Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4836 State: PUBLISHED Published: 2013-11-04T15:00:00Z Last Updated: 2024-09-16T19:56:03.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application LifeCycle Management (ALM) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1759. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969436 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969436
CVE ID: CVE-2013-4837 State: PUBLISHED Published: 2013-11-04T15:00:00Z Last Updated: 2024-09-17T00:26:46.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437
CVE ID: CVE-2013-4838 State: PUBLISHED Published: 2013-11-04T15:00:00Z Last Updated: 2024-09-16T22:31:18.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1850. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437
CVE ID: CVE-2013-4839 State: PUBLISHED Published: 2013-11-04T15:00:00Z Last Updated: 2024-09-16T19:25:07.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1851. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437
CVE ID: CVE-2013-4840 State: PUBLISHED Published: 2014-07-28T17:00:00 Last Updated: 2024-08-06T16:59:39.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03993467 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03993467
CVE ID: CVE-2013-4841 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T16:59:40.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204
CVE ID: CVE-2013-4842 State: PUBLISHED Published: 2013-11-16T02:00:00Z Last Updated: 2024-09-16T19:25:11.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804
CVE ID: CVE-2013-4843 State: PUBLISHED Published: 2013-11-16T02:00:00Z Last Updated: 2024-09-16T21:08:14.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03996804
CVE ID: CVE-2013-4844 State: PUBLISHED Published: 2013-11-29T02:00:00 Last Updated: 2024-08-06T16:59:39.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04026812 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04026812
CVE ID: CVE-2013-4845 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T16:59:39.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on HP Officejet Pro 8500 (aka A909) All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04035829 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04035829
CVE ID: CVE-2013-4846 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T16:59:39.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04039138
CVE ID: CVE-2013-4848 State: PUBLISHED Published: 2019-10-25T16:03:09 Last Updated: 2024-08-06T16:59:40.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf - https://www.securityfocus.com/bid/62884/info - https://vuldb.com/?id.10495
CVE ID: CVE-2013-4851 State: PUBLISHED Published: 2013-07-28T18:00:00 Last Updated: 2024-08-06T16:59:40.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests. Additional Analyst Notes: - CVE Program Container: References: - http://svnweb.freebsd.org/base?view=revision&revision=244226 - http://www.freebsd.org/security/advisories/FreeBS
nces: - http://svnweb.freebsd.org/base?view=revision&revision=244226 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:08.nfsserver.asc - http://www.securityfocus.com/bid/61484
CVE ID: CVE-2013-4852 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T16:59:40.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54533 - http://secunia.com/advisories/54517 - http://winscp.net/tracker/show_bu
erences: - http://secunia.com/advisories/54533 - http://secunia.com/advisories/54517 - http://winscp.net/tracker/show_bug.cgi?id=1017 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718779 - http://www.search-lab.hu/advisories/secadv-20130722 - http://www.debian.org/security/2013/dsa-2736 - http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9896 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html - http://secunia.com/advisories/54379 - http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-signature-stringlen.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00041.html
CVE ID: CVE-2013-4854 State: PUBLISHED Published: 2013-07-26T23:00:00 Last Updated: 2024-08-06T16:59:39.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipe
wild in July 2013. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113108.html - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03922396 - https://kb.isc.org/article/AA-01015 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://secunia.com/advisories/54134 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:202 - http://linux.oracle.com/errata/ELSA-2014-1244 - http://secunia.com/advisories/54185 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:07.bind.asc - https://kb.isc.org/article/AA-01016 - https://oval.cisecurity.org/repositor
urity/advisories/FreeBSD-SA-13:07.bind.asc - https://kb.isc.org/article/AA-01016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19561 - https://kc.mcafee.com/corporate/index?page=content&id=SB10052 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113251.html - http://secunia.com/advisories/54207 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00018.html - https://support.apple.com/kb/HT6536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86004 - http://www.zerodayinitiative.com/advisories/ZDI-13-210/ - http://archives.neohapsis.com/archives/bugtraq/2013-08/0030.html - http://rhn.redhat.com/errata/RHSA-2
ies/ZDI-13-210/ - http://archives.neohapsis.com/archives/bugtraq/2013-08/0030.html - http://rhn.redhat.com/errata/RHSA-2013-1114.html - http://www.securityfocus.com/bid/61479 - http://secunia.com/advisories/54323 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00004.html - http://secunia.com/advisories/54211 - http://www.ubuntu.com/usn/USN-1910-1 - http://www.debian.org/security/2013/dsa-2728 - http://www.securitytracker.com/id/1028838 - http://rhn.redhat.com/errata/RHSA-2013-1115.html - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03922396 - http://secunia.com/advisories/54432
CVE ID: CVE-2013-4855 State: PUBLISHED Published: 2019-10-25T15:47:43 Last Updated: 2024-08-06T16:59:40.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf
