Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-10/0048.html - http://www.exploit-db.com/exploits/28959 - http://osvdb.org/98352 - http://seclists.org/bugtraq/2013/Oct/52 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87874 - http://secunia.com/advisories/55265 - http://wordpress.org/plugins/cart66-lite/changelog/ - http://blog.noobroot.com/#%21/2013/10/0-day-wordpress-cart66-plugin-15114.html - http://www.securityfocus.com/bid/62975 - http://packetstormsecurity.com/files/123587/WordPress-Cart66-1.5.1.14-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2013-5978 State: PUBLISHED Published: 2019-12-11T18:36:56 Last Updated: 2024-08-06T17:29:42.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Product name or (2) Price description fields via a request to wp-admin/admin.php. NOTE: This issue may only cross privilege boundaries if used in combination with CVE-2013-5977. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123587/WordPress-Cart66-1.5.1.14-Cross-Site-Request-Fo
ram Container: References: - http://packetstormsecurity.com/files/123587/WordPress-Cart66-1.5.1.14-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - http://archives.neohapsis.com/archives/bugtraq/2013-10/0048.html - http://seclists.org/bugtraq/2013/Oct/52 - http://www.exploit-db.com/exploits/28959 - http://wordpress.org/plugins/cart66-lite/changelog - http://www.securityfocus.com/bid/62977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87873
CVE ID: CVE-2013-5979 State: PUBLISHED Published: 2013-10-02T22:00:00Z Last Updated: 2024-09-16T16:32:55.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00 - https://bugs.launchpad.net/xibo/+bug/1093967
CVE ID: CVE-2013-5983 State: PUBLISHED Published: 2014-02-06T15:00:00 Last Updated: 2024-08-06T17:29:42.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the (1) "an" parameter to agenda.php or (2) cat parameter to mobile/thread.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88247 - http://osvdb.org/98841 - http://osvdb.org/98880 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0111.html - http://www.freeguppy.o
841 - http://osvdb.org/98880 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0111.html - http://www.freeguppy.org/thread.php?lng=en&pg=244900&cat=200 - https://www.htbridge.com/advisory/HTB23176
CVE ID: CVE-2013-5984 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T17:29:41.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23175 - http://packetstormsecurity.com/files/123652/Microweber-0.8-Arbitrary-File-Deletion.html - https://github.com/microweber/microweber/commit/9177d134960c24cb642d5cf3b42a1fba286219cc
CVE ID: CVE-2013-5986 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T17:29:42.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 has unknown impact and attack vectors, a different vulnerability than CVE-2013-5987. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT6150 - http://nvidia.custhelp.com/app/answers/detail/a_id/3377
CVE ID: CVE-2013-5987 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T17:29:41.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=139965942001604&w=2 - http://support.apple.com/kb/HT6150 - http://nvidia.custhelp.com/app/answers/detail/a_id/3377
CVE ID: CVE-2013-5988 State: PUBLISHED Published: 2020-02-11T17:40:16 Last Updated: 2024-08-06T17:29:41.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/cve/CVE-2013-5988 - https://www.securityfocus.com/archive/1/528962
CVE ID: CVE-2013-5989 State: REJECTED Published: 2020-02-05T18:21:38 Last Updated: 2020-02-05T18:21:38 Description: No description available.
CVE ID: CVE-2013-5990 State: PUBLISHED Published: 2013-11-13T15:00:00Z Last Updated: 2024-09-16T18:13:36.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; Ichitaro Pro; Ichitaro Pro 2 and Pro 2 Trial Edition; Ichitaro Viewer; and Ichitaro Portable with oreplug allows remote attackers to execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN44999463/index.html - http://www.justsystems.com/jp/info/js13003.
rogram Container: References: - http://jvn.jp/en/jp/JVN44999463/index.html - http://www.justsystems.com/jp/info/js13003.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000103
CVE ID: CVE-2013-5991 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:41.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive information by leveraging incorrect handling of error-log output. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN61077110/index.html - http://www.ec-cube.net/info/weakness/weakness.php?id=54 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000104
CVE ID: CVE-2013-5992 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to inject arbitrary web script or HTML by leveraging incorrect handling of error-message output. Additional Analyst Notes: - CVE Program Container: References: - http://www.ec-cube.net/info/weakness/weakness.php?id=54 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000105 - http://jvn.jp/en/jp/JVN38790987/index.html
CVE ID: CVE-2013-5993 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors related to refusals. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN11221613/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000097 - http://www.ec-cube.net/info/weakness/weakness.php?id=53 - http://svn.ec-cube.net/open_trac/changeset/23277
CVE ID: CVE-2013-5994 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN06870202/index.html - http://svn.ec-cube.net/open_trac/changeset/23278 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000098 - http://www.ec-cube.net/info/weakness/weakness.php?id=52
CVE ID: CVE-2013-5995 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: data/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authenticated users to obtain sensitive information via unspecified vectors related to addresses. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55630933/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000106 - http://www.ec-cube.net/info/weakness/weakness.php?id=51 - http://svn.ec-cube.net/open_trac/changeset/23274
CVE ID: CVE-2013-5996 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:29:42.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 through 2.13.0 allow remote attackers to inject arbitrary web script or HTML via crafted values. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000107 - http://jvn.jp/en/jp/JVN06377589/index.html - http://www.ec-cube.net/info/weakness/weakness.php?id=55 - http://svn.ec-cube.net/open_trac/changeset/23275
CVE ID: CVE-2013-5997 State: PUBLISHED Published: 2013-11-22T17:00:00 Last Updated: 2024-08-06T17:29:42.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service (device hang) via unknown vectors, a different vulnerability than CVE-2013-5998. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000109 - http://jvn.jp/en/jp/JVN65312543/index.html
