Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4076 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:49.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the dissect_iphc_crtp_fh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7880 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://secunia.com/advisories/54425 - http://www.gentoo.org/security/en/gls
html - http://secunia.com/advisories/53762 - http://secunia.com/advisories/54425 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8727 - http://www.debian.org/security/2013/dsa-2709 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16676 - http://www.wireshark.org/security/wnpa-sec-2013-34.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=46128 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ppp.c?r1=46128&r2=46127&pathrev=46128 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194
an/dissectors/packet-ppp.c?r1=46128&r2=46127&pathrev=46128 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4077 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:50.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8697 - http://www.wireshark.org/security/wnpa-sec-2013-35.html - http:/
ps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8697 - http://www.wireshark.org/security/wnpa-sec-2013-35.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49418 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.debian.org/security/2013/dsa-2709 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16829 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4078 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:49.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16936 - http://secunia.com/a
62 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16936 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=45566 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7862 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8729 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.debian.org/security/2013/dsa-2709 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=46158 - http://www.wireshark.org/security/wnpa-sec-2013-36.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4079 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:49.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (infinite loop and application hang) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8730 - http://www.gentoo.org/sec
tp://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8730 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_cbch.c?r1=49686&r2=49685&pathrev=49686 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49686 - http://www.wireshark.org/security/wnpa-sec-2013-37.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16691 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4080 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:50.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service (infinite loop, and CPU and memory consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://www.wireshark.org/security/wnpa-sec
rg/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://www.wireshark.org/security/wnpa-sec-2013-38.html - http://secunia.com/advisories/54425 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16873 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8764 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.securityfocus.com/bid/60503 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49744 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-assa_
suse.org/opensuse-updates/2013-06/msg00194.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-assa_r3.c?r1=49744&r2=49743&pathrev=49744
CVE ID: CVE-2013-4081 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:49.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://www.wireshark.org/security/wnpa-sec-2013-39.htm
otes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://www.wireshark.org/security/wnpa-sec-2013-39.html - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-http.c?r1=49623&r2=49622&pathrev=49623 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16820 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://www.securityfocus.com/bid/60505 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html - http://www.debian.org/security/2013/dsa-2709 - http://w
- http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html - http://www.debian.org/security/2013/dsa-2709 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:172 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8733 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49623 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4082 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:49.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not validate the relationship between a record length and a trailer length, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://secunia.com/advisories/54425 - https://bu
s/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8760 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.debian.org/security/2013/dsa-2709 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49739 - http://anonsvn.wireshark.org/viewvc/trunk/wiretap/vwr.c?r1=49739&r2=49738&pathrev=49739 - http://www.wireshark.org/security/wnpa-sec-2013-40.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16886 - http://lists.opensuse.org/opensuse-updates/2013
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16886 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4083 State: PUBLISHED Published: 2013-06-09T21:00:00 Last Updated: 2024-08-06T16:30:50.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8717 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - htt
ug.cgi?id=8717 - http://www.wireshark.org/docs/relnotes/wireshark-1.8.8.html - http://secunia.com/advisories/53762 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - http://www.wireshark.org/docs/relnotes/wireshark-1.10.1.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.wireshark.org/docs/relnotes/wireshark-1.6.16.html - http://www.debian.org/security/2013/dsa-2709 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=49802&r2=49801&pathrev=49802 - http://www.wireshark.org/security/wnpa-sec-2013-41.html - http://anonsvn.wireshark.o
c?r1=49802&r2=49801&pathrev=49802 - http://www.wireshark.org/security/wnpa-sec-2013-41.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49802 - http://secunia.com/advisories/54296 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16375 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:172 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-4088 State: PUBLISHED Published: 2020-02-21T15:48:13 Last Updated: 2024-08-06T16:30:49.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0015.html - http://advisories.mageia.org/MGASA-2013-0196.html - https://www.securityfocus.com/bid/6
ives/bugtraq/2013-07/0015.html - http://advisories.mageia.org/MGASA-2013-0196.html - https://www.securityfocus.com/bid/60688/discuss - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-4088
CVE ID: CVE-2013-4090 State: PUBLISHED Published: 2020-02-12T15:13:43 Last Updated: 2024-08-06T16:30:50.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Varnish HTTP cache before 3.0.4: ACL bug Additional Analyst Notes: - CVE Program Container: References: - https://www.varnish-cache.org/lists/pipermail/varnish-announce/2013-June/000684.html
