Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5718 State: PUBLISHED Published: 2013-09-13T18:00:00 Last Updated: 2024-08-06T17:22:30.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not restrict the dch_id value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00050.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9005 - http://secunia.com/advisories/55022 - https://www.wiresh
ml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9005 - http://secunia.com/advisories/55022 - https://www.wireshark.org/security/wnpa-sec-2013-55.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18784 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=51195 - http://www.debian.org/security/2013/dsa-2756 - http://secunia.com/advisories/54812 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00052.html
CVE ID: CVE-2013-5719 State: PUBLISHED Published: 2013-09-13T18:00:00 Last Updated: 2024-08-06T17:22:30.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00050.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18707 - http://secunia.com/advisories/55022 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=5
.oval%3Adef%3A18707 - http://secunia.com/advisories/55022 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=51196 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9020 - https://www.wireshark.org/security/wnpa-sec-2013-56.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00052.html
CVE ID: CVE-2013-5720 State: PUBLISHED Published: 2013-09-13T18:00:00 Last Updated: 2024-08-06T17:22:30.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00050.html - http://secunia.com/advisories/55022 - https://www.wireshark.org/security/wnpa-sec-2013-57.html - http://www.debian.org/security/2013/dsa-2756 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9019 - http:/
.html - http://www.debian.org/security/2013/dsa-2756 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9019 - http://secunia.com/advisories/54812 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18416 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00052.html
CVE ID: CVE-2013-5721 State: PUBLISHED Published: 2013-09-13T18:00:00 Last Updated: 2024-08-06T17:22:30.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-09/msg00050.html - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/55022 - https://www.wire
sg00050.html - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/55022 - https://www.wireshark.org/security/wnpa-sec-2013-58.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18518 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=51603 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00052.html
CVE ID: CVE-2013-5722 State: PUBLISHED Published: 2013-09-13T18:00:00 Last Updated: 2024-08-06T17:22:30.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2013-59.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00050.html - http://secunia.com/advisories/55022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18958 - http://
dvisories/55022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18958 - http://www.debian.org/security/2013/dsa-2756 - http://secunia.com/advisories/54812 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00052.html
CVE ID: CVE-2013-5723 State: PUBLISHED Published: 2013-09-11T14:00:00 Last Updated: 2024-08-06T17:22:30.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "ABAD0_DELETE_DERIVATION_TABLE." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029018 - https://erpscan.io/advisories/dsecrg-13-016-sap-netweaver-abad0_delete_derivation_table/ - http://secunia.com/advisories/54702 - http://www.securityfocus.com/bid/62147 - https://service.sap.com/sap/support/notes/1840249 - http://scn.sap.com/docs/
- http://www.securityfocus.com/bid/62147 - https://service.sap.com/sap/support/notes/1840249 - http://scn.sap.com/docs/DOC-8218 - http://osvdb.org/96900
CVE ID: CVE-2013-5724 State: PUBLISHED Published: 2013-09-11T14:00:00Z Last Updated: 2024-09-17T04:09:30.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54665 - http://www.debian.org/security/2013/dsa-2752 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=711172
CVE ID: CVE-2013-5725 State: PUBLISHED Published: 2013-10-01T00:00:00Z Last Updated: 2024-09-17T03:12:32.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0145.html
CVE ID: CVE-2013-5726 State: PUBLISHED Published: 2013-11-12T20:00:00Z Last Updated: 2024-09-17T03:32:33.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Nov/9 - http://blog.binaryfactory.ca/2013/11/cve-2013-5726-tweetbot-for-ios-and-mac-user-disclosureprivacy-issue/ - http://osvdb.org/99256
CVE ID: CVE-2013-5730 State: PUBLISHED Published: 2013-11-19T15:00:00 Last Updated: 2024-08-06T17:22:30.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remote attackers to hijack the authentication of administrators for requests that (1) enable or disable Wireless MAC Address Filters via a wlFltMode action to wlmacflt.cmd, (2) enable or disable firewall protections via a request to scdmz.cmd, or (3) enable or disable remote management via a save action to scsrvcntr.cmd. Additional Analyst Notes: - CVE Program Container: References: - http://www.webapp-security.co
