Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3446 State: PUBLISHED Published: 2013-09-12T01:00:00Z Last Updated: 2024-09-16T17:22:50.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3446
CVE ID: CVE-2013-3448 State: PUBLISHED Published: 2013-08-01T16:00:00 Last Updated: 2024-08-06T16:07:37.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=30277 - http://www.securityfocus.com/bid/61572 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3448 - http://osvdb.org/95880
CVE ID: CVE-2013-3450 State: PUBLISHED Published: 2013-08-03T01:00:00Z Last Updated: 2024-09-16T23:01:53.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified Communications Manager (Unified CM) allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3450
CVE ID: CVE-2013-3451 State: PUBLISHED Published: 2013-08-03T01:00:00Z Last Updated: 2024-09-17T03:58:34.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3451
CVE ID: CVE-2013-3453 State: PUBLISHED Published: 2013-08-22T22:00:00Z Last Updated: 2024-09-16T22:19:39.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presence, allows remote attackers to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5060 or (2) 5061, aka Bug ID CSCud84959. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cup
CVE ID: CVE-2013-3454 State: PUBLISHED Published: 2013-08-08T14:00:00Z Last Updated: 2024-09-17T03:38:57.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130807-tp
CVE ID: CVE-2013-3455 State: PUBLISHED Published: 2013-08-12T10:00:00 Last Updated: 2024-08-06T16:07:38.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3455 - http://www.securitytracker.com/id/1028897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86357
CVE ID: CVE-2013-3457 State: PUBLISHED Published: 2013-08-12T10:00:00 Last Updated: 2024-08-06T16:07:37.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86356 - http://www.securitytracker.com/id/1028896
CVE ID: CVE-2013-3458 State: PUBLISHED Published: 2013-09-08T01:00:00Z Last Updated: 2024-09-16T19:56:38.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service (device crash) via a large volume of (1) SSL or (2) TLS traffic, aka Bug ID CSCuh19462. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3458
CVE ID: CVE-2013-3459 State: PUBLISHED Published: 2013-08-25T01:00:00 Last Updated: 2024-08-06T16:07:37.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6a does not properly handle errors, which allows remote attackers to cause a denial of service (service disruption) via malformed registration messages, aka Bug ID CSCuf93466. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm - http://www.securitytracker.com/id/1028938
CVE ID: CVE-2013-3460 State: PUBLISHED Published: 2013-08-25T01:00:00 Last Updated: 2024-08-06T16:07:38.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(1) allows remote attackers to cause a denial of service (service disruption) via a high rate of UDP packets, aka Bug ID CSCub85597. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm - http://www.securitytracker.com/id/1028938
CVE ID: CVE-2013-3461 State: PUBLISHED Published: 2013-08-25T01:00:00 Last Updated: 2024-08-06T16:07:38.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service (memory and CPU consumption, and service disruption) via a flood of UDP packets to port 5060, aka Bug ID CSCub35869. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm - http://www.securitytracker.com/id/102
s.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm - http://www.securitytracker.com/id/1028938
CVE ID: CVE-2013-3462 State: PUBLISHED Published: 2013-08-25T01:00:00 Last Updated: 2024-08-06T16:07:38.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(2) allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130821-cucm - http://www.securitytracker.com/id/1028938
CVE ID: CVE-2013-3463 State: PUBLISHED Published: 2013-08-30T01:00:00 Last Updated: 2024-08-06T16:07:37.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The protocol-inspection feature on Cisco Adaptive Security Appliances (ASA) devices does not properly implement the idle timeout, which allows remote attackers to cause a denial of service (connection-table exhaustion) via crafted requests that use an inspected protocol, aka Bug ID CSCuh13899. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=30607 - http://www.securityfocus.com/bid/62068 - http://www.securitytracker.com/id/1028968 - http://tools.cisco.c
lertId=30607 - http://www.securityfocus.com/bid/62068 - http://www.securitytracker.com/id/1028968 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3463
CVE ID: CVE-2013-3464 State: PUBLISHED Published: 2013-08-12T23:00:00 Last Updated: 2024-08-06T16:07:37.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86385 - http://www.securitytracker.com/id/1028914 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3464
CVE ID: CVE-2013-3466 State: PUBLISHED Published: 2013-08-29T10:00:00 Last Updated: 2024-08-06T16:07:37.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130828-acs - http://www.securitytracker.com/id/1028958 - http://osvdb.org/96668
CVE ID: CVE-2013-3467 State: PUBLISHED Published: 2013-08-30T01:00:00 Last Updated: 2024-08-06T16:07:38.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect devices, in certain situations that lack a SPAN session, allows local users to cause a denial of service (memory consumption and device reset) via a (1) "show monitor session all" or (2) "show monitor session" command, aka Bug ID CSCug20103. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3467 - http://www.securityfocus.com/bid/62065 - htt
tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3467 - http://www.securityfocus.com/bid/62065 - http://www.securitytracker.com/id/1028960 - http://osvdb.org/96731
CVE ID: CVE-2013-3468 State: PUBLISHED Published: 2013-08-29T10:00:00 Last Updated: 2024-08-06T16:07:37.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of service (device hang) via a malformed PNG file, aka Bug ID CSCud04270. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028964 - http://osvdb.org/96669 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3468
CVE ID: CVE-2013-3469 State: PUBLISHED Published: 2013-09-04T01:00:00 Last Updated: 2024-08-06T16:07:38.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote attackers to obtain an unauthenticated session to the database-replication port, and consequently obtain sensitive information, via an SSL connection, aka Bug ID CSCue50794. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=30617 - http://www.securitytracker.com/id/1028972 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3469 -
