-06T14:41:47.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2699 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:165 - http://lists.op
ww.debian.org/security/2013/dsa-2699 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:165 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html - http://www.ubuntu.com/usn/USN-1823-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=866544 - http://rhn.redhat.com/errata/RHSA-2013-0821.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html - http://www.mozilla.org/security/announce/2013/mfsa2013-41.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17062 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=864558 - http:/
suse.org/opensuse-security-announce/2013-05/msg00011.html - https://bugzilla.mozilla.org/show_bug.cgi?id=864558 - http://www.securityfocus.com/bid/59855 - http://rhn.redhat.com/errata/RHSA-2013-0820.html - https://bugzilla.mozilla.org/show_bug.cgi?id=852315 - https://bugzilla.mozilla.org/show_bug.cgi?id=808402 - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html - http://www.ubuntu.com/usn/USN-1822-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=849597 - https://bugzilla.mozilla.org/show_bug.cgi?id=787283
CVE ID: CVE-2013-0802 State: REJECTED Published: 2020-07-10T14:26:36 Last Updated: 2020-07-10T14:26:36 Description: No description available.
CVE ID: CVE-2013-0803 State: PUBLISHED Published: 2020-02-11T16:55:35 Last Updated: 2024-08-06T14:41:47.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82378 - https://packetstormsecurity.com/files/cve/CVE-2013-0803
CVE ID: CVE-2013-0804 State: PUBLISHED Published: 2013-02-24T02:00:00Z Last Updated: 2024-09-16T23:52:00.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7011687 - https://www.htbridge.com/advisory/HTB23131 - https://bugzilla.novell.com/show_bug.cgi?id=792535
CVE ID: CVE-2013-0805 State: PUBLISHED Published: 2014-03-20T16:00:00 Last Updated: 2024-08-06T14:41:47.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the search feature in iTop (aka IT Operations Portal) 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to pages/UI.php or (2) expression parameter to pages/run_query.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.csnc.ch/misc/files/advisories/CVE-2013-0805.txt - http://secunia.com/advisories/51702 - h
ner: References: - https://www.csnc.ch/misc/files/advisories/CVE-2013-0805.txt - http://secunia.com/advisories/51702 - http://packetstormsecurity.com/files/119767/iTop-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81498 - http://seclists.org/bugtraq/2013/Jan/102 - http://archives.neohapsis.com/archives/fulldisclosure/2013-01/0208.html - http://osvdb.org/89574
CVE ID: CVE-2013-0807 State: PUBLISHED Published: 2014-03-28T15:00:00 Last Updated: 2024-08-06T14:41:47.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a new_section action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81472 - http://osvdb.org/89536 - https://www.htbridge.com/advisory/HTB23137 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0104.html - htt
36 - https://www.htbridge.com/advisory/HTB23137 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0104.html - https://github.com/oyejorge/gpEasy-CMS/commit/40f1b4a5749a621cd27c5ca39900dbcf8701969d - http://packetstormsecurity.com/files/119805/gpEasy-3.5.2-Cross-Site-Scripting.html
CVE ID: CVE-2013-0809 State: PUBLISHED Published: 2013-03-04T16:00:00 Last Updated: 2024-08-06T14:41:47.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-1493. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00012.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.mandriva.com/secu
urity-announce/2013-03/msg00012.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 - http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19479 - http://rhn.redhat.com/errata/RHSA-2013-0604.html - http://www.us-cert.gov/ncas/alerts/TA13-064A - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19076 - http://rhn.redhat.com/errata/RHSA-2013-1
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19076 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00011.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html - http://www.ubuntu.com/usn/USN-1755-2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://www.oracle.com/ocom/groups/public/%40otn/documents/webcontent/1915099.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19320 - http://www.kb.c
099.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19320 - http://www.kb.cert.org/vuls/id/688246 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0088 - http://rhn.redhat.com/errata/RHSA-2013-0603.html - http://rhn.redhat.com/errata/RHSA-2013-0601.html - http://www.securityfocus.com/bid/58296
CVE ID: CVE-2013-0810 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-10-21T16:50:13.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18579 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-071 - htt
3Aorg.mitre.oval%3Adef%3A18579 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-071 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-0811 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:41:47.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1307. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definit
ins/2013/ms13-037 - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15979
CVE ID: CVE-2013-0828 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF functionality in Google Chrome before 24.0.1312.52 does not properly perform a cast of an unspecified variable during processing of the root of the structure tree, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16272 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - h
on/oval%3Aorg.mitre.oval%3Adef%3A16272 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=162153
CVE ID: CVE-2013-0829 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 24.0.1312.52 does not properly maintain database metadata, which allows remote attackers to bypass intended file-access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=162114 - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16322
CVE ID: CVE-2013-0830 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15907 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issu
- http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://code.google.com/p/chromium/issues/detail?id=162066
CVE ID: CVE-2013-0831 State: PUBLISHED Published: 2013-01-15T21:00:00 Last Updated: 2024-08-06T14:41:47.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to have an unspecified impact by leveraging access to an extension process. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-02/msg00005.html - http://googlechromereleases.blogspot.com/2013/01/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15917 - https://code.google.com/p/chromium/issues/detail?id=1618
ository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15917 - https://code.google.com/p/chromium/issues/detail?id=161836