Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86258 - http://www.securityfocus.com/bid/61638 - http://osvdb.org/96078 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0034.html - http://archives.neohapsis.com/archives/bugtraq/2013-08/0047.html - http://osvdb.org/96074 - http://osvdb.org/96076 - https://issues.apache.org/jira/browse/CLOUDSTACK-2936 - http://osvdb.org/96075 - http://osvdb.org/96077 - http://secunia.com/advisories/54399
CVE ID: CVE-2013-2137 State: PUBLISHED Published: 2013-08-15T16:00:00 Last Updated: 2024-08-06T15:27:40.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85874 - http://ofbiz.apache.org/download.html#vulnerabilities - http://secunia.com/advisories/53910 - http://www.secu
es/85874 - http://ofbiz.apache.org/download.html#vulnerabilities - http://secunia.com/advisories/53910 - http://www.securityfocus.com/bid/61370 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0144.html - http://osvdb.org/95523
CVE ID: CVE-2013-2138 State: PUBLISHED Published: 2013-10-10T00:00:00Z Last Updated: 2024-09-16T18:56:18.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=970596 - https://github.com/gallery/gallery3/commit/3e5bba2cd4febe8331c0158c11ea418f21c72efa - http://galleryproject.org/gallery_3_0_8 - http://www.openwall.com/lists/oss-security/2013/06/04/9 - https://github.com
- http://galleryproject.org/gallery_3_0_8 - http://www.openwall.com/lists/oss-security/2013/06/04/9 - https://github.com/gallery/gallery3/commit/80bb0f2222dd99ed2ce59e804b833bab63cc376a - http://sourceforge.net/apps/trac/gallery/ticket/2070 - http://sourceforge.net/apps/trac/gallery/ticket/2068
CVE ID: CVE-2013-2139 State: PUBLISHED Published: 2014-01-16T02:00:00 Last Updated: 2024-08-06T15:27:40.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:219 - https://bugzilla.redhat.com/show_bug.cgi?id=970697 - http://seclists.org/fulldisclosure/2013/Jun/10 - http://lwn.net/Articles/579633/ - http://www.debian.org
cgi?id=970697 - http://seclists.org/fulldisclosure/2013/Jun/10 - http://lwn.net/Articles/579633/ - http://www.debian.org/security/2014/dsa-2840 - https://github.com/cisco/libsrtp/pull/27 - http://advisories.mageia.org/MGASA-2014-0465.html - http://www.osvdb.org/93852 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00059.html - http://lists.opensuse.org/opensuse-updates/2013-07/msg00083.html
CVE ID: CVE-2013-2140 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T15:27:40.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1943-1 - http://www.ubuntu.com/usn/USN-2039-1 - http://www.ubuntu.com/usn/USN-1938-1 - http://
://www.ubuntu.com/usn/USN-1943-1 - http://www.ubuntu.com/usn/USN-2039-1 - http://www.ubuntu.com/usn/USN-1938-1 - http://www.ubuntu.com/usn/USN-1944-1 - http://www.ubuntu.com/usn/USN-1945-1 - http://www.ubuntu.com/usn/USN-2038-1 - http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-2140.html - http://www.openwall.com/lists/oss-security/2013/06/05/21 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=604c499cbbcc3d5fe5fb8d53306aa0fae1990109 - https://github.com/torvalds/linux/commit/604c499cbbcc3d5fe5fb8d53306aa0fae1990109 - http://www.ubuntu.com/usn/USN-1947-1 - https://bugzilla.redhat.com/show_bug.cgi?id=971146 - http://www.kernel.org/pub/linux/kerne
w.ubuntu.com/usn/USN-1947-1 - https://bugzilla.redhat.com/show_bug.cgi?id=971146 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.5 - http://www.ubuntu.com/usn/USN-1946-1
CVE ID: CVE-2013-2141 State: PUBLISHED Published: 2013-06-07T10:00:00 Last Updated: 2024-08-06T15:27:40.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=970873 - http://www.ubuntu.com/usn/USN-1899-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.openwall.com/lists/oss-sec
usn/USN-1899-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.openwall.com/lists/oss-security/2013/06/04/10 - https://github.com/torvalds/linux/commit/b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f - http://www.debian.org/security/2013/dsa-2766 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://rhn.redhat.com/errata/RHSA-2013-1801.html - http://secunia.com/advisories/55055 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f - http://www.ubuntu.com/usn/USN-1900-1
CVE ID: CVE-2013-2142 State: PUBLISHED Published: 2014-01-19T16:00:00 Last Updated: 2024-08-06T15:27:40.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/06/04/11 - https://bugs.launchpad.net/ubuntu/%2Bsource/libimobiledevice/%2Bbug/1164263 - http://libi
s/oss-security/2013/06/04/11 - https://bugs.launchpad.net/ubuntu/%2Bsource/libimobiledevice/%2Bbug/1164263 - http://libiphone.lighthouseapp.com/projects/27916-libiphone/tickets/331-insecure-tmp-directory-use - http://www.ubuntu.com/usn/USN-1927-1
