Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=51738&r2=51737&pathrev=51738 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00007.html - http://secunia.com/advisories/56285 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00014.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=51738 - http://secunia.com/advisories/56313 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9388 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00011.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:296 - http://www.wireshark.org/security/wnpa-sec-2013-66.html - http://rhn.redhat.com/errata/RHSA-2014-0342.html
CVE ID: CVE-2013-7113 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T18:01:18.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc?view=revision&revision=53803 - http://secunia.com/advisories/56052 - http://www.wireshark.org/security/wnpa-sec-2013-67.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00007.html - http://
ireshark.org/security/wnpa-sec-2013-67.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00007.html - http://www.debian.org/security/2013/dsa-2825 - http://anonsvn.wireshark.org/viewvc/trunk-1.10/epan/dissectors/packet-bssgp.c?r1=53803&r2=53802&pathrev=53803 - http://secunia.com/advisories/56313 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9488 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00011.html
CVE ID: CVE-2013-7114 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T18:01:19.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp.c in the NTLMSSP v2 dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 allow remote attackers to cause a denial of service (application crash) via a long domain name in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56052 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00007.html - http://secunia.com/advisories/56285 - http://lists.opensuse.org/open
ensuse.org/opensuse-updates/2014-01/msg00007.html - http://secunia.com/advisories/56285 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00014.html - http://www.debian.org/security/2013/dsa-2825 - http://secunia.com/advisories/56313 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ntlmssp.c?r1=53626&r2=53625&pathrev=53626 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00011.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:296 - http://rhn.redhat.com/errata/RHSA-2014-0342.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=53626 - http://www.wireshark.org/security/wnpa-sec-2013-68.html
CVE ID: CVE-2013-7115 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7116 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7117 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7118 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7119 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7120 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7121 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7122 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7123 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7124 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7125 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7126 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7127 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T18:01:19.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securelist.com/en/blog/8168/Loophole_in_Safari - https://exchange.xforce.ibmcloud.com/vulnerabilities/89941
CVE ID: CVE-2013-7128 State: PUBLISHED Published: 2013-12-17T11:00:00Z Last Updated: 2024-09-16T16:13:56.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cfg file upon a Remember Credentials action, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ValveSoftware/SteamOS/issues/19
CVE ID: CVE-2013-7129 State: PUBLISHED Published: 2013-12-17T16:00:00 Last Updated: 2024-08-06T18:01:18.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the jQuery parameter to assets/js/jplayer.swf. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89356 - http://packetstormsecurity.com/files/124240 - http://www.securityfocus.com/bid/64046
CVE ID: CVE-2013-7130 State: PUBLISHED Published: 2014-02-06T16:00:00 Last Updated: 2024-08-06T18:01:19.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users via ephemeral storage. Additional Analyst Notes: - CVE Program Container: References: - https://review.openstack.org/#/c/68659/ - https://review.openstack.org/#/c/68658/ - http://www.securityfocus.com/bid/65106 - https://revie
nstack.org/#/c/68659/ - https://review.openstack.org/#/c/68658/ - http://www.securityfocus.com/bid/65106 - https://review.openstack.org/#/c/68660/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/90652 - https://bugs.launchpad.net/nova/+bug/1251590 - http://secunia.com/advisories/56450 - http://osvdb.org/102416 - http://www.ubuntu.com/usn/USN-2247-1 - http://rhn.redhat.com/errata/RHSA-2014-0231.html - http://www.openwall.com/lists/oss-security/2014/01/23/5 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127732.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127735.html
CVE ID: CVE-2013-7134 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:18.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phusion/juvia/issues/55 - http://www.openwall.com/lists/oss-security/2013/12/16/3 - http://www.openwall.com/lists/oss-security/2013/12/18/1
CVE ID: CVE-2013-7135 State: PUBLISHED Published: 2014-01-28T00:00:00 Last Updated: 2024-08-06T18:01:18.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows local users to have an unspecified impact by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/16/5 - https://rt.cpan.org/Public/Bug/Display.html?id=91450 - http://www.openwall.com/lists/oss-security/2013/12/18/2 - http://www.openwall.com/lists/oss-security/2014/01/07/7 - http://www.mandriva.com/security/advisories?name=MDV
12/18/2 - http://www.openwall.com/lists/oss-security/2014/01/07/7 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:021
CVE ID: CVE-2013-7136 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T18:01:19.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number of possible WPA-PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.planitcomputing.ie/upc-wifi-attack.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/90133 - http://www.exploit-db.com/exploits/30358/
CVE ID: CVE-2013-7137 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T18:01:18.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30916 - https://github.com/joshf/Burden/commit/edaa1bb8f73d6f3c8b2e78b67f1b40e02fccd0c1 - https://github.com/joshf/Burden/issues/2 - http://www.securityfocus.com/archive/1/530703/100/0/threaded - https://github.com/joshf/Burden/releases/tag/1.8
sues/2 - http://www.securityfocus.com/archive/1/530703/100/0/threaded - https://github.com/joshf/Burden/releases/tag/1.8.1 - https://www.htbridge.com/advisory/HTB23192
CVE ID: CVE-2013-7138 State: PUBLISHED Published: 2014-01-09T15:00:00 Last Updated: 2024-08-06T18:01:18.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64717 - https://www.htbridge.com/advisory/HTB23191
CVE ID: CVE-2013-7139 State: PUBLISHED Published: 2014-01-09T15:00:00 Last Updated: 2024-08-06T18:01:18.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64715 - https://www.htbridge.com/advisory/HTB23191
CVE ID: CVE-2013-7140 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T18:01:19.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote authenticated users to read portions of arbitrary files via vectors related to the SAX builder and the WebDAV interface. NOTE: this issue has been labeled as both absolute path traversal and XXE, but the root cause may be XXE, since XXE can be exploited to conduct absolute path traversal and other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.