/www.securitytracker.com/id/1028972 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3469 - http://www.securityfocus.com/bid/62091
CVE ID: CVE-2013-3470 State: PUBLISHED Published: 2013-08-30T01:00:00 Last Updated: 2024-08-06T16:07:38.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID CSCue46731. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/96732 - http://www.securitytracker.com/id/1028962 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3470 - http://www.securityfocus.com/bid/62066
CVE ID: CVE-2013-3471 State: PUBLISHED Published: 2013-08-29T10:00:00 Last Updated: 2024-08-06T16:07:37.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and passwords by leveraging unspecified use of hidden form fields in an HTML document, aka Bug ID CSCug02515. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3471 - http://www.securitytracker.com/id/1028965 - http://tools.cisco.com/security/center/viewAlert.x?alertId=30524
CVE ID: CVE-2013-3472 State: PUBLISHED Published: 2013-08-29T10:00:00 Last Updated: 2024-08-06T16:07:38.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications Manager (CM) allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028963 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3472
CVE ID: CVE-2013-3473 State: PUBLISHED Published: 2013-09-20T18:00:00Z Last Updated: 2024-09-17T01:36:49.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-pc
CVE ID: CVE-2013-3474 State: PUBLISHED Published: 2013-08-30T20:00:00 Last Updated: 2024-08-06T16:07:38.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request that (1) lacks a parameter value or (2) contains a malformed parameter value, aka Bug IDs CSCuh14313, CSCuh14159, CSCuh14368, and CSCuh14436. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce
59, CSCuh14368, and CSCuh14436. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86811 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3474 - http://www.securitytracker.com/id/1028970 - http://osvdb.org/96763 - http://www.securityfocus.com/bid/62084
CVE ID: CVE-2013-3475 State: PUBLISHED Published: 2013-06-05T01:00:00 Last Updated: 2024-08-06T16:07:38.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92495 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92496 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92463 - https://exchange.xforce.ibmcloud.com/vulnerabili
g1IC92496 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84358 - http://secunia.com/advisories/53704 - http://www.securityfocus.com/bid/60255 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC92498 - http://www-01.ibm.com/support/docview.wss?uid=swg21639355 - http://secunia.com/advisories/52663 - http://www-01.ibm.com/support/docview.wss?uid=swg21639194
CVE ID: CVE-2013-3476 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T16:07:37.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84247 - http://wordpress.org/plugins/wordpress-23-related-posts-plugin/changelog/ - http://secunia.com/advisories/53279 - http://www.securityfocus.com/bid/59839
CVE ID: CVE-2013-3477 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T16:07:38.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59840 - http://secunia.com/advisories/53321 - http://wordpress.org/plugins/related-posts-by-zemanta/changelog/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/84246
CVE ID: CVE-2013-3478 State: PUBLISHED Published: 2014-03-05T15:00:00 Last Updated: 2024-08-06T16:14:54.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84239 - http://secunia.com/advisories/51344
CVE ID: CVE-2013-3479 State: PUBLISHED Published: 2013-09-05T01:00:00Z Last Updated: 2024-09-17T00:15:36.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53135 - http://wordpress.org/plugins/share-this/changelog/
CVE ID: CVE-2013-3480 State: PUBLISHED Published: 2013-08-09T18:00:00 Last Updated: 2024-08-06T16:14:54.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a BMP file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85920 - http://secunia.com/advisories/52705
CVE ID: CVE-2013-3481 State: PUBLISHED Published: 2014-03-27T16:00:00 Last Updated: 2024-08-06T16:14:54.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Artweaver Plus and Free before 3.1.5 allows remote attackers to execute arbitrary code via a crafted JPG image file. Additional Analyst Notes: - CVE Program Container: References: - http://forum.artweaver.de/viewtopic.php?f=5&t=2247 - http://forum.artweaver.de/viewtopic.php?f=5&t=2248 - http://www.securityfocus.com/bid/60236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84636 - http://osvdb.org/93751 - http://secunia.com/advisories/52652
CVE ID: CVE-2013-3482 State: PUBLISHED Published: 2014-01-19T15:00:00 Last Updated: 2024-08-06T16:14:55.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26708 - http://secunia.com/advisories/53620 - http://osvdb.org/show/osvdb/93650 - http://attrition.org/pipermail/vim/2013-May/002682.html - http://www.secunia.com/blog/366
CVE ID: CVE-2013-3483 State: PUBLISHED Published: 2014-01-19T15:00:00 Last Updated: 2024-08-06T16:14:54.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ERS file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53620 - http://attrition.org/pipermail/vim/2013-May/002682.html
CVE ID: CVE-2013-3484 State: PUBLISHED Published: 2014-04-02T15:00:00 Last Updated: 2024-08-06T16:14:55.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to application/login/login.html, (2) my_account_login parameter to c/portal_public/login, or (3) email parameter to forgotPassword. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dotCMS/dotCMS/issues/2949 - http://secunia.com/advisories/53265 - http://dotcms.com/security/SI-14
CVE ID: CVE-2013-3485 State: PUBLISHED Published: 2013-08-30T21:00:00Z Last Updated: 2024-09-16T22:50:22.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) api-ms-win-core-localregistry-l1-1-0.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53207
CVE ID: CVE-2013-3486 State: PUBLISHED Published: 2020-01-27T14:28:50 Last Updated: 2024-08-06T16:14:54.631Z Vendors: IrfanView FlashPix PlugIn Products: IrfanView FlashPix PlugIn Problem Types: integer overflow Description: IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84903