CVE ID: CVE-2013-5998 State: PUBLISHED Published: 2013-11-22T17:00:00 Last Updated: 2024-08-06T17:29:42.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service (device hang) via unknown vectors, a different vulnerability than CVE-2013-5997. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000110 - http://jvn.jp/en/jp/JVN28812735/index.html
CVE ID: CVE-2013-5999 State: PUBLISHED Published: 2013-11-22T17:00:00 Last Updated: 2024-08-06T17:29:42.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://faq.kdrive.jp/2013/11/19/pcappupdate.html - http://jvn.jp/en/jp/JVN97810280/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108
CVE ID: CVE-2013-6000 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:29:42.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to read arbitrary files via a .. (dot dot) in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www2s.biglobe.ne.jp/~tatsuji/souko/Guidance1.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000112 - http://jvn.jp/en/jp/JVN41703192/index.html
CVE ID: CVE-2013-6001 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:29:42.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/6955 - http://products.cybozu.co.jp/garoon/download/update/gr3/fix371sp1.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000114 - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvn.jp/en/jp/JVN82375148/index.html
CVE ID: CVE-2013-6002 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:29:42.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://products.cybozu.co.jp/garoon/download/update/gr3/fix371sp1.html - https://support.cybozu.com/ja-jp/article/6571 - http://jvn.jp/en/jp/JVN94245330/index.html - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000115
CVE ID: CVE-2013-6003 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:29:42.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000116 - https://support.cybozu.com/ja-jp/article/6121 - http://jvn.jp/en/jp/JVN84221103/index.html
CVE ID: CVE-2013-6004 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:29:42.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvn.jp/en/jp/JVN87729477/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000117 - https://support.cybozu.com/ja-jp/article/6929
CVE ID: CVE-2013-6005 State: PUBLISHED Published: 2013-12-13T15:00:00 Last Updated: 2024-08-06T17:29:42.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89577 - http://osvdb.org/100819 - http://jvn.jp/en/jp/JVN21336955/index.html - http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000118.html - http://cs.cybozu.co.jp/information/20131209up11.php - http://secunia.com/advisories/55962
CVE ID: CVE-2013-6006 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:29:42.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/7893 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000125 - http://jvn.jp/en/jp/JVN81706478/index.html
CVE ID: CVE-2013-6007 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6008 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6009 State: PUBLISHED Published: 2013-10-03T19:00:00Z Last Updated: 2024-09-16T18:29:35.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/528940
CVE ID: CVE-2013-6010 State: PUBLISHED Published: 2013-10-03T20:00:00 Last Updated: 2024-08-06T17:29:42.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title." Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123327 - http://osvdb.org/97600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87290
CVE ID: CVE-2013-6011 State: PUBLISHED Published: 2013-10-04T17:00:00Z Last Updated: 2024-09-16T17:48:01.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/ctx139017 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0016.html
CVE ID: CVE-2013-6012 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T17:29:42.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does not properly handle configuration validation errors during the config commit phase of the boot-up sequence, which allows remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10593 - http://www.securityfocus.com/bid/63389
CVE ID: CVE-2013-6013 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T17:29:42.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62962 - http://osvdb.org/98369 - http://www.securitytracker.com/id/1029175 - https://exchange.xforce.ibmcloud.
s.com/bid/62962 - http://osvdb.org/98369 - http://www.securitytracker.com/id/1029175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87847 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10594 - http://secunia.com/advisories/55109
CVE ID: CVE-2013-6014 State: PUBLISHED Published: 2013-10-28T22:00:00Z Last Updated: 2024-09-16T17:38:27.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface, allows remote attackers to perform ARP poisoning attacks and possibly obtain sensitive information via a crafted ARP message. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page
P message. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10595
CVE ID: CVE-2013-6015 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T17:29:42.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service (flow daemon crash) via an unspecified sequence of TCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10596 - http://www.securitytracker.com/id/1029177 - http://osvdb.org/98368 - http
et/InfoCenter/index?page=content&id=JSA10596 - http://www.securitytracker.com/id/1029177 - http://osvdb.org/98368 - http://secunia.com/advisories/55218
CVE ID: CVE-2013-6016 State: PUBLISHED Published: 2013-10-26T17:00:00 Last Updated: 2024-08-06T17:29:42.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAccelerator 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.3.0 might change a TCP connection to the ESTABLISHED state before receiving the ACK packet, which allows remote attackers to cause a denial of service (SIGFPE or assertion failure and TMM restart) via unspec
ket, which allows remote attackers to cause a denial of service (SIGFPE or assertion failure and TMM restart) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.f5.com/kb/en-us/solutions/public/13000/200/sol13233.html - http://secunia.com/advisories/55378 - http://www.securitytracker.com/id/1029220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88166
CVE ID: CVE-2013-6017 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T17:29:42.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message, as demonstrated by the SRC attribute of an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101937 - http://www.securityfocus.com/bid/64779 - http://www.kb.cert.org/vuls/id/204950 - http://atmail.com/changelog/
CVE ID: CVE-2013-6018 State: PUBLISHED Published: 2013-10-28T01:00:00Z Last Updated: 2024-09-16T22:16:11.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/911678
CVE ID: CVE-2013-6019 State: PUBLISHED Published: 2013-10-28T01:00:00Z Last Updated: 2024-09-16T17:33:42.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to inject arbitrary web script or HTML via the accountNum parameter to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/911678