Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1438 State: PUBLISHED Published: 2014-01-19T16:00:00 Last Updated: 2024-08-06T15:04:48.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a (1) divide-by-zero, (2) infinite loop, or (3) NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2748 - http://www.securityfocus.com/bid/62060 - http://www.openwall.com/lists/oss-security/2013/08/29/3 - http://www.oracle.com/technetwor
securityfocus.com/bid/62060 - http://www.openwall.com/lists/oss-security/2013/08/29/3 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2013-1439 State: PUBLISHED Published: 2013-09-16T19:00:00 Last Updated: 2024-08-06T15:04:48.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2748 - https://github.com/LibRaw/LibRaw/commit/11909cc59e712e09b508dda729b99aeaac2b29ad - http://www.openwall.com/lists/oss-security/2013/08/29/3
CVE ID: CVE-2013-1440 State: REJECTED Published: N/A Last Updated: 2025-06-26T20:13:05.749Z Description: No description available.
CVE ID: CVE-2013-1441 State: PUBLISHED Published: 2013-09-16T19:00:00Z Last Updated: 2024-09-17T02:02:48.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - http://anonscm.debian.org/gitweb/?p=collab-maint/exactimage.git%3Ba=commitdiff%3Bh=1dff2eb586a3d10d8528a984bc471292e3789f5c%3Bhp=acfe54193b18b46e880f4b474d2e40b4fdb44a8d - http://www.debian.org/security/2013/dsa-2754 - http://www.openwall.com/lists/oss-security/2013/09/05/8
CVE ID: CVE-2013-1442 State: PUBLISHED Published: 2013-09-30T19:00:00 Last Updated: 2024-08-06T15:04:48.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain sensitive information by reading the registers. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/25/2 - http://www.securitytracker.com/id/1029090 - http://security.gentoo.org
ww.openwall.com/lists/oss-security/2013/09/25/2 - http://www.securitytracker.com/id/1029090 - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html
CVE ID: CVE-2013-1443 State: PUBLISHED Published: 2013-09-23T20:00:00 Last Updated: 2024-08-06T15:04:48.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2758 - http://python.6.x6.nabble.com/Set-a-reasonable-upper-bound-on-password-length-td5032218.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00015.html - https://www.djan
-on-password-length-td5032218.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00015.html - https://www.djangoproject.com/weblog/2013/sep/15/security/ - http://lists.opensuse.org/opensuse-updates/2013-11/msg00035.html
CVE ID: CVE-2013-1444 State: PUBLISHED Published: 2013-09-30T20:00:00 Last Updated: 2024-08-06T15:04:48.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724614 - http://osvdb.org/97769 - http://seclists.org/oss-sec/2013/q3/660 - http://www.ubuntu.com/usn/USN-1979-1
CVE ID: CVE-2013-1445 State: PUBLISHED Published: 2013-10-26T17:00:00Z Last Updated: 2024-09-16T16:43:18.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dlitz/pycrypto/commit/19dcf7b15d61b7dc1a125a36
Analyst Notes: - CVE Program Container: References: - https://github.com/dlitz/pycrypto/commit/19dcf7b15d61b7dc1a125a367151de40df6ef175 - http://www.openwall.com/lists/oss-security/2013/10/17/3 - http://www.debian.org/security/2013/dsa-2781
CVE ID: CVE-2013-1447 State: PUBLISHED Published: 2013-12-12T18:00:00 Last Updated: 2024-08-06T15:04:48.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1850.html - http://www.securityfocus.com/bid/64142 - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://seclists.org/oss-sec/2013/q4/412 - http://www.debian.org/security/2013/dsa-2808
CVE ID: CVE-2013-1450 State: PUBLISHED Published: 2013-01-29T11:00:00Z Last Updated: 2024-09-16T21:58:10.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd. Additional Analyst Notes: - CVE Program Container: References:
monstrated by reading a Cookie header, aka MSRC 12096gd. Additional Analyst Notes: - CVE Program Container: References: - http://pastebin.com/raw.php?i=rz9BcBey - http://www.youtube.com/ChristianHaiderPoC - http://www.youtube.com/watch?v=TPqagWAvo8U
