Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4523 State: PUBLISHED Published: 2013-11-26T02:00:00 Last Updated: 2024-08-06T16:45:15.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-41941 - https://moodle.org/mod/forum/discuss.php?d=244480 - http://openwall.com/lists/oss-security/2013/11/25/1
CVE ID: CVE-2013-4524 State: PUBLISHED Published: 2013-11-26T02:00:00 Last Updated: 2024-08-06T16:45:15.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-41807 - http://openwall.com/lists/oss-security/2013/11/25/1 - https://moodle.org/mod/forum/discuss.php?d=244481
CVE ID: CVE-2013-4525 State: PUBLISHED Published: 2013-11-26T02:00:00 Last Updated: 2024-08-06T16:45:14.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-41820 - http://openwall.com/lists/oss-security/2013/11/25/1 - https://moodle.org/mod/forum/discuss.
HEAD&st=commit&s=MDL-41820 - http://openwall.com/lists/oss-security/2013/11/25/1 - https://moodle.org/mod/forum/discuss.php?d=244482
CVE ID: CVE-2013-4526 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ae2158ad6ce084
ject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ae2158ad6ce0845b2fae2a22aa7f19c0d7a71ce5
CVE ID: CVE-2013-4527 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0927.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=3f1c49e2136fa08ab1ef3183fd55def308829584 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4528 State: REJECTED Published: 2013-12-02T22:00:00 Last Updated: 2013-12-02T21:57:00 Description: No description available.
CVE ID: CVE-2013-4529 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:15.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0927.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4530 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:15.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3
tml - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=d8d0a0bc7e194300e53a346d25fe5724fd588387
CVE ID: CVE-2013-4531 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative value in cpreg_vmstate_array_len in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d2ef4b61fe6d33d2a5dcf100a9b9440de341ad62 - http://lists.fedor
0394.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d2ef4b61fe6d33d2a5dcf100a9b9440de341ad62 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4532 State: PUBLISHED Published: 2020-01-02T15:26:40 Last Updated: 2024-08-06T16:45:14.820Z Vendors: qemu Products: qemu Problem Types: Buffer Overflow Description: Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4532 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4532 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4532 - https://access.redhat.com/security/cve/cve-2013-4532 - http://www.ubuntu.com/usn/USN-2342-1 - https://bug
VE-2013-4532 - https://access.redhat.com/security/cve/cve-2013-4532 - http://www.ubuntu.com/usn/USN-2342-1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739589 - https://github.com/qemu/qemu/commit/2e1198672759eda6e122ff38fcf6df06f27e0fe2
CVE ID: CVE-2013-4533 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=caa881abe0e01f9931125a0977ec33c5343e4aa7 - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http
3Bh=caa881abe0e01f9931125a0977ec33c5343e4aa7 - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4534 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=73d963c0a75cb99c6aaa3f6f25e427aa0b35a02e - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/pac
html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4535 State: PUBLISHED Published: 2020-02-11T15:35:48 Last Updated: 2024-08-06T16:45:14.819Z Vendors: n/a Products: QEMU Problem Types: Integer Signedness Error Description: The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=36cf2a37132c7f01fa9adb5f95f5312b27742fd4 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
cf2a37132c7f01fa9adb5f95f5312b27742fd4 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - https://bugzilla.redhat.com/show_bug.cgi?id=1066401
CVE ID: CVE-2013-4536 State: PUBLISHED Published: 2021-05-28T16:58:49 Last Updated: 2024-08-06T16:45:14.837Z Vendors: n/a Products: qemu Problem Types: CWE-269 Description: An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1066401 - https://security.netapp.com/advisory/ntap-20210727-0002/
CVE ID: CVE-2013-4537 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a9c380db3b8c6af19546a68145c8d1438
package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a9c380db3b8c6af19546a68145c8d1438a09c92b
CVE ID: CVE-2013-4538 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:15.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh
http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ead7a57df37d2187813a121308213f41591bd811 - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4539 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=5193be3be35f29a35bc465036cd64ad60d43385f - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.gnu.org/archive/html/qemu-devel
- http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4540 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html - http://lists.gnu.org/archive/html/
7.html - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html - http://lists.gnu.org/archive/html/qemu-devel/2013-12/msg00394.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=52f91c3723932f8340fe36c8ec8b18a757c37b2b
CVE ID: CVE-2013-4541 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:14.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f8e9895c504149d7048e9fc5eb5cbb34
at.com/errata/RHSA-2014-0744.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f8e9895c504149d7048e9fc5eb5cbb34b16e49a - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4542 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:45:15.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds array access. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=3c3ce981423e0d6c18af82ee62f1850
dhat.com/errata/RHSA-2014-0744.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=3c3ce981423e0d6c18af82ee62f1850c2cda5976 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4543 State: REJECTED Published: 2013-12-02T22:00:00 Last Updated: 2013-12-02T21:57:00 Description: No description available.
