Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2270 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T15:27:41.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/90732 - http://packetstormsecurity.com/files/120594/Airvana-HubBub-C1-600-RT-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/82494 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0155.html - http://www.
orce.ibmcloud.com/vulnerabilities/82494 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0155.html - http://www.securityfocus.com/bid/58194
CVE ID: CVE-2013-2271 State: PUBLISHED Published: 2013-11-15T20:00:00Z Last Updated: 2024-09-16T23:06:13.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10004 - http://packetstormsecurity.com/files/120613/dlinkdsl2740b-bypass.txt - http://www.webapp-security.com/2013/03/d-link-dsl-2740b-adsl-router-authentication-bypass - http://www.webapp-secu
txt - http://www.webapp-security.com/2013/03/d-link-dsl-2740b-adsl-router-authentication-bypass - http://www.webapp-security.com/wp-content/uploads/2013/03/D-Link-DSL-2740B-ADSL-Router-Authentication-Bypass2.txt
CVE ID: CVE-2013-2272 State: PUBLISHED Published: 2013-03-12T10:00:00Z Last Updated: 2024-09-16T23:05:38.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 allows remote attackers to determine associations between wallet addresses and IP addresses via a series of large Bitcoin transactions with insufficient fees. Additional Analyst Notes: - CVE Program Container: References: - https://bitcointalk.org/?topic=135856 - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2013-2273 State: PUBLISHED Published: 2013-03-12T10:00:00Z Last Updated: 2024-09-16T23:40:26.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.6.5rc1, and 0.7.x before 0.7.3rc1 make it easier for remote attackers to obtain potentially sensitive information about returned change by leveraging certain predictability in the outputs of a Bitcoin transaction. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2013-2274 State: PUBLISHED Published: 2013-03-20T16:00:00 Last Updated: 2024-08-06T15:27:41.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html - http://rhn.redhat.com/errata/RHSA-2013-0710.html - http://www.debian.org/security/2013/dsa-2643 - http://www.securityfocus.com/bid/58447 - https://puppetlabs.com/secu
ml - http://www.debian.org/security/2013/dsa-2643 - http://www.securityfocus.com/bid/58447 - https://puppetlabs.com/security/cve/cve-2013-2274/ - http://secunia.com/advisories/52596 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html
CVE ID: CVE-2013-2275 State: PUBLISHED Published: 2013-03-20T16:00:00 Last Updated: 2024-08-06T15:27:41.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html - http://rhn.redhat.com/errata/RHSA-2013-0710.html - http://www.debian.org/security/2013/dsa-2643 - https://
g00004.html - http://rhn.redhat.com/errata/RHSA-2013-0710.html - http://www.debian.org/security/2013/dsa-2643 - https://puppetlabs.com/security/cve/cve-2013-2275/ - http://secunia.com/advisories/52596 - http://ubuntu.com/usn/usn-1759-1 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html - http://www.securityfocus.com/bid/58449
CVE ID: CVE-2013-2276 State: PUBLISHED Published: 2013-02-27T16:00:00Z Last Updated: 2024-09-17T03:37:28.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted audio data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8a6449167a6da8cb747cfe3502ae86ffaac2ed48
CVE ID: CVE-2013-2277 State: PUBLISHED Published: 2013-02-27T16:00:00 Last Updated: 2024-08-06T15:27:41.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth and chroma depth, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted H.264 data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bdeb61ccc67911cfc5e20c7cfb1312d0501ca90a - http://www.ubuntu.com/usn/U
p://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=bdeb61ccc67911cfc5e20c7cfb1312d0501ca90a - http://www.ubuntu.com/usn/USN-1790-1
CVE ID: CVE-2013-2278 State: PUBLISHED Published: 2014-04-01T00:00:00 Last Updated: 2024-08-06T15:36:44.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to log messages and the "internal log handler to the Windows Event log." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/525830 - http://www.warftp.org/index.php?cmd=show_article&article_id=1035
CVE ID: CVE-2013-2279 State: PUBLISHED Published: 2013-03-21T17:00:00Z Last Updated: 2024-09-17T02:36:48.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52610 - http://archives.neohapsis.com/archives/bugtraq/2013-03/0118.html - https://support.ca.com/irj/portal/anonymous/phpsupco
http://archives.neohapsis.com/archives/bugtraq/2013-03/0118.html - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53E50CBD-6F6A-4B3A-85FF-36E44ABED8D5%7D - http://www.securityfocus.com/bid/58609
