Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6885 State: PUBLISHED Published: 2013-11-29T02:00:00 Last Updated: 2024-08-06T17:53:45.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://rhn.redhat.com/errata/RHSA-2014-0285.html - http://www.openwall.com/lists/oss-security/2013/12/02/1 - http:/
ml - http://rhn.redhat.com/errata/RHSA-2014-0285.html - http://www.openwall.com/lists/oss-security/2013/12/02/1 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html - http://support.amd.com/TechDocs/51810_16h_00h-0Fh_Rev_Guide.pdf - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123553.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124195.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.zdnet.com/blog/hardware/amd-owns-up-to-cpu-bug/18924 - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124199.html - http://www.securityfocus.com/bid/63983 - http://www.securitytracke
ipermail/package-announce/2013-December/124199.html - http://www.securityfocus.com/bid/63983 - http://www.securitytracker.com/id/1029415 - http://secunia.com/advisories/55840 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://openwall.com/lists/oss-security/2013/11/28/1 - http://www.debian.org/security/2015/dsa-3128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89335 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://lists.dragonflybsd.org/pipermail/kernel/2011-D
ts.opensuse.org/opensuse-security-announce/2014-03/msg00015.html - http://lists.dragonflybsd.org/pipermail/kernel/2011-December/046594.html - https://bugzilla.redhat.com/show_bug.cgi?id=1035823
CVE ID: CVE-2013-6886 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:53:44.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) vncserver, (2) vncserver-x11, or (3) Xvnc helper. Additional Analyst Notes: - CVE Program Container: References: - http://www.realvnc.com/products/vnc/documentation/5.0/release-notes/
CVE ID: CVE-2013-6887 State: PUBLISHED Published: 2014-04-27T20:00:00 Last Updated: 2024-08-06T17:53:45.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57285 - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://seclists.org/oss-sec/2013/q4/412
CVE ID: CVE-2013-6888 State: PUBLISHED Published: 2014-01-07T17:00:00 Last Updated: 2024-08-06T17:53:45.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64656 - http://marc.info/?l=oss-security&m=138900586911271&w=2 - http://www.ubuntu.com/usn/USN-2084-1 - http://secunia.com/advisories/56579 - http://www.debian.org/security/2014/dsa-2836 - http://secunia.com/advisories/56192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90107 - http://anonscm.debian.org/gitweb/?p=col
/advisories/56192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90107 - http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=02c6850d973e3e1246fde72edab27f03d63acc52
CVE ID: CVE-2013-6889 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T17:53:45.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733505 - http://git.gnu.org.ua/gitweb?p=rush.git%3Ba=commit%3Bh=00bdccd429517f12dbf37ab4397ddec3e51a2738
CVE ID: CVE-2013-6890 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T17:53:44.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of service (incorrect block of IP addresses) via crafted login names. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56239 - https://bugzilla.redhat.com/show_bug.cgi?id=1045982 - http://seclists.org/oss-sec/2013/q4/535 - http://www.debian.org/security/2013/dsa-2826
CVE ID: CVE-2013-6891 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T17:53:45.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.mageia.org/MGASA-2014-0021.html - http://www.cups.org/blog.php?L704 - http://www.ubuntu.com/usn/USN-2082-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:015 - http://secunia.com/advisories/56531 - http://www.cups.org/st
/www.mandriva.com/security/advisories?name=MDVSA-2014:015 - http://secunia.com/advisories/56531 - http://www.cups.org/str.php?L4319
CVE ID: CVE-2013-6892 State: PUBLISHED Published: 2015-01-21T18:00:00 Last Updated: 2024-08-06T17:53:45.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/62233 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775682 - http://www.debian.org/security/2015/dsa-3137
CVE ID: CVE-2013-6900 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html - https://support.cybozu.com/ja-jp/article/6153
CVE ID: CVE-2013-6901 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://osvdb.org/100555 - http://jvn.jp/en/jp/JVN23981867/index.html - https://support.cybozu.com/ja-jp/article/6193
CVE ID: CVE-2013-6902 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - https://support.cybozu.com/ja-jp/article/5838 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6903 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - https://support.cybozu.com/ja-jp/article/6165 - http://osvdb.org/100571 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6904 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/6395 - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://osvdb.org/100572 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6905 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - https://support.cybozu.com/ja-jp/article/6195 - http://osvdb.org/100573 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6906 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - https://support.cybozu.com/ja-jp/article/6174 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://osvdb.org/100574 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6907 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html - https://support.cybozu.com/ja-jp/article/6166