CVE ID: CVE-2013-2143 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T15:27:40.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32515 - http://packetstormsecurity.com/files/125866/Katello-Red-Hat-Satellite-users-update_roles-Missing-Authorization.html - http://www.securityfocus.com/bid/66434 - http://www.osvdb
-Hat-Satellite-users-update_roles-Missing-Authorization.html - http://www.securityfocus.com/bid/66434 - http://www.osvdb.org/104981
CVE ID: CVE-2013-2144 State: PUBLISHED Published: 2013-07-03T18:00:00Z Last Updated: 2024-08-06T15:27:40.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0888.html
CVE ID: CVE-2013-2145 State: PUBLISHED Published: 2013-08-19T23:00:00Z Last Updated: 2024-09-16T20:13:25.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-07/msg00043.html - http://www.securityfocus.com/bid/60352 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00039.html - http://www.openwall.com/lists
tyfocus.com/bid/60352 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00039.html - http://www.openwall.com/lists/oss-security/2013/06/05/16 - http://www.ubuntu.com/usn/USN-1896-1 - https://github.com/audreyt/module-signature/commit/cbd06b392a73c63159dc5c20ff5b3c8fc88c4896 - https://bugzilla.redhat.com/show_bug.cgi?id=971096 - https://github.com/audreyt/module-signature/commit/575f7bd6ba4cc7c92f841e8758f88a131674ebf2
CVE ID: CVE-2013-2146 State: PUBLISHED Published: 2013-06-07T10:00:00 Last Updated: 2024-08-06T15:27:40.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=971309 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - https://github.com/torvalds/linux/commit/f1923820c447e986a
://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - https://github.com/torvalds/linux/commit/f1923820c447e986a9da0fc6bf60c1dccdf0408e - http://rhn.redhat.com/errata/RHSA-2013-1173.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f1923820c447e986a9da0fc6bf60c1dccdf0408e - http://www.openwall.com/lists/oss-security/2013/06/05/23
CVE ID: CVE-2013-2147 State: PUBLISHED Published: 2013-06-07T10:00:00 Last Updated: 2024-08-06T15:27:40.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. Additional A
2 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2015-1 - http://rhn.redhat.com/errata/RHSA-2013-1166.html - http://www.openwall.com/lists/oss-security/2013/06/05/25 - http://www.ubuntu.com/usn/USN-1996-1 - http://www.ubuntu.com/usn/USN-1994-1 - http://www.ubuntu.com/usn/USN-1997-1 - https://bugzilla.redhat.com/show_bug.cgi?id=971242 - http://www.ubuntu.com/usn/USN-2016-1 - http://www.ubuntu.com/usn/USN-2020-1 - http://lkml.org/lkml/2013/6/3/127 - http://www.ubuntu.com/usn/USN-2017-1 - http://www.ubuntu.com/usn/USN-2023-1 - http://www.ubunt
l.org/lkml/2013/6/3/127 - http://www.ubuntu.com/usn/USN-2017-1 - http://www.ubuntu.com/usn/USN-2023-1 - http://www.ubuntu.com/usn/USN-2050-1 - http://www.ubuntu.com/usn/USN-1999-1 - http://lkml.org/lkml/2013/6/3/131 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2013-2148 State: PUBLISHED Published: 2013-06-07T10:00:00 Last Updated: 2024-08-06T15:27:40.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1929-1 - http://lkml.org/lkml/2013/6/3/128 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://lists.opensuse.org/opensuse-up
128 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://bugzilla.redhat.com/show_bug.cgi?id=971258 - http://www.ubuntu.com/usn/USN-1930-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.openwall.com/lists/oss-security/2013/06/05/26
CVE ID: CVE-2013-2149 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:27:40.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.16 and 5.x before 5.0.7 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to shared files. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-028/
CVE ID: CVE-2013-2150 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:27:40.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in js/viewer.js in ownCloud before 4.5.12 and 5.x before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to shared files. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-028/
CVE ID: CVE-2013-2151 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T15:27:40.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60473 - http://rhn.redhat.com/errata/RHSA-2013-0925.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84868
CVE ID: CVE-2013-2152 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T15:27:40.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0924.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84866 - http://rhn.redhat.com/errata/RHSA-2013-0925.html - http://www.securityfocus.com/bid/60475 - https://bugzilla.redhat.com/show_bug.cgi?id=971172
