Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
pensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html - https://security.gentoo.org/glsa/201504-01 - https://bugzilla.mozilla.org/show_bug.cgi?id=905903 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updat
ttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=890432 - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html - http://www.ubuntu.com/usn/USN-2052-1 - http://www.mozilla.org/security/announce/2013/mfsa2013-104.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
CVE ID: CVE-2013-5611 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-105.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=771294 - http://lists.fedoraproject.org/pipermail/package-a
msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=771294 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://www.ubuntu.com/usn/USN-2052-1
CVE ID: CVE-2013-5612 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64205 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.fedoraproject.org/pipermail/package-announce/
ensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://www.mozilla.org/security/announce/2013/mfsa2
/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://www.mozilla.org/security/announce/2013/mfsa2013-106.html - https://bugzilla.mozilla.org/show_bug.cgi?id=871161 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://www.ubuntu.com/usn/USN-2052-1 - http://rhn.redhat.com/errata/RHSA-2013-1812.html
CVE ID: CVE-2013-5613 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-114.html
al Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-114.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - https://bugzilla.mozilla.org/show_bug.cgi?id=930381 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - https://bugzilla.mozilla.org/show_bug.cgi?id=932449 - http://lists.opensuse.org/opensuse-updates
racker.com/id/1029470 - https://bugzilla.mozilla.org/show_bug.cgi?id=932449 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html - http://www.ubuntu.com/usn/USN-20
- http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html - http://www.ubuntu.com/usn/USN-2052-1 - http://rhn.redhat.com/errata/RHSA-2013-1812.html - http://www.ubuntu.com/usn/USN-2053-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
CVE ID: CVE-2013-5614 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermai
//lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://www.mozilla.org/security/announce/2013/mfsa2013-107.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/m
2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - https://bugzilla.mozilla.org/show_bug.cgi?id=886262 - http://www.ubuntu.com/usn/USN-2052-1 - http://rhn.redhat.com/errata/RHSA-2013-1812.html
CVE ID: CVE-2013-5615 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.ope
es/2013-12/msg00120.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html - http://www.mozilla.org/security/announce/2013/mfsa2013-115.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-29
html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html - https://bugzilla.mozilla.org/show_bug.cgi?id=929261 - http://www.ubuntu.com/usn/USN-2052-1 - http://www.ubuntu.com/usn/USN-2053-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
CVE ID: CVE-2013-5616 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html - http://lists.opensuse.org/opensuse-security-
ences: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html - https://bugzilla.mozilla.org/show_bug.cgi?id=938341 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html - http://www.mozilla.org/security/announce/2013/mfsa2013-108.html - https://se
rg/opensuse-updates/2013-12/msg00121.html - http://www.mozilla.org/security/announce/2013/mfsa2013-108.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html - http://www.ubuntu.com/usn/USN-2052-1 - http://rhn.redhat.com/errata/RHSA-2013-1812.html - http://www.ubuntu.com/usn/USN-2053-1 - http:
ntu.com/usn/USN-2052-1 - http://rhn.redhat.com/errata/RHSA-2013-1812.html - http://www.ubuntu.com/usn/USN-2053-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
CVE ID: CVE-2013-5618 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-109.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html
mozilla.org/security/announce/2013/mfsa2013-109.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - https://bugzilla.mozilla.org/show_bug.cgi?id=926361 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html - https://security.gentoo.org/gl
ow_bug.cgi?id=926361 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html - http://www.ubuntu.com/usn/USN-2052-1 - http://rhn.redhat.com/errata/RHSA-2013-1812.html - http://www.ubuntu.com/usn/USN-2053-1 - http://lists.fedoraprojec
-1 - http://rhn.redhat.com/errata/RHSA-2013-1812.html - http://www.ubuntu.com/usn/USN-2053-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html
CVE ID: CVE-2013-5619 State: PUBLISHED Published: 2013-12-11T15:00:00 Last Updated: 2024-08-06T17:15:21.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2013/mfsa2013-110.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.fedoraproject.org
3-110.html - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00010.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html - http://www.securitytracker.com/id/1029470 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html - https://security.gentoo.org/glsa/201504-01 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://bugzilla.mozilla.org/show_bug.cgi?id=917841 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.se
pensuse-updates/2013-12/msg00085.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html - http://www.securitytracker.com/id/1029476 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html - http://www.ubuntu.com/usn/USN-2052-1
CVE ID: CVE-2013-5620 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-17T03:48:43.774Z Description: No description available.
CVE ID: CVE-2013-5621 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T19:35:12.958Z Description: No description available.
