Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6305 State: PUBLISHED Published: 2014-01-21T15:00:00 Last Updated: 2024-08-06T17:39:01.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88536 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1020528
CVE ID: CVE-2013-6306 State: PUBLISHED Published: 2014-08-22T17:00:00 Last Updated: 2024-08-06T17:39:00.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88555 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021104
CVE ID: CVE-2013-6307 State: PUBLISHED Published: 2013-11-29T15:00:00 Last Updated: 2024-08-06T17:39:00.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88556 - http://www-01.ibm.com/support/docview.wss?uid=swg21656875
CVE ID: CVE-2013-6308 State: PUBLISHED Published: 2014-06-28T00:00:00 Last Updated: 2024-08-06T17:39:01.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88558
CVE ID: CVE-2013-6309 State: PUBLISHED Published: 2014-06-28T00:00:00 Last Updated: 2024-08-06T17:39:00.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, or conduct transactions, via an unspecified link injection. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88559
CVE ID: CVE-2013-6310 State: PUBLISHED Published: 2014-06-28T00:00:00 Last Updated: 2024-08-06T17:39:01.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88560
CVE ID: CVE-2013-6311 State: PUBLISHED Published: 2014-06-28T00:00:00 Last Updated: 2024-08-06T17:38:59.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88561 - http://www-01.ibm.com/support/docview.wss?uid=swg21676688
CVE ID: CVE-2013-6312 State: PUBLISHED Published: 2013-11-22T17:00:00 Last Updated: 2024-08-06T17:39:01.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before 8.5.1 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21655814 - http://www-01.ibm.com/support/docview.wss?uid=swg21655815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88593
CVE ID: CVE-2013-6314 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T17:39:01.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88595 - http://www.securityfocus.com/bid/65922 - http://www-01.ibm.com/support/docview.wss?uid=swg21662911
CVE ID: CVE-2013-6315 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T17:39:01.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 do not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21662911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88596
CVE ID: CVE-2013-6316 State: PUBLISHED Published: 2013-12-22T15:00:00 Last Updated: 2024-08-06T17:39:00.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not properly handle content-selection changes during Taxonomy component rendering, which allows remote attackers to obtain sensitive property information in opportunistic circumstances by leveraging an error in a Web Content Manager (WCM) context processor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88597 - http://osvdb.org/1012
p://www.securityfocus.com/bid/64492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88597 - http://osvdb.org/101270 - http://www-01.ibm.com/support/docview.wss?uid=swg21660011 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI04897
CVE ID: CVE-2013-6318 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:01.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88599 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6319 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:00.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to bypass intended access restrictions and read content via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21666110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88602
CVE ID: CVE-2013-6320 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:01.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
3-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88603 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6321 State: PUBLISHED Published: 2014-01-10T11:00:00 Last Updated: 2024-08-06T17:39:01.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101856 - http://www.ibm.com/connections/blogs/PSIRT/entry/security
CVE Program Container: References: - http://osvdb.org/101856 - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_sql_injection_vulnerability_cve_2013_6321_and_access_control_vulnerability_cve_2013_6334 - http://www.securityfocus.com/bid/64749
CVE ID: CVE-2013-6322 State: PUBLISHED Published: 2013-11-28T02:00:00 Last Updated: 2024-08-06T17:39:00.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC97745 - http://www-01.ibm.com/support/docview.wss?uid=swg21656906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88902
CVE ID: CVE-2013-6323 State: PUBLISHED Published: 2014-05-01T17:00:00 Last Updated: 2024-08-06T17:39:01.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://www.securityfocus.com/bid/67720 - https://exchange.xforce.ibmcloud.com/vuln
support/docview.wss?uid=swg21676092 - http://www.securityfocus.com/bid/67720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88903 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI04777 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI04880 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2013-6325 State: PUBLISHED Published: 2014-01-16T20:00:00 Last Updated: 2024-08-06T17:39:00.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service (resource consumption) via a crafted request to a web services endpoint. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21661323 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM99450 - http://www-01.ibm.com/support/docview.wss?uid=swg21661325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88906 -
http://www-01.ibm.com/support/docview.wss?uid=swg21661325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88906 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554
CVE ID: CVE-2013-6327 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T17:39:01.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4.0.0 iFix 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross-frame scripting" issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88908 - http://www-01.ibm.com/support/docview.wss?uid=swg21659907