CVE ID: CVE-2013-2153 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T15:27:40.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures and spoof arbitrary content via crafted Reference elements in the Signature, aka "XML Signature Bypass issue." Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGReference.cpp?r1=1125514&r2=1493959&pathrev=1493959&diff_format=h - http://www.d
io/xml-security-cpp/trunk/xsec/dsig/DSIGReference.cpp?r1=1125514&r2=1493959&pathrev=1493959&diff_format=h - http://www.debian.org/security/2013/dsa-2710 - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0140.html - https://www.tenable.com/security/tns-2018-15 - http://santuario.apache.org/secadv.data/CVE-2013-2153.txt - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2013-2154 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T15:27:41.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed XPointer expressions, probably related to the DSIGReference::getURIBaseTXFM function. Additional Analyst Notes: - CVE Program Container: References: - http://santuario.apache.org/secadv.data/CVE-2013-2154.txt - http://svn.apache.org
- CVE Program Container: References: - http://santuario.apache.org/secadv.data/CVE-2013-2154.txt - http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGReference.cpp?r1=1125514&r2=1493959&pathrev=1493959&diff_format=h - http://www.debian.org/security/2013/dsa-2710 - https://www.tenable.com/security/tns-2018-15 - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0141.html - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2013-2155 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T15:27:40.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-0217 protection mechanism and spoof a signature via crafted length values to the (1) compareBase64StringToRaw, (2) DSIGAlgorithmHandlerDefault, or (3) DSIGAlgorithmHandlerDefault::verify functions. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/D
Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc/santuario/xml-security-cpp/trunk/xsec/dsig/DSIGAlgorithmHandlerDefault.cpp?r1=1125752&r2=1493960&pathrev=1493960&diff_format=h - http://www.debian.org/security/2013/dsa-2710 - https://www.tenable.com/security/tns-2018-15 - http://santuario.apache.org/secadv.data/CVE-2013-2155.txt - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0142.html - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2013-2156 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T15:27:41.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PrefixList attribute. Additional Analyst Notes: - CVE Program Container: References: - http://santuario.apache.org/secadv.data/CVE-2013-2156.txt - http://svn.apache.org/viewvc?view=revision&revision=1493961 - http://www.debian.org/securi
cadv.data/CVE-2013-2156.txt - http://svn.apache.org/viewvc?view=revision&revision=1493961 - http://www.debian.org/security/2013/dsa-2710 - https://www.tenable.com/security/tns-2018-15 - http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0143.html - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2013-2157 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-08-06T15:27:40.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/06/13/3 - http://rhn.redhat.com/errata/RHSA-2013-1083.html - http://www.securityfocus.com/bid/60545 - http://rhn.redhat.com/errata/RHSA-2013-0994.html
CVE ID: CVE-2013-2158 State: PUBLISHED Published: 2013-07-01T21:00:00 Last Updated: 2024-08-06T15:27:40.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Services module 6.x-3.x and 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2012366 - http://secunia.com/advisories/53649 - http://secunia.com/advisories/53661 - https://drupal.org/node/2012982 - http://osvdb.org/93980 - http://www.securityfocus.com/bid/60356 - https://exchange.xforce.ibmcloud.com/vulner
/2012982 - http://osvdb.org/93980 - http://www.securityfocus.com/bid/60356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84791 - http://seclists.org/fulldisclosure/2013/Jun/23
CVE ID: CVE-2013-2159 State: PUBLISHED Published: 2019-12-10T14:13:29 Last Updated: 2024-08-06T15:27:41.098Z Vendors: monkey Products: monkey Problem Types: broken authentication Description: Monkey HTTP Daemon: broken user name authentication Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2159 - http://www.openwall.com/lists/oss-security/2013/06/07/4 - http://www.securityfocus.com/bid/60415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85138
CVE ID: CVE-2013-2160 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T15:27:40.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) nested constructs, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cxf.apache.org/security-advisories.data/CVE-2013-2160.txt.asc - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://jira.codehaus.org/browse/WSTX-28