CVE ID: CVE-2013-4544 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T16:45:14.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://thread.gmane.org/gmane.comp.emulators.qemu/265562 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8c6c0478996e8f77374e69b6df68655b0b4ba689 - https://bugzilla.redhat
5562 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8c6c0478996e8f77374e69b6df68655b0b4ba689 - https://bugzilla.redhat.com/show_bug.cgi?id=1087513 - http://www.osvdb.org/106013 - http://ubuntu.com/usn/usn-2182-1 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3c99afc779c2c78718a565ad8c5e98de7c2c7484 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f12d048a523780dbda702027d4a91b62af1a08d7 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=9878d173f574df74bde0ff50b2f81009fbee81bb - http://secunia.com/advisories/58191
CVE ID: CVE-2013-4545 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T16:45:14.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c
/technetwork/topics/security/cpujul2015-2367936.html - https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322 - http://curl.haxx.se/docs/adv_20131115.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.debian.org/security/2013/dsa-2798 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00047.html - http://www.ubuntu.com/usn/USN-2048-1 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00053.html
CVE ID: CVE-2013-4546 State: PUBLISHED Published: 2014-05-13T15:00:00 Last Updated: 2024-08-06T16:45:15.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.gitlab.com/2013/11/08/security-vulnerability-in-gitlab-shell/ - http://www.openwall.com/lists/oss-security/2013/11/11/2 - https://gitlab.com/gitlab-org/gitlab-shell/blob/master/CHANGELOG
CVE ID: CVE-2013-4547 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T16:45:15.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55757 - http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00007.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00084.html - http://secunia.com/advisories/55825 - http://secunia.com/advisories/55822 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00119.
om/advisories/55825 - http://secunia.com/advisories/55822 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00119.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00118.html - http://www.debian.org/security/2012/dsa-2802 - http://mailman.nginx.org/pipermail/nginx-announce/2013/000125.html
CVE ID: CVE-2013-4548 State: PUBLISHED Published: 2013-11-08T15:00:00 Last Updated: 2024-08-06T16:45:15.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address. Additional Analyst Notes: - CVE Program Container: References: - http://www.openssh.com/txt/gcmrekey.adv - http://openwall.com/lists/oss-security/2013/11/08/3 - http://marc.info/?l=bugtra
tp://www.openssh.com/txt/gcmrekey.adv - http://openwall.com/lists/oss-security/2013/11/08/3 - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://marc.info/?l=bugtraq&m=141576985122836&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00017.html - http://www.ubuntu.com/usn/USN-2014-1
CVE ID: CVE-2013-4549 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T16:45:14.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.qt-project.org/pipermail/announce/2013-December/000036.html - http://secunia.com/advisories/56166 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00104.html - http://secunia.com/advisories/56008 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00085.html - https://codereview.qt
/secunia.com/advisories/56008 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00085.html - https://codereview.qt-project.org/#change%2C71010 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00106.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00044.html - http://blog.qt.digia.com/blog/2014/04/24/qt-4-8-6-released/ - http://www.ubuntu.com/usn/USN-2057-1 - https://codereview.qt-project.org/#change%2C71368 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00047.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132395.html
CVE ID: CVE-2013-4550 State: PUBLISHED Published: 2013-12-24T18:00:00 Last Updated: 2024-08-06T16:45:14.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote attackers to write to other sockets and have an unspecified impact via a failed SSL handshake, a different vulnerability than CVE-2011-5268. NOTE: some sources originally mapped this CVE to two different types of issues; this CVE has since been SPLIT, producing CVE-2011-5268. Additional Analyst Notes: - CVE Program Container: Refer
issues; this CVE has since been SPLIT, producing CVE-2011-5268. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/122274.html - https://projects.duckcorp.org/issues/261 - https://projects.duckcorp.org/versions/13 - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/121868.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/122278.html - http://www.openwall.com/lists/oss-security/2014/01/02/9