action to scsrvcntr.cmd. Additional Analyst Notes: - CVE Program Container: References: - http://www.webapp-security.com/wp-content/uploads/2013/09/D-Link-DSL-2740B-Multiple-CSRF-Vulnerabilities1.txt - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10004 - http://packetstormsecurity.com/files/123200/D-Link-DSL-2740B-Cross-Site-Request-Forgery.html - http://www.webapp-security.com/2013/09/d-link-dsl-2740b-multiple-csrf-vulnerabilities
CVE ID: CVE-2013-5738 State: PUBLISHED Published: 2013-09-12T10:00:00 Last Updated: 2024-08-06T17:22:30.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does not require the unfiltered_html capability for uploads of .htm and .html files, which might make it easier for remote authenticated users to conduct cross-site scripting (XSS) attacks via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2757 - http://core.trac.wordpress.org/changeset/25322 - http://codex.wordpress.org/Version_3.6.1 - http://wordpress.org/news/20
http://core.trac.wordpress.org/changeset/25322 - http://codex.wordpress.org/Version_3.6.1 - http://wordpress.org/news/2013/09/wordpress-3-6-1/
CVE ID: CVE-2013-5739 State: PUBLISHED Published: 2013-09-12T10:00:00 Last Updated: 2024-08-06T17:22:30.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote authenticated users to conduct cross-site scripting (XSS) attacks via a crafted file, related to the get_allowed_mime_types function in wp-includes/functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2757 - http://core.trac.wordpress.org/changeset/25322 - http://codex.wordpress.org/Version_3.6.1 - http://wordpress.org/news/
- http://core.trac.wordpress.org/changeset/25322 - http://codex.wordpress.org/Version_3.6.1 - http://wordpress.org/news/2013/09/wordpress-3-6-1/
CVE ID: CVE-2013-5740 State: PUBLISHED Published: 2013-09-12T18:00:00Z Last Updated: 2024-09-16T20:07:00.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) before 1.2, as used by the Intel QM77, QS77, Q77 Express, C216, Q67 Express, C202, C204, and C206 chipsets and Mobile Intel QM67 and QS67 chipsets, when the measured launch environment (MLE) is invoked, allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM functions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: Refere
other unspecified SINIT ACM functions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00035&languageid=en-fr - http://support.citrix.com/article/CTX138633
CVE ID: CVE-2013-5741 State: PUBLISHED Published: 2013-10-29T01:00:00Z Last Updated: 2024-09-17T01:56:50.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service (transition to the interrupt state) via a crafted packet to TCP port 502. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.ixiacom.com/ixia-blog/hack-scada-zero-day-vulnerability-discovery-on-the-nano-10-plc/ - http://www.osvdb.org/97728 - http://osvdb.org/ref/97/tri-nano10.txt
CVE ID: CVE-2013-5743 State: PUBLISHED Published: 2019-12-11T18:43:26 Last Updated: 2024-08-06T17:22:30.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7. Additional Analyst Notes: - CVE Program Container: References: - https://admin.fedoraproject.org/updates/zabbix-1.8.18-1.el6 - https://admin.fedoraproject.org/updates/zabbix20-2.0.8-3.el6 - https://admin.fedoraproject.org/updates/zabbix20-2.0.9-1.el5 - https://support.zabbix.com/browse/ZBX-7091
CVE ID: CVE-2013-5744 State: PUBLISHED Published: 2013-10-28T22:00:00Z Last Updated: 2024-09-17T02:31:22.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23174 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html
CVE ID: CVE-2013-5745 State: PUBLISHED Published: 2013-10-01T17:00:00 Last Updated: 2024-08-06T17:22:30.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=641811 - https://
ional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=641811 - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-028.txt - http://rhn.redhat.com/errata/RHSA-2013-1452.html - http://secunia.com/advisories/55090 - https://bugzilla.gnome.org/show_bug.cgi?id=707905 - http://www.ubuntu.com/usn/USN-1980-1 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00003.html
CVE ID: CVE-2013-5748 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T17:22:30.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an add_project action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123455/SimpleRisk-20130915-01-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://github.com/simplerisk/documentation/raw/master/SimpleRisk%20Release%20Notes%2020130916-001.pdf
