Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
c.nsf/websearch/D8E97E95D59AC17086257B3600508823?OpenDocument - http://digital.ni.com/public.nsf/allkb/548965C170D6AA2586257BD3004B146B?OpenDocument - http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
CVE ID: CVE-2013-5025 State: PUBLISHED Published: 2013-08-06T18:00:00 Last Updated: 2024-08-06T16:59:41.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files. Additional Analyst Notes: - CVE Program Container: References: - http://digital.ni.com/public.nsf/websearch/DFFB9F8AD5014E9586257B36004F6E5D?OpenDocument - http://digital.ni.com/public.nsf/allkb/493D011EE5C305FD86257BCF006C8540?OpenDocument - http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?
011EE5C305FD86257BCF006C8540?OpenDocument - http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
CVE ID: CVE-2013-5026 State: PUBLISHED Published: 2013-08-06T18:00:00 Last Updated: 2024-08-06T16:59:41.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file. Additional Analyst Notes: - CVE Program Container: References: - http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument - http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument - http://digital.ni.com/public.nsf/allkb/544407E
.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument - http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument
CVE ID: CVE-2013-5027 State: PUBLISHED Published: 2019-12-27T17:02:34 Last Updated: 2024-08-06T16:59:41.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 1.0 has incorrect access control Additional Analyst Notes: - CVE Program Container: References: - https://www.immuniweb.com/advisory/HTB23169
CVE ID: CVE-2013-5028 State: PUBLISHED Published: 2013-10-11T21:00:00 Last Updated: 2024-08-06T16:59:41.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3) hardwareLocation parameter in a search command. Additional Analyst Notes: - CVE Program Container: References: - http://www.kwoksys.com/wiki/index.php?title=Release_Notes - https://exchange.xforce.ibmcloud.com/vulnerabilities/87067 - http://packetstormsecurity.com/files/123193 - https://exchange.xforce.ibmclou
force.ibmcloud.com/vulnerabilities/87067 - http://packetstormsecurity.com/files/123193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86363
CVE ID: CVE-2013-5029 State: PUBLISHED Published: 2013-08-19T23:00:00Z Last Updated: 2024-09-16T20:42:13.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00013.html - https://github.com/phpmyadmin/phpmyadmin/commit/240b8332db53dedc27baeec5306dabad3bdece3b - http://secunia.com/advisories/54488 - https://github.com/phpmyadmin/phpmyadmin/commit/24d0eb55203b029f250c77d63f2900ffbe099e8b - http://w
m/advisories/54488 - https://github.com/phpmyadmin/phpmyadmin/commit/24d0eb55203b029f250c77d63f2900ffbe099e8b - http://www.phpmyadmin.net/home_page/security/PMASA-2013-10.php - https://github.com/phpmyadmin/phpmyadmin/commit/66fe475d4f51b1761719cb0cab360748800373f7 - https://github.com/phpmyadmin/phpmyadmin/commit/da4042fb6c4365dc8187765c3bf525043687c66f
CVE ID: CVE-2013-5030 State: PUBLISHED Published: 2013-10-16T10:00:00Z Last Updated: 2024-09-17T02:37:43.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.267 allow remote attackers to bypass authentication, and subsequently access certain configuration/ and maintenance/ scripts, by constructing a crafted URI after receiving an authentication error for an arbitrary login attempt. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/742932
CVE ID: CVE-2013-5031 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T16:59:41.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-2013-5032, CVE-2013-5033, and CVE-2013-5034. Additional Analyst Notes: - CVE Program Container: References: - http://blog.atmail.com/2013/atmail-7-1-2-security-hotfix/ - http://atmail.com/changelog/
CVE ID: CVE-2013-5032 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T16:59:41.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-2013-5031, CVE-2013-5033, and CVE-2013-5034. Additional Analyst Notes: - CVE Program Container: References: - http://blog.atmail.com/2013/atmail-7-1-2-security-hotfix/ - http://atmail.com/changelog/
CVE ID: CVE-2013-5033 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T16:59:41.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-2013-5031, CVE-2013-5032, and CVE-2013-5034. Additional Analyst Notes: - CVE Program Container: References: - http://blog.atmail.com/2013/atmail-7-1-2-security-hotfix/ - http://atmail.com/changelog/
CVE ID: CVE-2013-5034 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T16:59:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-2013-5031, CVE-2013-5032, and CVE-2013-5033. Additional Analyst Notes: - CVE Program Container: References: - http://blog.atmail.com/2013/atmail-7-1-2-security-hotfix/ - http://atmail.com/changelog/
CVE ID: CVE-2013-5035 State: PUBLISHED Published: 2013-09-05T10:00:00Z Last Updated: 2024-09-17T01:46:33.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote authenticated users to read the private e-mail of other persons in opportunistic circumstances by leveraging lack of thread safety and performing a rapid series of (1) mail-sending or (2) draft-saving operations. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/htmlcleaner/bugs/86/ - http://archives.neohapsis.com/archives/bugtraq/2013-08/0115.html
CVE ID: CVE-2013-5036 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T16:59:41.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SquareSquash/web/commit/6d667c19e96e4f23dccbfbe24afeebd18e98e1c5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86335 - http://www.exploit-db.com/exploits/27530 - http://osvdb.org/95992 - http://ce
force.ibmcloud.com/vulnerabilities/86335 - http://www.exploit-db.com/exploits/27530 - http://osvdb.org/95992 - http://ceriksen.com/2013/08/06/squash-remote-code-execution-vulnerability-advisory/
