Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3520 State: PUBLISHED Published: 2013-06-17T01:00:00Z Last Updated: 2024-09-16T19:41:21.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2013-0008.html
CVE ID: CVE-2013-3521 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3522 State: PUBLISHED Published: 2013-05-10T21:00:00Z Last Updated: 2024-09-16T18:55:19.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24882 - http://www.osvdb.org/92031
CVE ID: CVE-2013-3523 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page&id= in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84168 - http://freecode.com/projects/this/releases/353516 - http://osvdb.org/91976 - http://xforce.iss.net/xforce/xfdb/84168
CVE ID: CVE-2013-3524 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83423 - https://github.com/DavidJClark/phpVMS-PopUpNews/commit/5cadf9cbf4d0872a879666ea594be356fad5897e - https://github.com/DavidJClark/phpVMS-PopUpNews/commit/ef
MS-PopUpNews/commit/5cadf9cbf4d0872a879666ea594be356fad5897e - https://github.com/DavidJClark/phpVMS-PopUpNews/commit/efaffa04ef87db1722d69ac7bfc07be71ce2dccf - http://secunia.com/advisories/53033 - http://www.osvdb.org/92328 - http://www.exploit-db.com/exploits/24960 - http://www.securityfocus.com/bid/59057
CVE ID: CVE-2013-3525 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter. NOTE: the vendor disputes this issue, stating "We were unable to replicate it, and the individual that reported it retracted their report," and "we had verified that the claimed exploit did not function according to the author's claims. Additional Analyst Notes: - CVE Program Container: References: - http://cxsecurity.com/issue/WLB-2013040083 - http://osvd
dditional Analyst Notes: - CVE Program Container: References: - http://cxsecurity.com/issue/WLB-2013040083 - http://osvdb.org/92265 - http://blog.bestpractical.com/2013/04/on-our-security-policies.html - http://www.securityfocus.com/bid/59022 - http://packetstormsecurity.com/files/121245/RT-Request-Tracker-4.0.10-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83375
CVE ID: CVE-2013-3526 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:55.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92197 - http://packetstormsecurity.com/files/121167/WordPress-Traffic-Analyzer-Cross-Site-Scripting.html - http://www.securityfocus.com/bid/58948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83311 - http://secunia.c
- http://www.securityfocus.com/bid/58948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83311 - http://secunia.com/advisories/52929
CVE ID: CVE-2013-3527 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to (1) entry/signin or (2) entry/passwordrequest. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52825 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0068.html - http://osvdb.org/92109 - http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7 - http://packetstormsecurity.com/fi
g/92109 - http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7 - http://packetstormsecurity.com/files/121151/Vanilla-Forums-2.0.18.4-SQL-Injection.html - http://seclists.org/fulldisclosure/2013/Apr/57 - http://osvdb.org/92110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83289 - https://github.com/vanillaforums/Garden/commit/83078591bc4d263e77d2a2ca283100997755290d - http://mfs-enterprise.com/wordpress/2013/04/05/vanilla-forums-2-0-18-sql-injection-insert-arbitrary-user-dump-usertable/ - http://www.securityfocus.com/bid/58922 - http://www.exploit-db.com/exploits/24927
CVE ID: CVE-2013-3528 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection." Additional Analyst Notes: - CVE Program Container: References: - http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7 - https://github.com/vanillaforums/Garden/commit/b9a10dabb15c697347bfa7baef69a6e211b2f804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84167
CVE ID: CVE-2013-3529 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:55.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) photo-message, or (3) youtube-message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Mar/282 - http://plugins.trac.wordpress.org/changeset?old_path=%2Fwp-funeral-press&old=690038&new_path=%2Fwp-funeral-press&new=690038 - http://packetstormsecurity.c
changeset?old_path=%2Fwp-funeral-press&old=690038&new_path=%2Fwp-funeral-press&new=690038 - http://packetstormsecurity.com/files/121030/WordPress-FuneralPress-1.1.6-Cross-Site-Scripting.html - http://secunia.com/advisories/52809 - http://www.securityfocus.com/bid/58790 - http://wordpress.org/extend/plugins/wp-funeral-press/changelog/ - http://www.exploit-db.com/exploits/24914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83188