CVE ID: CVE-2013-2287 State: PUBLISHED Published: 2014-04-04T14:00:00 Last Updated: 2024-08-06T15:36:44.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) notify or (2) blog parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dognaedis.com/vulns/DGS-SEC-16.html - http://osvdb.org/90840
CVE ID: CVE-2013-2289 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T15:36:44.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.dognaedis.com/vulns/DGS-SEC-18.html - http://secunia.com/advisories/52464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82583
CVE ID: CVE-2013-2290 State: PUBLISHED Published: 2013-03-28T23:00:00 Last Updated: 2024-08-06T15:36:44.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless access points to inject arbitrary web script or HTML via a crafted SSID. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52690 - http://www.securityfocus.com/bid/58579 - https://exchange.x
ntainer: References: - http://secunia.com/advisories/52690 - http://www.securityfocus.com/bid/58579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82917 - http://osvdb.org/91485 - http://www.arubanetworks.com/support/alerts/aid-042213.asc
CVE ID: CVE-2013-2292 State: PUBLISHED Published: 2013-03-12T10:00:00Z Last Updated: 2024-09-16T18:29:52.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to create a nonstandard Bitcoin transaction containing multiple OP_CHECKSIG script opcodes. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs - https://bitcointalk.org/?topic=140078
CVE ID: CVE-2013-2293 State: PUBLISHED Published: 2013-03-12T10:00:00Z Last Updated: 2024-09-16T17:33:18.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory without incrementally checking for spent prevouts, which allows remote attackers to cause a denial of service (disk I/O consumption) via a Bitcoin transaction with many inputs corresponding to many different parts of the stored block chain. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVE-2013-2293 - https://bitcointalk.org/?topic=144122 - https://en.bitcoin.it/
References: - https://en.bitcoin.it/wiki/CVE-2013-2293 - https://bitcointalk.org/?topic=144122 - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2013-2294 State: PUBLISHED Published: 2020-01-30T20:29:45 Last Updated: 2024-08-06T15:36:44.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a (1) tag name to the Shortlog table in templates/shortlog.php or branch name to the (2) Shortlog table in templates/shortlog.php or (3) Heads table in plates/summary.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/120862/ViewGit-0.0.6-Cross-Site-Scripting.html - http://freecode.com/projects/viewgit/releases/353086 - http:
.com/files/120862/ViewGit-0.0.6-Cross-Site-Scripting.html - http://freecode.com/projects/viewgit/releases/353086 - http://www.exploit-db.com/exploits/24862 - http://seclists.org/fulldisclosure/2013/Mar/174
CVE ID: CVE-2013-2296 State: PUBLISHED Published: 2013-09-17T01:00:00Z Last Updated: 2024-09-17T03:13:29.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on (1) modifying the logging setting, (2) modifying the versioning setting, or (3) accessing activity logs via a request. Additional Analyst Notes: - CVE Program Container: References: - https://eucalyptus.atlassian.net/browse/EUCA-3074 - http://www.eucalyptus.com/resources/security/adviso
r: References: - https://eucalyptus.atlassian.net/browse/EUCA-3074 - http://www.eucalyptus.com/resources/security/advisories/esa-10
CVE ID: CVE-2013-2297 State: PUBLISHED Published: 2013-09-17T01:00:00Z Last Updated: 2024-09-16T21:07:29.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203, which allows local users to gain privileges via unspecified vectors, a related issue to CVE-2013-2069. Additional Analyst Notes: - CVE Program Container: References: - http://www.eucalyptus.com/resources/security/advisories/esa-12
CVE ID: CVE-2013-2298 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T15:36:46.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/04/28/3 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125125.html - http://secunia.com/advisories/53192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83931 - http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdif
ps://exchange.xforce.ibmcloud.com/vulnerabilities/83931 - http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdiff%3Bh=2fea03824925cbcb976f4191f4d8321e41a4d95b - http://thread.gmane.org/gmane.comp.distributed.boinc.user/3741 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125128.html - http://www.securityfocus.com/bid/59539
CVE ID: CVE-2013-2299 State: PUBLISHED Published: 2013-08-22T01:00:00Z Last Updated: 2024-09-16T21:03:27.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Advantech WebAccess (formerly BroadWin WebAccess) before 7.1 2013.05.30 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-225-01