CVE ID: CVE-2013-5037 State: PUBLISHED Published: 2013-12-30T02:00:00 Last Updated: 2024-08-06T16:59:41.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HOT HOTBOX router with software 2.1.11 has a default WPS PIN of 12345670, which makes it easier for remote attackers to obtain the WPA or WPA2 pre-shared key via EAP messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.youtube.com/watch?v=CPlT09ZIj48 - http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html
CVE ID: CVE-2013-5038 State: PUBLISHED Published: 2013-12-30T02:00:00 Last Updated: 2024-08-06T16:59:41.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP address that had previously been used for an authenticated session. Additional Analyst Notes: - CVE Program Container: References: - http://www.youtube.com/watch?v=CPlT09ZIj48 - http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html
CVE ID: CVE-2013-5039 State: PUBLISHED Published: 2013-12-30T02:00:00 Last Updated: 2024-08-06T16:59:41.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change the WiFi Security field to Deactivated via the WifiSecurity parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.youtube.com/watch?v=CPlT09ZIj48 - http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html
CVE ID: CVE-2013-5041 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5042 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029463 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-103
CVE ID: CVE-2013-5043 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5044 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5045 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/100757 - http://www.exploit-db.com/exploits/33893 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097 - http://packetstormsecurity.com/files/127245/MS13-097-
osoft.com/en-us/security-updates/securitybulletins/2013/ms13-097 - http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html
CVE ID: CVE-2013-5046 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE ID: CVE-2013-5047 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-5048. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE ID: CVE-2013-5048 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-5047. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE ID: CVE-2013-5049 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE ID: CVE-2013-5050 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5051 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE ID: CVE-2013-5052 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
CVE ID: CVE-2013-5053 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5054 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-104
CVE ID: CVE-2013-5055 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5056 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that is visited with Internet Explorer, aka "Use-After-Free Vulnerability in Microsoft Scripting Runtime Object Library." Ad
is visited with Internet Explorer, aka "Use-After-Free Vulnerability in Microsoft Scripting Runtime Object Library." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-099
CVE ID: CVE-2013-5057 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December 2013, aka "HXDS ASLR Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-106 - http://blogs.technet.com/b/srd/archive/2013/12/09
microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-106 - http://blogs.technet.com/b/srd/archive/2013/12/09/ms13-106-another-aslr-bypass-is-gone.aspx
CVE ID: CVE-2013-5058 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges via a crafted application, aka "Win32k Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101
CVE ID: CVE-2013-5059 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-100
CVE ID: CVE-2013-5060 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5061 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5062 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5063 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5064 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5065 State: PUBLISHED Published: 2013-11-27T23:00:00.000Z Last Updated: 2025-10-22T00:05:39.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html - https://www.exploit-db.com/exploits/37732/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms
https://www.exploit-db.com/exploits/37732/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-002 - http://technet.microsoft.com/security/advisory/2914486
CVE ID: CVE-2013-5066 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5067 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5068 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5069 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5070 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5071 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5072 State: PUBLISHED Published: 2013-12-11T00:00:00 Last Updated: 2024-08-06T16:59:41.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-105 - http://www.securityfocus.com/bid/64085
CVE ID: CVE-2013-5073 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5074 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5075 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5076 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5077 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5078 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5079 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5080 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5081 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5082 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5083 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5084 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5085 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-5086 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.