CVE ID: CVE-2013-3530 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the playlist_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83345 - http://packetstormsecurity.com/files/121204/WordPress-Spiffy-XSPF-Player-0.1-SQL-Injection.html - http://osvdb.org/92258 - http://www.securityfocus.com/bid/58976
CVE ID: CVE-2013-3531 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlist_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83266 - http://packetstormsecurity.com/files/121091/Radio-CMS-2.2-SQL-Injection.html - http://osvdb.org/92088 - http://www.securityfocus.com/bid/58884
CVE ID: CVE-2013-3532 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98332 - http://osvdb.org/92264 - http://packetstormsecurity.com/files/121250/WordPress-Spider-Video-Player-2.1-SQL-Injection.html - http://www.securityfocus.com/bid/70763 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
er-2.1-SQL-Injection.html - http://www.securityfocus.com/bid/70763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83374 - http://www.securityfocus.com/bid/59021 - http://packetstormsecurity.com/files/128851/WordPress-HTML5-Flash-Player-SQL-Injection.html
CVE ID: CVE-2013-3533 State: PUBLISHED Published: 2013-05-10T21:00:00 Last Updated: 2024-08-06T16:14:56.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Virtual Access Monitor 3.10.17 and earlier allow attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nccgroup.com/media/244196/patch_notificatio_virtual_access_monitor_multiple_sql_injection_vulnerabilities.pdf - http://archives.neohapsis.com/archives/bugtraq/2013-04/0011.html - http://www.securityfocus.com/bid/58816 - http://packetstormsecurity.com/files/121051/Virtual-Access-Monitor-SQL-Injec
- http://www.securityfocus.com/bid/58816 - http://packetstormsecurity.com/files/121051/Virtual-Access-Monitor-SQL-Injection.html - http://osvdb.org/91887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83179 - http://secunia.com/advisories/52801
CVE ID: CVE-2013-3534 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T16:14:56.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53050 - http://www.securityfocus.com/bid/59266 - http://www.algisinfo.com/en/home-bottom/41-xss-in-aicontactsafe.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83631
CVE ID: CVE-2013-3535 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T16:14:56.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_email, (2) header_title, (3) site_title parameter to admin/settings; (4) recaptcha_private or (5) recaptcha_public parameter to admin/captcha_settings; (6) fb_appid, (7) fp_secret, (8) tw_consumer_key, or (9) tw_consumer_secret parameter to admin/social_settings; (10) slug parameter to admin/gallery/save_item_settings; or (11) item_link parameter to admin/edit_menu_item
l_settings; (10) slug parameter to admin/gallery/save_item_settings; or (11) item_link parameter to admin/edit_menu_item_ajax. NOTE: this issue might be resultant from CSRF. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121303/CMSLogik-1.2.1-Cross-Site-Scripting.html - http://www.exploit-db.com/exploits/24959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83429 - http://osvdb.org/92326 - http://osvdb.org/92323 - http://osvdb.org/92324 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5136.php - http://osvdb.org/92322 - http://cxsecurity.com/issue/WLB-2013040105 - http://osvdb.org/92325
CVE ID: CVE-2013-3536 State: PUBLISHED Published: 2013-05-13T23:00:00Z Last Updated: 2024-09-17T04:10:33.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24934 - http://www.osvdb.org/91980 - http://packetstormsecurity.com/files/121046/WHMCS-Grouppay-1.5-SQL-Injection.html - http://secunia.com/advisories/52804
CVE ID: CVE-2013-3537 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T16:14:56.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_post or (2) pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92318 - http://www.securityfocus.com/bid/59069 - http://packetstormsecurity.com/files/121290/Todoo-Forum-2.0-Cross-Site-Scripting-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83599
CVE ID: CVE-2013-3538 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T16:14:56.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id_post or (2) pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/92319 - http://www.securityfocus.com/bid/59069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83600 - http://packetstormsecurity.com/files/121290/Todoo-Forum-2.0-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2013-3539 State: PUBLISHED Published: 2013-10-01T19:00:00Z Last Updated: 2024-09-16T16:54:12.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84