CVE ID: CVE-2013-5622 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T20:43:26.653Z Description: No description available.
CVE ID: CVE-2013-5623 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-17T02:15:36.476Z Description: No description available.
CVE ID: CVE-2013-5624 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-17T00:20:30.605Z Description: No description available.
CVE ID: CVE-2013-5625 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T23:40:54.346Z Description: No description available.
CVE ID: CVE-2013-5626 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T20:48:02.582Z Description: No description available.
CVE ID: CVE-2013-5627 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T19:25:12.437Z Description: No description available.
CVE ID: CVE-2013-5628 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-17T01:11:24.212Z Description: No description available.
CVE ID: CVE-2013-5629 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-17T03:28:05.815Z Description: No description available.
CVE ID: CVE-2013-5630 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T17:03:19.718Z Description: No description available.
CVE ID: CVE-2013-5631 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T19:45:58.168Z Description: No description available.
CVE ID: CVE-2013-5632 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-16T20:27:51.252Z Description: No description available.
CVE ID: CVE-2013-5633 State: REJECTED Published: 2013-09-17T10:00:00Z Last Updated: 2024-09-17T02:36:33.609Z Description: No description available.
CVE ID: CVE-2013-5634 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T17:15:21.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and host OS crash) or possibly have unspecified other impact by omitting vCPU initialization before a KVM_GET_REG_LIST ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61995 - https://github.com/torvalds/linux/commit/e8180dcaa8470ceca21109f143876fdcd9fe050a - http://www.openwall.com/lists/oss-secu
tps://github.com/torvalds/linux/commit/e8180dcaa8470ceca21109f143876fdcd9fe050a - http://www.openwall.com/lists/oss-security/2013/08/26/4 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e8180dcaa8470ceca21109f143876fdcd9fe050a
CVE ID: CVE-2013-5635 State: PUBLISHED Published: 2013-11-30T11:00:00 Last Updated: 2024-08-06T17:15:21.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly maintain the state of password failures, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by entering password guesses within multiple Unlock.exe processes that are running simultaneously. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/explt+advs/CheckPoint_EndPoint_EPM_Explorer.txt - https://supportcenter.checkpoint.com/suppo
://www.digitalsec.net/stuff/explt+advs/CheckPoint_EndPoint_EPM_Explorer.txt - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96589
CVE ID: CVE-2013-5636 State: PUBLISHED Published: 2013-11-30T11:00:00 Last Updated: 2024-08-06T17:15:21.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not associate password failures with a device ID, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by overwriting DVREM.EPM with a copy of itself after each few password guesses. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/explt+advs/CheckPoint_EndPoint_EPM_Explorer.txt - https://supportcenter.checkpoint.com/supportcenter/
gitalsec.net/stuff/explt+advs/CheckPoint_EndPoint_EPM_Explorer.txt - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96589
CVE ID: CVE-2013-5637 State: PUBLISHED Published: 2020-01-07T16:27:20 Last Updated: 2024-08-06T17:15:21.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: PQI AirCard has persistent XSS Additional Analyst Notes: - CVE Program Container: References: - http://firmware.re/vulns/acsa-2013-007.php
CVE ID: CVE-2013-5638 State: PUBLISHED Published: 2020-01-07T16:31:33 Last Updated: 2024-08-06T17:15:21.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Transcend WiFiSD 1.8 has persistent XSS Additional Analyst Notes: - CVE Program Container: References: - http://firmware.re/usenixsec14/ - http://firmware.re/vulns/acsa-2013-006.php
CVE ID: CVE-2013-5639 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T17:15:21.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the gnew_language cookie. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123482 - http://www.exploit-db.com/exploits/28684 - https://www.htbridge.com/advisory/HTB23171
CVE ID: CVE-2013-5640 State: PUBLISHED Published: 2014-04-01T00:00:00 Last Updated: 2024-08-06T17:15:21.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) answer_id or (2) question_id parameter to polls/vote.php, (3) story_id parameter to comments/add.php or (4) comments/edit.php, or (5) thread_id parameter to posts/add.php. NOTE: this issue was SPLIT due to differences in researchers and disclosure dates. CVE-2013-7349 already covers the news_id parameter to news/send.php, user_email parameter to users/register.php, and thread_id to posts/edit.php vectors.
ews_id parameter to news/send.php, user_email parameter to users/register.php, and thread_id to posts/edit.php vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123482 - http://www.exploit-db.com/exploits/28684 - http://www.securityfocus.com/bid/62817 - https://www.htbridge.com/advisory/HTB23171