CVE ID: CVE-2013-2300 State: PUBLISHED Published: 2013-03-27T19:00:00Z Last Updated: 2024-09-16T23:01:55.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FlickWnn (aka OpenWnn/Flick support) application 2.02 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000028 - http://jvn.jp/en/jp/JVN11434157/index.html
CVE ID: CVE-2013-2301 State: PUBLISHED Published: 2013-03-29T10:00:00Z Last Updated: 2024-09-16T23:31:22.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/inputmethods/OpenWnn/+/59aefa242169b7a51c2381daee58ff22fd1834ce/ChangeLog.txt - http://jvn.jp/en/jp/JVN01167429/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000025 - http://jvn.jp/en/jp/JVN01167429/99
//jvn.jp/en/jp/JVN01167429/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000025 - http://jvn.jp/en/jp/JVN01167429/995309/index.html
CVE ID: CVE-2013-2302 State: PUBLISHED Published: 2013-04-04T19:00:00Z Last Updated: 2024-09-17T02:16:02.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to arbitrary users by leveraging shell access, as demonstrated by a TELNET or SSH session to the server. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN04288738/458182/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000031 - http://jvn.jp/en/jp/JVN04288738/index.html
CVE ID: CVE-2013-2303 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-16T19:41:30.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sleipnir 4.0.0.4000 and earlier on Windows allows remote attackers to spoof the SSL lock icon and address-bar colors via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000032 - http://jvn.jp/en/jp/JVN65034198/index.html
CVE ID: CVE-2013-2304 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-16T18:14:17.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000033 - http://jvn.jp/en/jp/JVN02895867/index.html
CVE ID: CVE-2013-2305 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T16:18:26.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20130415up10.php - http://jvn.jp/en/jp/JVN06251813/index.html - http://jvn.jp/en/jp/JVN06251813/374951/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000034
CVE ID: CVE-2013-2306 State: PUBLISHED Published: 2013-04-26T10:00:00Z Last Updated: 2024-09-16T18:29:37.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN01313594/index.html - https://play.google.com/store/apps/details?id=jp.jig.product.browser_plus - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000036
CVE ID: CVE-2013-2307 State: PUBLISHED Published: 2013-04-26T10:00:00Z Last Updated: 2024-09-17T03:53:04.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55074201/index.html - https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000037
CVE ID: CVE-2013-2308 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-17T00:30:48.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own passwords, and consequently bypass an Office 365 restriction, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.softbanktech.jp/news/20121029.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000035 - http://jvn.jp/en/jp/JVN61972596/index.html
CVE ID: CVE-2013-2309 State: PUBLISHED Published: 2013-06-17T01:00:00Z Last Updated: 2024-09-16T17:18:50.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the "mobile version color scheme." Additional Analyst Notes: - CVE Program Container: References: - http://www.openpne.jp/archives/11096/ - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000038 - http://jvn.jp/en/jp/JVN18501376/index.html
CVE ID: CVE-2013-2310 State: PUBLISHED Published: 2013-06-17T01:00:00Z Last Updated: 2024-09-16T17:32:46.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile smartphones with the WISPrClient application before 1.3.1, SoftBank Disney Mobile Android smartphones with the Wi-Fi application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly c
i application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly connect to access points, which allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85371480/397327/index.html - http://jvn.jp/en/jp/JVN85371480/index.html - http://jvn.jp/en/jp/JVN85371480/995417/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000039 - http://jvn.jp/en/jp/JVN85371480/995319/index.html
CVE ID: CVE-2013-2311 State: PUBLISHED Published: 2013-05-22T10:00:00Z Last Updated: 2024-09-17T03:58:55.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget) in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN10461119/index.html - https://groups.google.com/group/web2py/msg/ca10dffa2f0b2731?dmode=source&output=gplain - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000040
CVE ID: CVE-2013-2312 State: PUBLISHED Published: 2013-05-29T19:00:00Z Last Updated: 2024-09-16T21:03:33.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the shopping-cart screen in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/weakness.php?id=40 - http://jvn.jp/en/jp/JVN52552792/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000041 - http://svn.ec-cube.net/open_trac/changeset/22604