CVE ID: CVE-2013-4091 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-17T04:25:49.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html - http://www.digitalsec.net/stuff/explt+advs/Im
es/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html - http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt
CVE ID: CVE-2013-4092 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-17T01:41:45.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive information by leveraging the presence of (1) a session ID in the jsessionid field to secsphLogin.jsp or (2) credentials in the j_password parameter to j_acegi_security_check, and reading (a) web-server access logs, (b) web-server Referer logs, or (c) the browser history. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121861/Im
history. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html - http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt
CVE ID: CVE-2013-4093 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-17T02:42:03.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via (1) a direct request to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr, which reveals the installation path in the s0.filePath field, or (2) a T/keyManagement request to plain/settings.html, which reveals a temporary path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121861/Imperva-
e. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html - http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt
CVE ID: CVE-2013-4094 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-17T02:06:13.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the (1) private_key or (2) public_key parameter in a T/keyManagement request to plain/settings.html, as demonstrated by uploading a Linux ELF file and a shell script. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html - htt
nces: - http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html - http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt
CVE ID: CVE-2013-4095 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-16T22:55:28.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to execute arbitrary commands via a task with a [command].value field in conjunction with an [arguments].value field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html - http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt
CVE ID: CVE-2013-4096 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-16T23:50:27.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOST_NAME field. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt - http://packetstormsecurity.com/files/121862/DS3-Authentication-Server-Command-Execution.html
CVE ID: CVE-2013-4097 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-17T04:09:09.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt - http://packetstormsecurity.com/files/121862/DS3-Authentication-Server-Command-Execution.html
CVE ID: CVE-2013-4098 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-16T20:57:29.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt - http://packetstormsecurity.com/files/121862/DS3-Authentication-Server-Command-Execution.html
CVE ID: CVE-2013-4099 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T16:30:50.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow context-dependent attackers to execute arbitrary code via a crafted parameter to the (1) alAuxiliaryEffectSlotf1, (2) alBuffer3f1, (3) alBufferfv1, (4) alDeleteEffects1, (5) alEffectf1, (6) alEffectfv1, (7) alEffectiv1, (8) alEnable1, (9) alFilterfv1, (10) alFilteriv1, (11) alGenAuxiliaryEffectSlots1, (12) alGenEffects1, (13) alGenFilters1, (14) alGenSources1, (15) alGetAuxiliaryEffectSlotiv1, (16) alGetBuffer3f1, (17) alGetBuffer3i
ects1, (13) alGenFilters1, (14) alGenSources1, (15) alGetAuxiliaryEffectSlotiv1, (16) alGetBuffer3f1, (17) alGetBuffer3i1, (18) alGetBufferf1, (19) alGetBufferiv1, (20) alGetDoublev1, (21) alGetEffectf1, (22) alGetEffectfv1, (23) alGetEffectiv1, (24) alGetEnumValue1, (25) alGetFilteri1, (26) alGetFilteriv1, (27) alGetFloat1, (28) alGetFloatv1, (29) alGetListener3f1, (30) alGetListener3i1, (31) alGetListenerf1, (32) alGetListeneri1, (33) alGetListeneriv1, (34) alGetProcAddress1, (35) alGetProcAddressStatic, (36) alGetSource3f1, (37) alGetSource3i1, (38) alGetSourcef1, (39) alGetSourcefv1, (40) alGetSourcei1, (41) alGetSourceiv1, (42) alGetString1java/lang/String;, (43) alIsAuxiliaryEffectSlot
lGetSourcefv1, (40) alGetSourcei1, (41) alGetSourceiv1, (42) alGetString1java/lang/String;, (43) alIsAuxiliaryEffectSlot1, (44) alIsBuffer1, (45) alIsEffect1, (46) alIsExtensionPresent1, (47) alIsFilter1, (48) alListener3f1, (49) alListener3i1, (50) alListenerf1, (51) alListenerfv1, (52) alListeneri1, (53) alListeneriv1, (54) alSource3f1, (55) alSource3i1, (56) alSourcef1, (57) alSourcefv1, (58) alSourcei1, (59) alSourceiv1, (60) alSourcePause1, (61) alSourcePausev1, (62) alSourcePlay1, (63) alSourcePlayv1, (64) alSourceQueueBuffers1, (65) alSourceRewindv1, (66) alSourceStop1, (67) alSourceStopv1, (68) alSourceUnqueueBuffers1, or (69) alSpeedOfSound1 method in jogamp.openal.ALImpl.dispatch.
p1, (67) alSourceStopv1, (68) alSourceUnqueueBuffers1, or (69) alSpeedOfSound1 method in jogamp.openal.ALImpl.dispatch. Additional Analyst Notes: - CVE Program Container: References: - http://www.fuzzmyapp.com/advisories/FMA-2012-038/FMA-2012-038-EN.xml - http://osvdb.org/96582 - http://www.securityfocus.com/bid/61950 - http://labb.zafena.se/?p=799
CVE ID: CVE-2013-4100 State: PUBLISHED Published: 2019-11-04T14:55:58 Last Updated: 2024-08-06T16:30:50.083Z Vendors: n/a Products: n/a Problem Types: Chat Remote DoS Description: Cryptocat before 2.0.22 has Remote Denial of Service via username Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://vuldb.com/?id.9439 - https://www.securityfocus.com/bid/61094
CVE ID: CVE-2013-4101 State: PUBLISHED Published: 2019-11-04T14:52:09 Last Updated: 2024-08-06T16:30:50.090Z Vendors: n/a Products: n/a Problem Types: HTML Handling Weakness Description: Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61098
CVE ID: CVE-2013-4102 State: PUBLISHED Published: 2019-11-04T14:45:30 Last Updated: 2024-08-06T16:30:50.019Z Vendors: n/a Products: n/a Problem Types: Generator (RNG) Weakness Description: Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://vuldb.com/?id.9443 - https://www.securityfocus.com/bid/61095
CVE ID: CVE-2013-4103 State: PUBLISHED Published: 2019-11-04T14:41:50 Last Updated: 2024-08-06T16:30:49.926Z Vendors: n/a Products: n/a Problem Types: Remote Script Injection Description: Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134252/Cryptocat-Script-Insertion.html - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://packetstormsecurity.com/files/cve/CVE-2013-4103 - https://www.securityfocus.com/bid/61093
CVE ID: CVE-2013-4104 State: PUBLISHED Published: 2019-11-04T15:40:00 Last Updated: 2024-08-06T16:30:49.927Z Vendors: n/a Products: n/a Problem Types: Exchange Poisoning Weakness Description: Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61108 - https://vuldb.com/?id.9436