CVE ID: CVE-2013-3540 State: PUBLISHED Published: 2013-10-04T23:00:00Z Last Updated: 2024-09-16T18:29:19.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84
CVE ID: CVE-2013-3541 State: PUBLISHED Published: 2013-10-04T23:00:00Z Last Updated: 2024-09-17T02:10:39.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. (dot dot) in the READ.filePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84
CVE ID: CVE-2013-3542 State: PUBLISHED Published: 2019-12-11T18:07:23 Last Updated: 2024-08-06T16:14:56.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84 - https://www.youtube.com/watch?v=XkCBs4lenhI
CVE ID: CVE-2013-3543 State: PUBLISHED Published: 2013-10-04T23:00:00Z Last Updated: 2024-09-17T01:12:15.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote attackers to create or overwrite arbitrary files via a file path to the (1) StartRecord, (2) SaveCurrentImage, or (3) StartRecordMedia methods. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84
CVE ID: CVE-2013-3544 State: REJECTED Published: 2013-08-09T19:00:00Z Last Updated: 2024-09-17T02:15:50.169Z Description: No description available.
CVE ID: CVE-2013-3550 State: REJECTED Published: 2013-12-01T17:00:00 Last Updated: 2013-12-01T17:26:34 Description: No description available.
CVE ID: CVE-2013-3551 State: PUBLISHED Published: 2020-02-21T15:35:41 Last Updated: 2024-08-06T16:14:56.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7, and OTRS ITSM 3.0.x before 3.0.8, 3.1.x before 3.1.9, and 3.2.x before 3.2.5 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2013-0196.html - https://bugs.gentoo.org/sh
s: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2013-0196.html - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-3551
CVE ID: CVE-2013-3552 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T16:14:56.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-006
CVE ID: CVE-2013-3553 State: PUBLISHED Published: 2018-02-08T23:00:00 Last Updated: 2024-08-06T16:14:56.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/vulnerabilityresearchadvisories/2013/msvr13-007
CVE ID: CVE-2013-3555 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related to ciphers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://secunia.com/advisories/54425 - http://www.wireshark.org/security/wnpa-sec-2013-24.html - http://anon
00048.html - http://secunia.com/advisories/54425 - http://www.wireshark.org/security/wnpa-sec-2013-24.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gtpv2.c?r1=48393&r2=48392&pathrev=48393 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16779 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.debian.org/security/2013/dsa-2700 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48393 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8493 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://lists.opensuse.
ugzilla/show_bug.cgi?id=8493 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-3556 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an incorrect pointer dereference during a comparison, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://secunia.com/advisories/54425 - http://www.wireshark.org/security/wnpa-sec-2013-25.
pdates/2013-06/msg00048.html - http://secunia.com/advisories/54425 - http://www.wireshark.org/security/wnpa-sec-2013-25.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8599 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - https://www.wireshark.org/docs/relnotes/wireshark-1.6.15.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/reassemble.c?r1=48943&r2=48942&pathrev=48943 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48943 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-3557 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ber.c?r1=48944&r2=48943&pathrev=48944 - http://secunia.com/advisories/53425 - http://lists.opensuse.org
issectors/packet-ber.c?r1=48944&r2=48943&pathrev=48944 - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16521 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48944 - http://www.wireshark.org/security/wnpa-sec-2013-25.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8599 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - https://www.wireshark.org/docs/relnotes/wir
id=8599 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - https://www.wireshark.org/docs/relnotes/wireshark-1.6.15.html - http://www.debian.org/security/2013/dsa-2700 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:172 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html