Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2058 State: PUBLISHED Published: 2013-11-04T11:00:00Z Last Updated: 2024-08-06T15:20:37.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The host_start function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service (system crash) by sending a large amount of network traffic through a USB/Ethernet adapter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/929473ea05db455ad88cdc081f2adc556b8dc48f - https://bugzilla.redhat.com/show_bug.cgi?id=959210 - http://git.kernel.org/?p=linux/kernel
55ad88cdc081f2adc556b8dc48f - https://bugzilla.redhat.com/show_bug.cgi?id=959210 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=929473ea05db455ad88cdc081f2adc556b8dc48f - http://www.openwall.com/lists/oss-security/2013/05/05/2 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.4
CVE ID: CVE-2013-2059 State: PUBLISHED Published: 2013-05-21T18:00:00 Last Updated: 2024-08-06T15:20:37.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-06/msg00085.html - http://osvdb.org/93134 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html - http://secunia.com/advis
db.org/93134 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html - http://secunia.com/advisories/53326 - http://www.openwall.com/lists/oss-security/2013/05/09/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84135 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.html - https://bugs.launchpad.net/keystone/+bug/1166670 - http://secunia.com/advisories/53339 - http://www.securityfocus.com/bid/59787 - http://www.openwall.com/lists/oss-security/2013/05/09/4
CVE ID: CVE-2013-2060 State: PUBLISHED Published: 2020-01-28T15:57:58 Last Updated: 2024-08-06T15:20:37.415Z Vendors: Red Hat Products: OpenShift Origin Problem Types: Metacharacters Description: The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=960363 - http://www.openwall.com/lists/oss-security/2013/05/07/1 - http://www.securityfocus.com/bid/59687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84075
CVE ID: CVE-2013-2061 State: PUBLISHED Published: 2013-11-15T18:16:00 Last Updated: 2024-08-06T15:20:37.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the CBC mode cipher. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105568.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105609.html - http://
announce/2013-May/105568.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105609.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00012.html - https://bugzilla.redhat.com/show_bug.cgi?id=960192 - http://www.openwall.com/lists/oss-security/2013/05/06/6 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:167 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00016.html - https://bugs.gentoo.org/show_bug.cgi?id=468756 - https://github.com/OpenVPN/openvpn/commit/11d21349a4e7e38a025849479b36ace7c2eec2ee - https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-f375aa67cc
CVE ID: CVE-2013-2062 State: PUBLISHED Published: 2013-06-15T19:00:00 Last Updated: 2024-08-06T15:20:37.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XpGetAttributes, (2) XpGetOneAttribute, (3) XpGetPrinterList, and (4) XpQueryScreens functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-06/msg00170.html - http://www.ubuntu.com/usn/USN-1861-1 - http://www.debian.org/security/2013/dsa-2685 - http://www.openwall.com/lists/oss-security/2
.ubuntu.com/usn/USN-1861-1 - http://www.debian.org/security/2013/dsa-2685 - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2063 State: PUBLISHED Published: 2013-06-15T19:00:00 Last Updated: 2024-08-06T15:20:37.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106886.html - http://www.ubuntu.com/usn/USN-1866-1 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00160.html - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.debian.org/security/
pdates/2013-06/msg00160.html - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.debian.org/security/2013/dsa-2689 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2064 State: PUBLISHED Published: 2013-06-15T19:00:00 Last Updated: 2024-08-06T15:20:37.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2686 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106752.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00137.html - http://www.u
/package-announce/2013-May/106752.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00137.html - http://www.ubuntu.com/usn/USN-1855-1 - http://www.securityfocus.com/bid/60148 - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2065 State: PUBLISHED Published: 2013-11-02T19:00:00 Last Updated: 2024-08-06T15:20:37.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2013-2065 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107064.html - http://www.ubuntu.com/usn/USN-2035-1 - https://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-
3-May/107064.html - http://www.ubuntu.com/usn/USN-2035-1 - https://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107098.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00057.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107120.html
CVE ID: CVE-2013-2066 State: PUBLISHED Published: 2013-06-15T20:00:00 Last Updated: 2024-08-06T15:27:39.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106889.html - http://www.ubuntu.com/usn/USN-1867-1 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html - http://www.debian.org/security/2013/dsa-2674 - http://www.openwall.