CVE ID: CVE-2013-5749 State: PUBLISHED Published: 2014-05-12T14:00:00 Last Updated: 2024-08-06T17:22:30.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to inject arbitrary web script or HTML via the new_project parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123455/SimpleRisk-20130915-01-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - https://github.com/simplerisk/documentation/raw/master/SimpleRisk%20Release%20Notes%2020130916-001.pdf
CVE ID: CVE-2013-5750 State: PUBLISHED Published: 2013-09-25T10:00:00Z Last Updated: 2024-09-16T19:24:34.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation. Additional Analyst Notes: - CVE Program Container: References: - http://symfony.com/blog/cve-2013-5750-security-issue-in-fosuserbundle-login-form
CVE ID: CVE-2013-5751 State: PUBLISHED Published: 2013-09-16T19:00:00 Last Updated: 2024-08-06T17:22:30.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54809 - http://osvdb.org/97350 - http://en.securitylab.ru/lab/PT-2012-24 - https://websmp230.sap-ag.de/sap/support/notes/1779578 - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/bid/62391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87121
CVE ID: CVE-2013-5754 State: PUBLISHED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T17:47:41.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving (1) ActiveX, (2) a standalone client, or (3) unspecified other vectors, a different vulnerability than CVE-2013-3612. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/800094
CVE ID: CVE-2013-5755 State: PUBLISHED Published: 2014-07-16T14:00:00 Last Updated: 2024-08-06T17:22:30.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3) var (jhl3iZAe./qXM) for the var account, which makes it easier for remote attackers to obtain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33739
CVE ID: CVE-2013-5756 State: PUBLISHED Published: 2014-08-03T18:00:00 Last Updated: 2024-08-06T17:22:30.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to cgi-bin/cgiServer.exx. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33740
CVE ID: CVE-2013-5757 State: PUBLISHED Published: 2014-08-03T18:00:00 Last Updated: 2024-08-06T17:22:30.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Yealink VoIP Phone SIP-T38G allows remote authenticated users to read arbitrary files via a full pathname in the dumpConfigFile function in the command parameter to cgi-bin/cgiServer.exx. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33740
CVE ID: CVE-2013-5758 State: PUBLISHED Published: 2014-08-03T18:00:00 Last Updated: 2024-08-06T17:22:30.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/108080 - http://packetstormsecurity.com/files/127096/Yealink-VoIP-Phone-SIP-T38G-Remote-Command-Execution.html - http://packetstormsecurity.com/files/127093/Yealink-VoIP-P
6/Yealink-VoIP-Phone-SIP-T38G-Remote-Command-Execution.html - http://packetstormsecurity.com/files/127093/Yealink-VoIP-Phone-SIP-T38G-Privilege-Escalation.html - http://www.exploit-db.com/exploits/33741 - http://www.exploit-db.com/exploits/33742
CVE ID: CVE-2013-5759 State: REJECTED Published: 2014-08-03T18:00:00 Last Updated: 2014-08-03T17:57:01 Description: No description available.
CVE ID: CVE-2013-5760 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T17:22:30.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89117 - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-029.txt
CVE ID: CVE-2013-5761 State: PUBLISHED Published: 2013-10-16T15:00:00Z Last Updated: 2024-09-17T01:45:48.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Integration - Scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
CVE ID: CVE-2013-5762 State: PUBLISHED Published: 2013-10-16T15:00:00Z Last Updated: 2024-09-17T01:27:06.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local users to affect confidentiality and availability via unknown vectors related to SC-OC Integration. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
CVE ID: CVE-2013-5763 State: PUBLISHED Published: 2013-12-12T20:00:00 Last Updated: 2024-08-06T17:22:30.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of this issue erroneously mapped it to CVE-2013-3624. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56241 - http://www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://www.securityfocus.com/bid/63741 - http://www.oracle.com/tec
/www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://www.securityfocus.com/bid/63741 - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html - http://secunia.com/advisories/56243 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-105 - http://www.securitytracker.com/id/1029190 - http://secunia.com/advisories/56237
CVE ID: CVE-2013-5764 State: PUBLISHED Published: 2014-01-15T00:30:00 Last Updated: 2024-08-06T17:22:30.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029607 - http://osvdb.org/102083 - http://secunia.com/advisories/56452 - http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00007.html - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/
unce/2014-01/msg00007.html - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html