Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7350 State: PUBLISHED Published: 2014-04-01T01:00:00Z Last Updated: 2024-09-17T03:23:18.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 (730159141) and R75.20.x before R75.20.4 and 600 and 1100 appliances R75.20.x before R75.20.42 have unknown impact and attack vectors related to "important security fixes." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102745 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98332&src=securityAlerts
CVE ID: CVE-2013-7351 State: PUBLISHED Published: 2020-01-02T19:42:16 Last Updated: 2024-08-06T18:01:20.466Z Vendors: Shaarli Products: Shaarli Problem Types: Cross-Site Scripting Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sebsauvage/Shaarli/commit/53da201749f8f362323ef278bf338f1d9f7a925a - https://github.com/sebsauvage/Shaarli/issues/134 - http://s
ge/Shaarli/commit/53da201749f8f362323ef278bf338f1d9f7a925a - https://github.com/sebsauvage/Shaarli/issues/134 - http://seclists.org/oss-sec/2014/q2/1 - http://seclists.org/oss-sec/2014/q2/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92215
CVE ID: CVE-2013-7352 State: PUBLISHED Published: 2014-04-02T18:00:00Z Last Updated: 2024-09-16T23:06:21.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the show_statuses[] parameter, related to CVE-2013-2945. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/92906 - http://archives.neohapsis.com/archives/bugtraq/2013-05/0004.html - http://packetstormsecurity.com/files/121481/b2evolution-4.1.6-SQL-Injection.html - http:
ves/bugtraq/2013-05/0004.html - http://packetstormsecurity.com/files/121481/b2evolution-4.1.6-SQL-Injection.html - http://b2evolution.net/news/2013/04/29/b2evolution-4-1-7-and-5-0-3 - https://www.htbridge.com/advisory/HTB23152
CVE ID: CVE-2013-7353 State: PUBLISHED Published: 2014-05-06T14:00:00.000Z Last Updated: 2025-06-09T15:37:30.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sourceforge.net/p/libpng/bugs/199/ - http://lists.opensuse.org/opensuse-updates/2014-05/msg00015.html - http://www.securityfocus.com/bid/67345 - http://seclists.org
lists.opensuse.org/opensuse-updates/2014-05/msg00015.html - http://www.securityfocus.com/bid/67345 - http://seclists.org/oss-sec/2014/q2/83
CVE ID: CVE-2013-7354 State: PUBLISHED Published: 2014-05-06T14:00:00.000Z Last Updated: 2025-06-09T15:42:53.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2) png_set_text_2 function, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sourceforge.net/p/libpng/bugs/199/ - http://lists.opensuse.org/opensuse-updates/2014-05/msg00015.html - http://www.securityfocus.com/bid/67344 - http://seclists.org/oss-sec/2014/q2/83
CVE ID: CVE-2013-7355 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T18:34:26.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-013 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7356 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T16:47:57.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to obtain the database password via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-012 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7357 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-17T01:35:55.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-010 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7358 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-17T02:01:10.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to obtain usernames, roles, profiles, and possibly other identity information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-011 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7359 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-17T00:30:58.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP Mobile Infrastructure allows remote attackers to obtain sensitive port information via unknown vectors, related to an "internal port scanning" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-009 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7360 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T19:10:02.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-007 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7361 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T23:00:21.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SAP CMS and CM Services allows attackers to upload arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-008 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7362 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T19:36:51.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-005 - http://scn.sap.com/docs/DOC-8218 - https://service.sap.com/sap/support/notes/1758450 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0135.html - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7363 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-17T00:46:41.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remove applications via vectors involving the P4 protocol. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1774568 - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-006 - http://scn.sap.com/docs/DOC-8218 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0134.html