CVE ID: CVE-2013-6908 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - https://support.cybozu.com/ja-jp/article/5870 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6909 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a report component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/6384 - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6910 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - https://support.cybozu.com/ja-jp/article/6434 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6911 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - https://support.cybozu.com/ja-jp/article/7158 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://osvdb.org/100561 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6912 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://osvdb.org/100560 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - https://support.cybozu.com/ja-jp/article/6927 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6913 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet Explorer is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://osvdb.org/100559 - https://support.cybozu.com/ja-jp/article/6928 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6914 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/7037 - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6915 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:44.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - https://support.cybozu.com/ja-jp/article/6896 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6916 State: PUBLISHED Published: 2013-12-05T11:00:00 Last Updated: 2024-08-06T17:53:45.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20131202up01.php - http://osvdb.org/100554 - https://support.cybozu.com/ja-jp/article/7157 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113 - http://jvn.jp/en/jp/JVN23981867/index.html
CVE ID: CVE-2013-6918 State: PUBLISHED Published: 2013-11-30T11:00:00Z Last Updated: 2024-09-17T04:18:58.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the Satechi travel router 1.5, when Wi-Fi is used for WAN access, exposes the console without authentication on the WAN IP address regardless of the "Web Management via WAN" setting, which allows remote attackers to bypass intended access restrictions via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0123.html
CVE ID: CVE-2013-6919 State: PUBLISHED Published: 2014-12-27T18:00:00 Last Updated: 2024-08-06T17:53:45.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JamesHeinrich/phpThumb/blob/master/docs/phpthumb.changelog.txt - http://www.rafayhackingarticles.net/2013/11/phpthumb-server-side-request-forgery.html
CVE ID: CVE-2013-6920 State: PUBLISHED Published: 2013-12-07T00:00:00 Last Updated: 2024-08-06T17:53:45.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-338-01 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-742938.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-742938.pdf
CVE ID: CVE-2013-6922 State: PUBLISHED Published: 2014-01-21T16:00:00 Last Updated: 2024-08-06T17:53:44.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts via a crafted request to admin/access_control_user_add.php; (2) modify or (3) delete user accounts; (4) perform a factory reset; (5) perform a device reboot; or (6) add, (7) modify, or (8) delete shares and volumes. Additional Analyst Notes: - CVE Program Container: References: - http://se
(7) modify, or (8) delete shares and volumes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56047 - http://www.exploit-db.com/exploits/30726
CVE ID: CVE-2013-6923 State: PUBLISHED Published: 2014-01-09T15:00:00 Last Updated: 2024-08-06T17:53:45.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname parameter to admin/access_control_user_edit.php or (2) workname parameter to admin/network_workgroup_domain.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90111 - http://www.exploit-db.com/exploits/30727
CVE ID: CVE-2013-6924 State: PUBLISHED Published: 2017-10-11T12:00:00 Last Updated: 2024-08-06T17:53:45.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64655 - http://packetstormsecurity.com/files/124688/Seagate-BlackArmor-NAS-sg2000-2000.1331-Remote-Command-Execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90109
CVE ID: CVE-2013-6925 State: PUBLISHED Published: 2013-12-17T02:00:00 Last Updated: 2024-08-06T17:53:44.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf
CVE ID: CVE-2013-6926 State: PUBLISHED Published: 2013-12-17T02:00:00 Last Updated: 2024-08-06T17:53:45.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a (1) guest or (2) operator account. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-340-01 - http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-324789.pdf
CVE ID: CVE-2013-6927 State: PUBLISHED Published: 2020-02-13T22:51:25 Last Updated: 2024-08-06T17:53:44.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90077
CVE ID: CVE-2013-6929 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:53:45.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN60997973/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000124 - https://support.cybozu.com/ja-jp/article/7889