Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3268 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T16:07:37.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7010166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83761 - https://bugzilla.novell.com/show_bug.cgi?id=807429 - http://www.securityfocus.com/bid/59450
CVE ID: CVE-2013-3269 State: PUBLISHED Published: 2013-04-25T10:00:00 Last Updated: 2024-08-06T16:07:36.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0 allows remote attackers to hijack the authentication of arbitrary users for requests that change mobile passwords, a different vulnerability than CVE-2013-2305. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20130415up11.php - http://jvn.jp/en/jp/JVN06251813/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83812 - http://jvn.jp/en/jp/JVN06251813/374951/index.ht
ndex.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83812 - http://jvn.jp/en/jp/JVN06251813/374951/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000034
CVE ID: CVE-2013-3270 State: PUBLISHED Published: 2013-05-19T10:00:00Z Last Updated: 2024-09-17T00:26:45.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-05/0063.html
CVE ID: CVE-2013-3271 State: PUBLISHED Published: 2013-08-28T10:00:00Z Last Updated: 2024-09-17T02:57:16.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-08/0123.html
CVE ID: CVE-2013-3272 State: PUBLISHED Published: 2013-07-08T20:00:00Z Last Updated: 2024-09-16T22:44:57.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0045.html
CVE ID: CVE-2013-3273 State: PUBLISHED Published: 2013-07-08T20:00:00Z Last Updated: 2024-09-16T20:26:18.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0046.html
CVE ID: CVE-2013-3274 State: PUBLISHED Published: 2013-07-18T22:00:00Z Last Updated: 2024-09-17T01:10:51.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html
CVE ID: CVE-2013-3275 State: PUBLISHED Published: 2013-07-18T22:00:00Z Last Updated: 2024-09-17T01:35:55.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilities." Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html
CVE ID: CVE-2013-3276 State: PUBLISHED Published: 2013-09-05T10:00:00Z Last Updated: 2024-09-17T00:31:45.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Archer GRC 5.x before 5.4 allows remote authenticated users to bypass intended access restrictions and complete a login by leveraging a deactivated account. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0013.html
CVE ID: CVE-2013-3277 State: PUBLISHED Published: 2013-09-05T10:00:00Z Last Updated: 2024-09-17T02:41:12.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0013.html
CVE ID: CVE-2013-3278 State: PUBLISHED Published: 2013-10-01T01:00:00Z Last Updated: 2024-09-16T18:39:25.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0135.html
CVE ID: CVE-2013-3279 State: PUBLISHED Published: 2013-10-16T20:00:00Z Last Updated: 2024-09-16T22:20:11.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Atmos before 2.1.4 has a blank password for the PostgreSQL account, which allows remote attackers to obtain sensitive administrative information via a database-server connection. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-10/0019.html
CVE ID: CVE-2013-3280 State: PUBLISHED Published: 2013-10-25T01:00:00Z Last Updated: 2024-09-17T01:56:01.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-10/0115.html
CVE ID: CVE-2013-3281 State: PUBLISHED Published: 2013-11-06T11:00:00 Last Updated: 2024-08-06T16:07:37.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6, Documentum Administrator before 6.7 SP2 P07, and Documentum Capital Projects before 1.8 P01 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter in a URL. Additional Analyst Notes: - CVE Program Cont
rs to inject arbitrary web script or HTML via a crafted parameter in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/466876 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0018.html
CVE ID: CVE-2013-3282 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-3283 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-3284 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-3285 State: PUBLISHED Published: 2013-11-02T19:00:00Z Last Updated: 2024-09-17T01:41:22.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrator passwords via (1) unspecified NMC audit reports or (2) requests to RAP resources. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-10/0150.html - http://www.securityfocus.com/bid/63402 - http://www.securitytracker.com/id/1029265 - http://osvdb.org/99067
CVE ID: CVE-2013-3286 State: PUBLISHED Published: 2013-11-06T11:00:00Z Last Updated: 2024-09-16T19:51:13.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom before 7.4.4 P11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0019.html
CVE ID: CVE-2013-3287 State: PUBLISHED Published: 2013-11-02T19:00:00Z Last Updated: 2024-09-17T01:45:45.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-10/0155.html - http://www.securityfocus.com/bid/63425
CVE ID: CVE-2013-3288 State: PUBLISHED Published: 2013-11-22T17:00:00 Last Updated: 2024-08-06T16:07:37.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html
CVE ID: CVE-2013-3289 State: REJECTED Published: 2014-01-02T11:00:00 Last Updated: 2014-01-02T05:57:01 Description: No description available.