_onapsis-2013-006 - http://scn.sap.com/docs/DOC-8218 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0134.html - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7364 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T19:41:11.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-02/0133.html - https://service.sap.com/sap/support/notes/1682613 - http://scn.sap.com/docs/DOC-8218 - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-004 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7365 State: PUBLISHED Published: 2014-04-10T15:00:00 Last Updated: 2024-08-06T18:01:20.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-003 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0132.html - https://service.sap.com/sap/support/notes/1589716 - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/bid/58155 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7366 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T20:51:34.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAP Software Deployment Manager (SDM), in certain unspecified conditions, allows remote attackers to cause a denial of service via vectors related to failed authentications. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1586419 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0131.html - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-002 - http://scn.sap.com/docs/DOC-8218 - http://www.onapsis.com/research-advisories.php
CVE ID: CVE-2013-7367 State: PUBLISHED Published: 2014-04-10T15:00:00Z Last Updated: 2024-09-16T16:23:43.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-02/0130.html - https://service.sap.com/sap/support/notes/1658947 - http://scn.sap.com/docs/DOC-8218 - http://www.onapsis.com/research-advisories.php - http://www.onapsis.com/get.php?resid=adv_onapsis-2013-001
CVE ID: CVE-2013-7368 State: PUBLISHED Published: 2014-04-15T17:00:00 Last Updated: 2024-08-06T18:01:20.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gnew 2013.1 allow remote attackers to inject arbitrary web script or HTML via the gnew_template parameter to (1) users/profile.php, (2) articles/index.php, or (3) admin/polls.php; (4) category_id parameter to news/submit.php; news_id parameter to (5) news/send.php or (6) comments/add.php; or (7) post_subject or (8) thread_id parameter to posts/edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/critical-xss-sql-injection-vu
dditional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/critical-xss-sql-injection-vulnerabilities-gnew/ - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5153.php - http://packetstormsecurity.com/files/122771 - http://www.securityfocus.com/bid/61721
CVE ID: CVE-2013-7369 State: PUBLISHED Published: 2014-04-18T14:00:00Z Last Updated: 2024-09-17T00:26:14.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/ad
ated to GetCommand. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-13-095/ - http://www.f-secure.com/en/web/labs_global/fsc-2013-1
CVE ID: CVE-2013-7370 State: PUBLISHED Published: 2019-12-11T13:55:37 Last Updated: 2024-08-06T18:01:20.629Z Vendors: n/a Products: n/a Problem Types: in the Sencha Labs Connect middleware Description: node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_Scripting - https://security-tracker.debian.org/tracker/CVE-2013-7370 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370 - https://access.redhat.com/security/cve/cve-2013-7370 - http://www.openwall.com/lists/oss-
how_bug.cgi?id=CVE-2013-7370 - https://access.redhat.com/security/cve/cve-2013-7370 - http://www.openwall.com/lists/oss-security/2014/05/13/1 - http://www.openwall.com/lists/oss-security/2014/04/21/2
CVE ID: CVE-2013-7371 State: PUBLISHED Published: 2019-12-11T14:04:00 Last Updated: 2024-08-06T18:01:20.475Z Vendors: node-connect Products: node-connect Problem Types: in the Sencha Labs Connect middleware Description: node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370) Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_Scripting - http://www.openwall.com/lists/oss-security/2014/05/13/1 - https://security-tracker.debian.org/tracker/CVE-2013-7371 - https://access.redhat.com/security/cve/cve-2013-7371 - http:/
ttps://security-tracker.debian.org/tracker/CVE-2013-7371 - https://access.redhat.com/security/cve/cve-2013-7371 - http://www.openwall.com/lists/oss-security/2014/04/21/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92710
CVE ID: CVE-2013-7372 State: PUBLISHED Published: 2014-04-29T20:00:00Z Last Updated: 2024-09-17T02:33:10.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture (JCA) in Android before 4.4 and other products, when no seed is provided by the user, uses an incorrect offset value, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the resulting PRNG predictability, as exploited i
attackers to defeat cryptographic protection mechanisms by leveraging the resulting PRNG predictability, as exploited in the wild against Bitcoin wallet applications in August 2013. Additional Analyst Notes: - CVE Program Container: References: - http://www.nds.rub.de/media/nds/veroeffentlichungen/2013/03/25/paper_2.pdf - https://android.googlesource.com/platform/libcore/+/kitkat-release/luni/src/main/java/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java - https://bitcoin.org/en/alert/2013-08-11-android - http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html