al and other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90543 - http://www.securityfocus.com/bid/65015 - http://www.osvdb.org/102194 - http://www.securitytracker.com/id/1029650 - http://seclists.org/bugtraq/2014/Jan/57
CVE ID: CVE-2013-7141 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T18:01:19.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90544 - http://www.securitytracker.com/id/1029650 - http://osvdb.org/102192 - http://seclists.org/bugtraq/2014/Jan/57
CVE ID: CVE-2013-7142 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T18:01:19.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified oAuth API functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90545 - http://osvdb.org/102193 - http://www.securitytracker.com/id/1029650 - http://www.securityfocus.com/bid/65012 - http://seclists.org/bugtraq/2014/Jan/57
CVE ID: CVE-2013-7143 State: PUBLISHED Published: 2014-01-26T20:00:00 Last Updated: 2024-08-06T18:01:19.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90546 - http://www.securityfocus.com/bid/65013 - http://www.osvdb.org/102195 - http://seclists.org/bugtraq/2014/Jan/57
CVE ID: CVE-2013-7144 State: PUBLISHED Published: 2014-08-16T01:00:00 Last Updated: 2024-08-06T18:01:19.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: LINE 3.2.1.83 and earlier on Windows and 3.2.1 and earlier on OS X does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.thaicert.or.th/papers/general/2013/pa2013ge010.html
CVE ID: CVE-2013-7145 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7146 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7147 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7148 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7149 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T18:01:19.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to execute arbitrary SQL commands via the what parameter to an XML-RPC method. Additional Analyst Notes: - CVE Program Container: References: - http://www.kreativrauschen.com/blog/2013/12/18/zero-day-vulnerability-in-openx-source-2-8-11-and-revive-adserver-3-0-1/ - http://www.revive-adserver.com/security/REVIVE-SA-2013-001/ - http://ww
openx-source-2-8-11-and-revive-adserver-3-0-1/ - http://www.revive-adserver.com/security/REVIVE-SA-2013-001/ - http://www.securityfocus.com/archive/1/530471/30/0/threaded
CVE ID: CVE-2013-7164 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7165 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7166 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7167 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7168 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7169 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-7171 State: PUBLISHED Published: 2019-11-21T13:46:30 Last Updated: 2024-08-06T18:01:20.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-7171 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7171 - http://www.openwall.com/lists/oss-security/2013/12/20/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89915
CVE ID: CVE-2013-7172 State: PUBLISHED Published: 2019-11-21T13:51:18 Last Updated: 2024-08-06T18:01:19.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-7172 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172 - http://www.openwall.com/lists/oss-security/2013/12/20/1 - https://exchange.xforce.ibmcloud.com/vulnera
d=CVE-2013-7172 - http://www.openwall.com/lists/oss-security/2013/12/20/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89916
CVE ID: CVE-2013-7173 State: PUBLISHED Published: 2020-02-13T22:19:09 Last Updated: 2024-08-06T18:01:19.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belkin n750 routers have a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=RG1k8S3VHnQ - https://pixels.camp/marcovazpt
CVE ID: CVE-2013-7174 State: PUBLISHED Published: 2014-01-09T11:00:00 Last Updated: 2024-08-06T18:01:19.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full pathname in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/487078 - http://www.securityfocus.com/bid/64719 - http://www.securitytracker.com/id/1029577
CVE ID: CVE-2013-7175 State: PUBLISHED Published: 2014-01-24T02:00:00 Last Updated: 2024-08-06T18:01:20.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) Title, (2) File name, or (3) Candidate Name field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102414 - http://www.securityfocus.com/bid/65104 - http://www.kb.cert.org/vuls/id/869702
CVE ID: CVE-2013-7176 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T18:01:20.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/686662 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-2979 - https://github.com/fail2ban/fail2ban/commit/eb2f0c927257120dfc32d2450fd63f19
p://www.debian.org/security/2014/dsa-2979 - https://github.com/fail2ban/fail2ban/commit/eb2f0c927257120dfc32d2450fd63f1962f38821
CVE ID: CVE-2013-7177 State: PUBLISHED Published: 2014-02-01T15:00:00 Last Updated: 2024-08-06T18:01:19.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/686662 - https://github.com/fail2ban/fail2ban/commit/bd175f026737d66e7110868fb50b3760ff75e087 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00021.html - http://www.debian.org/security
868fb50b3760ff75e087 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-2979
CVE ID: CVE-2013-7179 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T18:01:19.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the ping_ipaddr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56756 - http://www.kb.cert.org/vuls/id/431726
CVE ID: CVE-2013-7180 State: PUBLISHED Published: 2014-08-15T10:00:00 Last Updated: 2024-08-06T18:01:20.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/602006
CVE ID: CVE-2013-7181 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T18:01:19.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102820 - http://www.kb.cert.org/vuls/id/593118 - http://secunia.com/advisories/56732 - http://www.securitytracker.com/id/1029731 - http://www.securityfocus.com/bid/65303 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0015.html - http://www.fortiguard.com/
cus.com/bid/65303 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0015.html - http://www.fortiguard.com/advisory/FG-IR-14-002/