pensuse.org/opensuse-updates/2013-06/msg00140.html - http://www.debian.org/security/2013/dsa-2674 - http://www.openwall.com/lists/oss-security/2013/05/23/3 - http://www.x.org/wiki/Development/Security/Advisory-2013-05-23
CVE ID: CVE-2013-2067 State: PUBLISHED Published: 2013-06-01T10:00:00 Last Updated: 2024-08-06T15:27:40.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0839.html -
ack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0839.html - http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?r1=1417891&r2=1417890&pathrev=1417891 - http://rhn.redhat.com/errata/RHSA-2013-0964.html - http://svn.apache.org/viewvc?view=revision&revision=1417891 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?r1=1408044&r2=1408043&pathrev=1408044 - http://tomcat.apache.org/security-7.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2013-08
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2013-0833.html - http://svn.apache.org/viewvc?view=revision&revision=1408044 - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://tomcat.apache.org/security-6.html - http://www.securityfocus.com/bid/59799 - http://www.ubuntu.com/usn/USN-1841-1 - http://rhn.redhat.com/errata/RHSA-2013-0834.html - http://www.securityfocus.com/bid/64758 - http://archives.neohapsis.com/archives/bugtraq/2013-05/0041.html - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3C
n2014-1972949.html - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c
2c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2013-2068 State: PUBLISHED Published: 2013-09-28T19:00:00 Last Updated: 2024-08-06T15:27:39.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the filename parameter to the (1) log, (2) upload, or (3) linuxpkgs method. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1206.html - https://bugzilla.redhat.com/show_bug.cgi?id=960422 - http://www.exploit-db.com/exploits/30469
CVE ID: CVE-2013-2069 State: PUBLISHED Published: 2013-05-29T00:00:00 Last Updated: 2024-08-06T15:27:39.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3, when a rootpw directive is not set in a Kickstart file, sets the root user password to empty, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://aws.amazon.com/security/security-bulletins/red-hat-and-other-third-party-public-amis-security-concern/ - http://www.securityfocus.com/bid/60119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84488 - http://www.openwa
http://www.securityfocus.com/bid/60119 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84488 - http://www.openwall.com/lists/oss-security/2013/05/23/2 - https://bugzilla.redhat.com/show_bug.cgi?id=964299 - http://rhn.redhat.com/errata/RHSA-2013-0849.html
CVE ID: CVE-2013-2070 State: PUBLISHED Published: 2013-07-18T01:00:00 Last Updated: 2024-08-06T15:27:39.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2721 - http://www.openwall.com/lists/oss-security/2013/05/13/3 - http://mailman.nginx.org/
.debian.org/security/2013/dsa-2721 - http://www.openwall.com/lists/oss-security/2013/05/13/3 - http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html - http://secunia.com/advisories/55181 - https://bugzilla.redhat.com/show_bug.cgi?id=962525 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105950.html - http://www.securityfocus.com/bid/59824 - http://nginx.org/download/patch.2013.proxy.txt - http://seclists.org/oss-sec/2013/q2/291 - http://security.gentoo.org/glsa/glsa-201310-04.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/84172
CVE ID: CVE-2013-2071 State: PUBLISHED Published: 2013-06-01T10:00:00 Last Updated: 2024-08-06T15:27:40.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1471372 - http://svn.
Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1471372 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/core/AsyncContextImpl.java?r1=1471372&r2=1471371&pathrev=1471372 - https://issues.apache.org/bugzilla/show_bug.cgi?id=54178 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105855.html - http://tomcat.apache.org/security-7.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106342.html - http://archives.neohapsis.com/archives/bugtraq/2013-05/0040.html - http://www.ubuntu.com/usn/USN-1841-1 - http://www.securityfocus.com/bid/59798 - http://www.securityfocus.com/bid/64758
- http://www.ubuntu.com/usn/USN-1841-1 - http://www.securityfocus.com/bid/59798 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105886.html - http://marc.info/?l=bugtraq&m=139344248911289&w=2
CVE ID: CVE-2013-2072 State: PUBLISHED Published: 2013-08-28T17:00:00 Last Updated: 2024-08-06T15:27:39.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59982 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106721.html - http://www.openwall.com/lists/oss-security/20
/lists.fedoraproject.org/pipermail/package-announce/2013-May/106721.html - http://www.openwall.com/lists/oss-security/2013/05/17/2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106718.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3041 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106778.html
CVE ID: CVE-2013-2073 State: PUBLISHED Published: 2014-05-02T01:00:00 Last Updated: 2024-08-06T15:27:40.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=952194 - http://www.openwall.com/lists/oss-security/2013/05/22/14 - http://blog.transifex.com/post/51072109836/new-version-of-the-transifex-client-has-been-released
CVE ID: CVE-2013-2074 State: PUBLISHED Published: 2014-02-05T19:00:00 Last Updated: 2024-08-06T15:27:39.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/10/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707776 - https://bugzilla.redhat.com/show_bug.cgi?id=961981 - https://projects.kde.org/projects/kde/kdelibs/repository/revisions/65d7
s://bugzilla.redhat.com/show_bug.cgi?id=961981 - https://projects.kde.org/projects/kde/kdelibs/repository/revisions/65d736dab592bced4410ccfa4699de89f78c96ca/diff/kioslave/http/http.cpp - http://www.openwall.com/lists/oss-security/2013/05/11/2 - http://www.osvdb.org/93244 - http://ubuntu.com/usn/usn-1842-1 - http://xorl.wordpress.com/2013/05/22/cve-2013-2074-kde-kdelibs-password-exposure/ - https://bugs.kde.org/show_bug.cgi?id=319428
CVE ID: CVE-2013-2075 State: PUBLISHED Published: 2019-10-31T20:38:26 Last Updated: 2024-08-06T15:27:40.560Z Vendors: chicken Products: chicken Problem Types: Buffer Overflow Description: Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value. NOTE: this issue exists because of an incomplete fix for CVE-2012-6122. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/05/11/3 - https://security-tracker.debian.org/tracker/CVE-2013-2075 - http://www.s
.openwall.com/lists/oss-security/2013/05/11/3 - https://security-tracker.debian.org/tracker/CVE-2013-2075 - http://www.securityfocus.com/bid/59758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84188 - https://lists.nongnu.org/archive/html/chicken-announce/2013-05/msg00000.html - http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=9e2022652258e8a30e5cedbf0abc9cd85a0f6af7 - http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=556108092774086b6c86c2e27daf3f740ffec091 - http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=commitdiff%3Bh=766056cd5f26b1d529405705449cb534609c113f
CVE ID: CVE-2013-2076 State: PUBLISHED Published: 2013-08-28T17:00:00 Last Updated: 2024-08-06T15:27:40.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one domain to determine portions of the state of floating point instructions of other domains, which can be leveraged to obtain sensitive information such as cryptographic keys, a similar vulnerability to CVE-2006-1056. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion
the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.openwall.com/lists/oss-security/2013/06/03/1 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006
CVE ID: CVE-2013-2077 State: PUBLISHED Published: 2013-08-28T17:00:00 Last Updated: 2024-08-06T15:27:40.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows local PV guest users to cause a denial of service (unhandled exception and hypervisor crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://www.openwall.com/lists/oss-security/2013/06/03/2 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/securit
1309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006
CVE ID: CVE-2013-2078 State: PUBLISHED Published: 2013-08-14T15:00:00 Last Updated: 2024-08-06T15:27:41.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) via certain bit combinations to the XSETBV instruction. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.openwall.com/lists/oss-security/2013/06/03/3 - http://www.debian.org/security/2014/dsa-3006 - http://www.securitytracker.com/id/1028613
CVE ID: CVE-2013-2079 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T15:27:40.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider capability requirements during the processing of ZIP assignment-archive download (aka downloadall) requests, which allows remote authenticated users to read other users' assignments by leveraging the student role. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html - http://openwall.com/lists/oss-security/2013/05/21/1 -