CVE ID: CVE-2013-3294 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T16:07:37.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the (1) src or (2) username parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2013/May/57 - http://osvdb.org/93447 - http://packetstormsecurity.com/files/121643/Exponent-CMS-2.2.0-Beta-3-LFI-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84300 - https://www.htbridge.com/advisory/HTB23154
CVE ID: CVE-2013-3295 State: PUBLISHED Published: 2014-12-30T02:00:00 Last Updated: 2024-08-06T16:07:37.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23154
CVE ID: CVE-2013-3299 State: PUBLISHED Published: 2013-07-06T10:00:00Z Last Updated: 2024-09-17T00:22:06.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumption or application crash) via an HTML document containing JavaScript code that constructs a long string. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2013/Jul/18
CVE ID: CVE-2013-3300 State: PUBLISHED Published: 2013-07-26T17:00:00Z Last Updated: 2024-09-17T02:52:03.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character. Additional Analyst Notes: - CVE Program Container: References: - http://blog.addepar.com/2013/07/an-atypical-web-vulnerability.html - https://github.com/lift/framework/commit/099d9c86cf6d81f4953957add478ab699946e601
CVE ID: CVE-2013-3301 State: PUBLISHED Published: 2013-04-29T10:00:00 Last Updated: 2024-08-06T16:07:37.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for write access to the (1) set_ftrace_pid or (2) set_graph_function file, and then making an lseek system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.8 - http://www.ubuntu.com/usn/USN-1834-1 - https://github.co
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.8 - http://www.ubuntu.com/usn/USN-1834-1 - https://github.com/torvalds/linux/commit/6a76f8c0ab19f215af2a3442870eeb5f0e81998d - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://www.openwall.com/lists/oss-security/2013/04/15/1 - http://www.ubuntu.com/usn/USN-1835-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a76f8c0ab19f215af2a3442870eeb5f0e81998d - http://www.ubuntu.com/usn/USN-1838-1 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1836-1 - https://bugzilla.red
/lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1836-1 - https://bugzilla.redhat.com/show_bug.cgi?id=952197
CVE ID: CVE-2013-3302 State: PUBLISHED Published: 2013-04-29T10:00:00 Last Updated: 2024-08-06T16:07:36.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the smb_send_rqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors involving a reconnection event. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/ea702b80e0bbb2448e201472127288beb82ca2fe - http://www.securityfocus.com/bid/59064 - http://www.openwall.com/lists/oss-security/2013/04/15/2 - http://git.ke
ca2fe - http://www.securityfocus.com/bid/59064 - http://www.openwall.com/lists/oss-security/2013/04/15/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea702b80e0bbb2448e201472127288beb82ca2fe - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 - https://bugzilla.redhat.com/show_bug.cgi?id=952260
CVE ID: CVE-2013-3304 State: PUBLISHED Published: 2014-10-30T14:00:00 Last Updated: 2024-08-06T16:07:37.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/35056 - https://www.xlabs.com.br/blog/?p=50 - http://www.securityfocus.com/bid/70760
CVE ID: CVE-2013-3307 State: PUBLISHED Published: 2025-07-11T00:00:00.000Z Last Updated: 2025-07-11T19:32:03.983Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Linksys Products: E1000, E1200, E3200 Problem Types: CWE-78 Description: Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20140421001918/https://www.trustwave.com/spiderlabs/advisories/TWSL2013-008.txt
CVE ID: CVE-2013-3311 State: PUBLISHED Published: 2019-11-21T19:39:31 Last Updated: 2024-08-06T16:07:37.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. (dot dot) in the URL of an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera - http://www.exploit-db.com/exploits/27878 - http://www.securityfocus.com/bid/61970
CVE ID: CVE-2013-3312 State: PUBLISHED Published: 2019-11-21T19:39:28 Last Updated: 2024-08-06T16:07:37.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) passwords or (2) firewall configuration, as demonstrated by a request to set_users.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera - https://www.exploit-db.com/exploits/27878
CVE ID: CVE-2013-3313 State: PUBLISHED Published: 2019-11-21T19:39:23 Last Updated: 2024-08-06T16:07:36.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when leveraging the directory traversal vulnerability in CVE-2013-3311. Additional Analyst Notes: - CVE Program Container: References: - http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera - http://www.securityfocus.com/bid/61971 - https://w
lnerability-management/vulnerability-who-is-watching-your-ip-camera - http://www.securityfocus.com/bid/61971 - https://www.exploit-db.com/exploits/27878
CVE ID: CVE-2013-3314 State: PUBLISHED Published: 2019-11-21T19:39:18 Last Updated: 2024-08-06T16:07:37.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2) firmware versions (ui and system), timestamp, serial number, p2p port number, and wifi status via a request to get_status.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera - http://www.exploit-db.com/exploits/27878 - http://www.securityfocus.com/bid/61969
CVE ID: CVE-2013-3315 State: PUBLISHED Published: 2013-05-31T21:00:00Z Last Updated: 2024-09-17T01:46:18.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role before executing a command, which allows authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories/silver-mobile-advisory_20130508.jsp - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/multimedia/silver-mobile-advisory-2013-05-08_tcm8-18595.txt
CVE ID: CVE-2013-3316 State: PUBLISHED Published: 2020-01-29T21:15:44 Last Updated: 2024-08-06T16:07:37.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg". Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24916/
CVE ID: CVE-2013-3317 State: PUBLISHED Published: 2020-01-29T21:18:35 Last Updated: 2024-08-06T16:07:37.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak key. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24916/
CVE ID: CVE-2013-3318 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-3319 State: PUBLISHED Published: 2013-08-16T17:00:00 Last Updated: 2024-08-06T16:07:37.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1816536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85905 - http://scn.sap.com/docs/DOC-8218 - http://labs.integrity.pt/advisories/cve-2013-3319/ - http://secunia.com/advisories/54277
CVE ID: CVE-2013-3320 State: PUBLISHED Published: 2020-01-29T21:34:38 Last Updated: 2024-08-06T16:07:37.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84060
CVE ID: CVE-2013-3321 State: PUBLISHED Published: 2020-01-29T21:40:44 Last Updated: 2024-08-06T16:07:37.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84062 - https://www.securityfocus.com/archive/1/526552
CVE ID: CVE-2013-3322 State: PUBLISHED Published: 2020-01-31T13:40:02 Last Updated: 2024-08-06T16:07:37.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/archive/1/526552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84063