CVE ID: CVE-2013-7373 State: PUBLISHED Published: 2014-04-29T20:00:00Z Last Updated: 2024-09-16T17:58:00.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=openssl-dev&m=130298304903422&w=2 - http://emboss.github.io/blog/2013/08/21/openssl-prng-is-not-really-fork-safe/ - http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html - http://www.reddit.com/r/An
k-safe/ - http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html - http://www.reddit.com/r/Android/comments/1k6f03/due_to_a_serious_encryptionrng_flaw_in_android/cblvum5 - http://marc.info/?l=openssl-dev&m=130289811108150&w=2
CVE ID: CVE-2013-7374 State: PUBLISHED Published: 2014-05-01T14:00:00 Last Updated: 2024-08-06T18:09:16.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypass the greeter screen restrictions by clicking the date. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/%2Bsource/indicator-datetime/%2Bbug/1246812 - http://www.ubuntu.com/usn/USN-2186-1 - http://www.openwall.com/lists/oss-security/2014/04/29/3 - http://www.openwall.com/lists/oss-
ubuntu.com/usn/USN-2186-1 - http://www.openwall.com/lists/oss-security/2014/04/29/3 - http://www.openwall.com/lists/oss-security/2014/04/30/1 - http://bazaar.launchpad.net/~indicator-applet-developers/indicator-datetime/trunk.13.10/revision/282
CVE ID: CVE-2013-7375 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T18:09:16.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/classes/Authenticate.class.php in PHP-Fusion 7.02.01 through 7.02.05 allows remote attackers to execute arbitrary SQL commands via the user ID in a user cookie, a different vulnerability than CVE-2013-1803. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-97.html - http://osvdb.org/show/osvdb/90359 - http://seclists.org/bugtraq/2013/Feb/80 - http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html - https://vn
raq/2013/Feb/80 - http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html - https://vndh.net/note:php-fusion-70205-sql-injection - http://www.securityfocus.com/bid/58011 - http://seclists.org/fulldisclosure/2013/Feb/154 - http://packetstormsecurity.com/files/120368/PHP-Fusion-CMS-7.02.05-SQL-Injection.html
CVE ID: CVE-2013-7376 State: PUBLISHED Published: 2014-05-14T19:00:00Z Last Updated: 2024-09-17T02:15:42.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack the authentication of administrators, as demonstrated by requests that conduct directory traversal attacks via the group parameter to (1) plugin-preferences.php or (2) plugin-settings.php in www/admin, a different vulnerability than CVE-2013-3514. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/94778 - http://seclists.org/bugtraq/2013/Jul/27 - https://ww
es: - CVE Program Container: References: - http://osvdb.org/94778 - http://seclists.org/bugtraq/2013/Jul/27 - https://www.htbridge.com/advisory/HTB23155
CVE ID: CVE-2013-7377 State: PUBLISHED Published: 2017-10-23T18:00:00 Last Updated: 2024-08-06T18:09:16.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitrary commands via a POST request to /probe. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/15/2 - http://www.openwall.com/lists/oss-security/2014/05/13/1 - https://nodesecurity.io/advisories/codem-transcode_command_injection
CVE ID: CVE-2013-7378 State: PUBLISHED Published: 2020-02-12T13:59:50 Last Updated: 2024-08-06T18:09:16.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/13/1 - http://www.openwall.com/lists/oss-security/2014/05/15/2 - https://github.com/github/hubot-scripts/commit/feee5abdb038a229a98969ae443cdb8a61747782 - https://web.archive.org/web/20140731222413/https://nodesecurity.io/advisories/Hubot_Potential_command_injection_in_email.coffee
CVE ID: CVE-2013-7379 State: PUBLISHED Published: 2014-05-16T15:00:00 Last Updated: 2024-08-06T18:09:16.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string, which allows remote attackers to bypass authentication via a string in the access-key header that partially matches config.master.api.access_key. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/15/2 - http://www.openwall.com/lists/oss-security/2014/05/13/1 - https://nodesecurity.io/advisories/Tomato_API_Admin_Auth_Weakness - https://gi
all.com/lists/oss-security/2014/05/13/1 - https://nodesecurity.io/advisories/Tomato_API_Admin_Auth_Weakness - https://github.com/leizongmin/tomato/commit/9e427d524e04a905312a3294c85e939ed7d57b8c
CVE ID: CVE-2013-7380 State: PUBLISHED Published: 2020-01-10T13:15:24 Last Updated: 2024-08-06T18:09:16.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/05/15/2 - http://www.securityfocus.com/bid/67351
CVE ID: CVE-2013-7381 State: PUBLISHED Published: 2020-02-12T14:25:23 Last Updated: 2024-08-06T18:09:16.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/libnotify_potential_command_injection_in_libnotify.notify - http://www.openwall.com/lists/oss-security/2014/05/13/1 - http://www.openwall.com/lists/oss-security/2014/05/15/2 - https://github.com/mytrile/node-libnotify/commit/dfe7801d73a0dda10663a0ff3d0ec8b4d5f0d448