CVE ID: CVE-2013-4856 State: PUBLISHED Published: 2019-10-25T15:44:11 Last Updated: 2024-08-06T16:59:40.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-865L has Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf
CVE ID: CVE-2013-4857 State: PUBLISHED Published: 2019-10-25T15:36:13 Last Updated: 2024-08-06T16:59:40.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-865L has PHP File Inclusion in the router xml file. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/
CVE ID: CVE-2013-4858 State: PUBLISHED Published: 2013-12-30T02:00:00 Last Updated: 2024-08-06T16:59:40.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) via a crafted .wav file, as demonstrated by movieMaker.wav. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61334 - http://downloads.securityfocus.com/vulnerabilities/exploits/61334.py
CVE ID: CVE-2013-4859 State: PUBLISHED Published: 2019-12-27T16:28:23 Last Updated: 2024-08-06T16:59:41.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: INSTEON Hub 2242-222 lacks Web and API authentication Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86196 - http://www.exploit-db.com/exploits/27284
CVE ID: CVE-2013-4860 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T16:59:40.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86197 - http://www.securityfocus.com/bid/61581 - http://packetstormsecurity.com/files/122657/Radio-Thermostat-Of-America-Inc-Lack-Of-Authentication.html
CVE ID: CVE-2013-4861 State: PUBLISHED Published: 2020-01-28T16:09:39 Last Updated: 2024-08-06T16:59:40.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users to read arbirary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt - http://www.exploit-db.com/exploits/27286
CVE ID: CVE-2013-4862 State: PUBLISHED Published: 2020-01-28T16:09:36 Last Updated: 2024-08-06T16:59:40.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt - http://www.exploit-d
rization-CSRF-Disclosure.html - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt - http://www.exploit-db.com/exploits/27286
CVE ID: CVE-2013-4863 State: PUBLISHED Published: 2020-01-28T16:09:32 Last Updated: 2024-08-06T16:59:40.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote authenticated users to execute arbitrary Lua code via a RunLua action in a request to port_49451/upnp/control/hag. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html - https://www3.
stormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt - http://www.exploit-db.com/exploits/27286
CVE ID: CVE-2013-4864 State: PUBLISHED Published: 2020-01-28T16:09:29 Last Updated: 2024-08-06T16:59:40.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bin/cmh/proxy.sh, related to a Server-Side Request Forgery (SSRF) issue. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt - http://www.exploit-db.com/exploits/27286
CVE ID: CVE-2013-4865 State: PUBLISHED Published: 2020-01-28T16:09:26 Last Updated: 2024-08-06T16:59:41.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware via the squashfs parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt - http://www.exploit-db.com/expl
SRF-Disclosure.html - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt - http://www.exploit-db.com/exploits/27286
CVE ID: CVE-2013-4866 State: PUBLISHED Published: 2015-04-16T23:00:00 Last Updated: 2024-08-06T16:59:40.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption (water or heat) or user discomfort. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-020.txt - http://seclists.org/fulldisclosure/2013/Aug/18 - http://www.independent.co.uk/life-style/gadgets-and-tech/features/now-even-toilets-arent-safe-from-hacking-8747232.html - http://p
.independent.co.uk/life-style/gadgets-and-tech/features/now-even-toilets-arent-safe-from-hacking-8747232.html - http://packetstormsecurity.com/files/122655/LIXIL-Satis-Toilet-Hard-Coded-Bluetooth-PIN.html - http://arstechnica.com/security/2013/08/holy-sht-smart-toilet-hack-attack/ - http://www.huffingtonpost.co.uk/2013/08/05/smart-toilet-could-attackmy-satis_n_3706116.html
CVE ID: CVE-2013-4867 State: PUBLISHED Published: 2019-12-27T16:31:35 Last Updated: 2024-08-06T16:59:40.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86222
CVE ID: CVE-2013-4868 State: PUBLISHED Published: 2019-12-27T16:38:06 Last Updated: 2024-08-06T16:59:40.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Karotz API 12.07.19.00: Session Token Information Disclosure Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27285 - http://www.securityfocus.com/bid/61584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86221
CVE ID: CVE-2013-4869 State: PUBLISHED Published: 2013-07-18T00:00:00 Last Updated: 2024-08-06T16:59:40.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756. NOTE: the vendor has provided a statement that the "hard-coded static encryption key is considered a hardening issue rather
: the vendor has provided a statement that the "hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85883 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
CVE ID: CVE-2013-4870 State: PUBLISHED Published: 2013-07-18T01:00:00 Last Updated: 2024-08-06T16:59:40.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the News Search (news_search) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/81580 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/
CVE ID: CVE-2013-4871 State: PUBLISHED Published: 2013-07-18T01:00:00 Last Updated: 2024-08-06T16:59:40.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo) extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84660 - http://osvdb.org/93816 - http://secunia.com/advisories/53634 - http://www.securityfocus.com/bid/60274 - http://typo3.org/extensions/repository/view/tq_seo - http://typo3.org/teams/securi
p://www.securityfocus.com/bid/60274 - http://typo3.org/extensions/repository/view/tq_seo - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-007/
CVE ID: CVE-2013-4872 State: PUBLISHED Published: 2013-07-18T14:00:00 Last Updated: 2024-08-06T16:59:40.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/85804