CVE ID: CVE-2013-1451 State: PUBLISHED Published: 2013-01-29T11:00:00Z Last Updated: 2024-09-16T19:05:19.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450. Additional Analyst Notes: - CVE Pro
ost and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450. Additional Analyst Notes: - CVE Program Container: References: - http://pastebin.com/raw.php?i=rz9BcBey - http://www.youtube.com/ChristianHaiderPoC - http://www.youtube.com/watch?v=TPqagWAvo8U
CVE ID: CVE-2013-1453 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T15:04:48.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist. Additional Analyst Notes: - CVE Program Container: References: - h
later analysis demonstrated that other attacks exist. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/548-20130201-core-information-disclosure.html - http://karmainsecurity.com/analysis-of-the-joomla-php-object-injection-vulnerability - http://karmainsecurity.com/KIS-2013-03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81925
CVE ID: CVE-2013-1454 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T15:04:48.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to "Coding errors." Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/550-20130203-core-information-disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81927
CVE ID: CVE-2013-1455 State: PUBLISHED Published: 2013-02-13T01:00:00 Last Updated: 2024-08-06T15:04:48.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable." Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/549-20130202-core-information-disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81926
CVE ID: CVE-2013-1461 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T15:04:48.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - https://community.rapid7.com/servlet/servlet.FileDownload?file
JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
CVE ID: CVE-2013-1462 State: PUBLISHED Published: 2013-01-31T21:00:00 Last Updated: 2024-08-06T15:04:49.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230. Additional Analyst Notes: - CVE Program Container: References: - https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - https://community.rapid7.com/servlet/servlet.FileDown
/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf - https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb - https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
CVE ID: CVE-2013-1463 State: PUBLISHED Published: 2013-02-07T02:00:00 Last Updated: 2024-08-06T15:04:49.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likely that CVE-2013-1463 will be REJECTed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81748 - http://osvdb.org/89754 - http://tobias.baethge.com/2013/01/maintenan
xchange.xforce.ibmcloud.com/vulnerabilities/81748 - http://osvdb.org/89754 - http://tobias.baethge.com/2013/01/maintenance-release-wp-table-reloaded-1-9-4/ - http://secunia.com/advisories/52027 - http://www.securityfocus.com/bid/57664 - http://packetstormsecurity.com/files/119968/WordPress-WP-Table-Reloaded-Cross-Site-Scripting.html
CVE ID: CVE-2013-1464 State: PUBLISHED Published: 2013-02-07T02:00:00 Last Updated: 2024-08-06T15:04:48.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/audio-player/changelog/ - http://insight-labs.org/?p=738 - http://secunia.com/advisories/52083 - http://packetstormsecurity.com/files/120129/WordPress-Audio-Player-SWF-Cross-Site-Scripting.html - http://www.securityfocus.c
//packetstormsecurity.com/files/120129/WordPress-Audio-Player-SWF-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/57848 - http://secunia.com/advisories/58854
CVE ID: CVE-2013-1465 State: PUBLISHED Published: 2013-02-08T20:00:00 Last Updated: 2024-08-06T15:04:48.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object. Additional Analyst Notes: - CVE Program Container: References: - http://forums.cubecart.com/?showtopic=47026 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0032.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81920 - http://karmainsecurity.