CVE ID: CVE-2013-6328 State: PUBLISHED Published: 2013-12-22T15:00:00 Last Updated: 2024-08-06T17:39:01.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x before 8.0.0.1 CF09 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64495 - http://osvdb.org/101269 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM96345 - http://www-01.i
us.com/bid/64495 - http://osvdb.org/101269 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM96345 - http://www-01.ibm.com/support/docview.wss?uid=swg21660011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88909
CVE ID: CVE-2013-6329 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T17:39:00.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://www-01.ibm.com/support/docview.wss?uid=swg21659716 - http://secunia.com/advisories/56058 - http://www-01.ibm.com/support/docview.wss?uid=swg21659548 - http://www-01.ibm.com/suppor
/secunia.com/advisories/56058 - http://www-01.ibm.com/support/docview.wss?uid=swg21659548 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88939 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554 - http://www-01.ibm.com/support/docview.wss?uid=swg21659837
CVE ID: CVE-2013-6330 State: PUBLISHED Published: 2014-01-16T20:00:00 Last Updated: 2024-08-06T17:39:01.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21661323 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM98624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88905
CVE ID: CVE-2013-6331 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:01.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6302. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89022 - http://www-01.ibm.com/support/docview.wss?uid=swg2166
es: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89022 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6332 State: PUBLISHED Published: 2014-02-06T23:00:00 Last Updated: 2024-08-06T17:39:00.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21663820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89023
CVE ID: CVE-2013-6333 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:00.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6320. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
3-6320. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89024 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6334 State: PUBLISHED Published: 2014-01-10T11:00:00 Last Updated: 2024-08-06T17:38:59.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5 and earlier and 6.0.2, and Global Retention Policy and Schedule Management 6.0.1.5 and earlier and 6.0.2 in IBM Atlas Suite (aka Atlas Policy Suite) do not properly validate sessions, which allows remote attackers to bypass intended access restrictions, and visit PolicyAtlas/ResponseDraftServlet (aka the Compliance Questionnaire Save Draft servlet), via unspecified vectors. Additional Analyst Notes: - CVE Pr
rvlet (aka the Compliance Questionnaire Save Draft servlet), via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_atlas_suite_atlas_policy_suite_sql_injection_vulnerability_cve_2013_6321_and_access_control_vulnerability_cve_2013_6334 - http://osvdb.org/show/osvdb/101855 - http://www.securityfocus.com/bid/64751
CVE ID: CVE-2013-6335 State: PUBLISHED Published: 2014-08-26T10:00:00 Last Updated: 2024-08-06T17:39:00.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=s
ations. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21680453 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC96095 - http://secunia.com/advisories/60482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89054
CVE ID: CVE-2013-6336 State: PUBLISHED Published: 2013-11-04T15:00:00 Last Updated: 2024-08-06T17:39:01.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-11/msg00027.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee802154.c?r1=52036&r2=52035&pathrev=52
g00027.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee802154.c?r1=52036&r2=52035&pathrev=52036 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=52036 - http://www.debian.org/security/2013/dsa-2792 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00026.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19193 - http://www.wireshark.org/security/wnpa-sec-2013-61.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9139 - http://rhn.redhat.com/errata/RHSA-2014-0342.html
CVE ID: CVE-2013-6337 State: PUBLISHED Published: 2013-11-04T15:00:00 Last Updated: 2024-08-06T17:39:00.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-11/msg00027.html - http://www.wireshark.org/security/wnpa-sec-2013-62.html - http://www.debian.org/security/2013/dsa-2792 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19329 -
/security/2013/dsa-2792 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19329 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00026.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9168 - http://rhn.redhat.com/errata/RHSA-2014-0342.html
CVE ID: CVE-2013-6338 State: PUBLISHED Published: 2013-11-04T15:00:00 Last Updated: 2024-08-06T17:39:01.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-11/msg00027.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=52354&r2=52353&pathrev=52354 - http
027.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=52354&r2=52353&pathrev=52354 - http://www.debian.org/security/2013/dsa-2792 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=52354 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00026.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9228 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19145 - http://rhn.redhat.com/errata/RHSA-2014-0342.html - http://www.wireshark.org/security/wnpa-sec-2013-63.html
CVE ID: CVE-2013-6339 State: PUBLISHED Published: 2013-11-04T15:00:00 Last Updated: 2024-08-06T17:39:00.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-11/msg00027.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=52463 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=52458 - https://bugs.wireshark.org/b