rchives/bugtraq/2013-02/0032.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81920 - http://karmainsecurity.com/KIS-2013-02 - http://www.securityfocus.com/bid/57770 - http://packetstormsecurity.com/files/120094/CubeCart-5.2.0-PHP-Object-Injection.html - http://secunia.com/advisories/52072 - http://osvdb.org/89923 - http://www.exploit-db.com/exploits/24465
CVE ID: CVE-2013-1466 State: PUBLISHED Published: 2014-02-05T15:00:00 Last Updated: 2024-08-06T15:04:48.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com
s/mediagallery/xppubwiz.php/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24536 - http://secunia.com/advisories/52255 - https://www.htbridge.com/advisory/HTB23142 - http://packetstormsecurity.com/files/120423/glFusion-1.2.2-Cross-Site-Scripting.html - http://www.glfusion.org/article.php/glf122_update_20130130_01 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82211 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0093.html
CVE ID: CVE-2013-1468 State: PUBLISHED Published: 2013-03-12T16:00:00Z Last Updated: 2024-09-16T16:38:45.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/forum/viewtopic.php?id=21470 - http://piwigo.org/releases/2.4.7 - https://www.htbridge.com/advisory/HTB23144 - http://secunia.com/advisories/52228 - http://packetstormsecurity.com/files/120592/Piwigo-2.4.
ge.com/advisory/HTB23144 - http://secunia.com/advisories/52228 - http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html - http://www.exploit-db.com/exploits/24561 - http://piwigo.org/bugs/view.php?id=0002844 - http://www.osvdb.org/90504 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html
CVE ID: CVE-2013-1469 State: PUBLISHED Published: 2013-03-13T20:48:00Z Last Updated: 2024-09-17T02:42:20.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the dl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/forum/viewtopic.php?id=21470 - http://piwigo.org/releases/2.4.7 - https://www.htbridge.com/advisory/HTB23144 - http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html - http://www.exploit-db.com/exploits/24561 - http://www.zeroscience
wigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html - http://www.exploit-db.com/exploits/24561 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5127.php - http://piwigo.org/bugs/view.php?id=0002843 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html
CVE ID: CVE-2013-1470 State: PUBLISHED Published: 2014-02-05T15:00:00 Last Updated: 2024-08-06T15:04:48.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 allows remote attackers to inject arbitrary web script or HTML via the calendar_type parameter to submit.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/82326 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0154.html - http://packetstormsecurity.com/files/120593/Geeklog-1.8.2-Cross-Site-Scripting.html - http
s/bugtraq/2013-02/0154.html - http://packetstormsecurity.com/files/120593/Geeklog-1.8.2-Cross-Site-Scripting.html - https://www.htbridge.com/advisory/HTB23143 - https://www.geeklog.net/article.php/geeklog-1.8.2sr1
CVE ID: CVE-2013-1471 State: PUBLISHED Published: 2013-02-04T19:00:00Z Last Updated: 2024-09-16T20:22:55.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section. Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=701
Additional Analyst Notes: - CVE Program Container: References: - http://www.vulnerability-lab.com/get_content.php?id=701 - http://www.youtube.com/watch?v=5d7cIaM80oY - http://www.fortiguard.com/advisory/FG-IR-013-001.html
CVE ID: CVE-2013-1472 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T15:04:48.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://www.oracle.com/technetwork/topics/security/ja
uls/id/858729 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16620 - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2013-1473 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T15:04:48.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deployment. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19121 - http://rhn.redhat.com/errata/RHSA-2013-023
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19121 - http://rhn.redhat.com/errata/RHSA-2013-0236.html - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://www.kb.cert.org/vuls/id/858729 - http://rhn.redhat.com/errata/RHSA-2013-0237.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19271 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16074 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://www.securityfocus.com/bid/57731 - http://rhn.redhat.com/errata/RHSA-2013-145
o/?l=bugtraq&m=136439120408139&w=2 - http://www.securityfocus.com/bid/57731 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://marc.info/?l=bugtraq&m=136570436423916&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2
CVE ID: CVE-2013-1474 State: PUBLISHED Published: 2013-02-02T00:00:00 Last Updated: 2024-08-06T15:04:49.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA13-032A.html - http://www.kb.cert.org/vuls/id/858729 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16378 - http://ma
uls/id/858729 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16378 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2