Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3235 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=60085c3d009b0df252547adb336d1ccca5ce52ec - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://ww
09b0df252547adb336d1ccca5ce52ec - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - https://github.com/torvalds/linux/commit/60085c3d009b0df252547adb336d1ccca5ce52ec - http://www.ubuntu.com/usn/USN-1837-1 - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-3236 State: PUBLISHED Published: 2013-04-22T10:00:00 Last Updated: 2024-08-06T16:00:10.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/680d04e0ba7e926233e3b9cee59125ce181f66ba - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=680d04e
7e926233e3b9cee59125ce181f66ba - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=680d04e0ba7e926233e3b9cee59125ce181f66ba - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://xforce.iss.net/xforce/xfdb/83698 - http://www.openwall.com/lists/oss-security/2013/04/22/13 - http://www.securityfocus.com/bid/59391 - http://www.openwall.com/lists/oss-security/2013/04/22/14 - http://www.openwall.com/lists/oss-security/2013/04/22/11 - http://www.openwall.com/lists/oss-security/2013/04/23/2 - http://www.openwall.com/lists/oss-security/2013/04/22/3
CVE ID: CVE-2013-3237 State: PUBLISHED Published: 2013-04-22T10:00:00Z Last Updated: 2024-09-16T17:44:09.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vsock_stream_sendmsg function in net/vmw_vsock/af_vsock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2013/4/14/107 - http://www.openwall.com/lists/oss-security/2013/04/14/3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d5e0d0f607a7a029c
ecurity/2013/04/14/3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d5e0d0f607a7a029c6563a0470d88255c89a8d11 - https://github.com/torvalds/linux/commit/d5e0d0f607a7a029c6563a0470d88255c89a8d11
CVE ID: CVE-2013-3238 State: PUBLISHED Published: 2013-04-26T01:00:00 Last Updated: 2024-08-06T16:00:10.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:160 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0217.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104936.html -
om/archives/bugtraq/2013-04/0217.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104936.html - http://www.exploit-db.com/exploits/25136 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104770.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104725.html - https://github.com/phpmyadmin/phpmyadmin/commit/ffa720d90a79c1f33cf4c5a33403d09a67b42a66 - https://github.com/phpmyadmin/phpmyadmin/commit/dedd542cdaf1606ca9aa3f6f8f8adb078d8ad549 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0133 - http://www.phpmyadmin.net/home_page/security/PMASA-2013-2.php
CVE ID: CVE-2013-3239 State: PUBLISHED Published: 2013-04-26T01:00:00 Last Updated: 2024-08-06T16:00:10.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:160 - http://archives.neohapsis.com/archives/bugtraq/2013-04
http://www.mandriva.com/security/advisories?name=MDVSA-2013:160 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0217.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104936.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html - https://github.com/phpmyadmin/phpmyadmin/commit/1f6bc0b707002e26cab216b9e57b4d5de764de48 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104770.html - http://www.phpmyadmin.net/home_page/security/PMASA-2013-3.php - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104725.html - https://github.com/phpmyadmin/phpmyadmin/commit/d3fafdfba0807068196655e9b6d16c5d1d3ccf8a - https://wik
May/104725.html - https://github.com/phpmyadmin/phpmyadmin/commit/d3fafdfba0807068196655e9b6d16c5d1d3ccf8a - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0133
CVE ID: CVE-2013-3240 State: PUBLISHED Published: 2013-04-26T01:00:00 Last Updated: 2024-08-06T16:00:10.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0217.html - http://www.phpmyadmin.net/home_page/security/PMASA-2013-4.php
CVE ID: CVE-2013-3241 State: PUBLISHED Published: 2013-04-26T01:00:00 Last Updated: 2024-08-06T16:00:10.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users to inject values via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0217.html - http://www.phpmyadmin.net/home_page/security/PMASA-2013-5.php
CVE ID: CVE-2013-3242 State: PUBLISHED Published: 2013-05-03T10:00:00 Last Updated: 2024-08-06T16:00:09.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://karmainsecurity.com/KIS-2013-04 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0232.html - http://developer.joomla.org/security/85-20130406-core-dos-vuln
chives.neohapsis.com/archives/bugtraq/2013-04/0232.html - http://developer.joomla.org/security/85-20130406-core-dos-vulnerability.html - http://www.exploit-db.com/exploits/25087
CVE ID: CVE-2013-3243 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T16:00:10.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0214.html - http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/57-esnc-2013-004-remote-abap-code-injection-in-opentext-ixos-ecm-suite-for-sap-netweaver.html
CVE ID: CVE-2013-3244 State: PUBLISHED Published: 2013-10-24T00:00:00Z Last Updated: 2024-09-17T01:07:01.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2) SOAP-RFC request. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1776695 - http://scn.sap.com/docs/DOC-8218 - http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/58-remote-code-injection-in-sap-erp-project-system.html
CVE ID: CVE-2013-3245 State: PUBLISHED Published: 2013-07-10T19:00:00Z Last Updated: 2024-09-16T16:58:28.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MKV file, possibly involving an integer overflow and out-of-bounds read or heap-based buffer overflow, or an uncaught exception. NOTE: the vendor disputes the severity and claimed vulnerability type of this issue, stating "This PoC crashes VLC, indeed, but does nothing more... this is not an integer overflow error, but an
his issue, stating "This PoC crashes VLC, indeed, but does nothing more... this is not an integer overflow error, but an uncaught exception and I doubt that it is exploitable. This uncaught exception makes VLC abort, not execute random code, on my Linux 64bits machine." A PoC posted by the original researcher shows signs of an attacker-controlled out-of-bounds read, but the affected instruction does not involve a register that directly influences control flow Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - http://www.jbkempf.com/blog/post/2013/More-lies-from-Secunia - http://www.securityfocus.com/bid/61032 - http://seclists.org/fulldisclosure/2013/Jul/71 - h
013/More-lies-from-Secunia - http://www.securityfocus.com/bid/61032 - http://seclists.org/fulldisclosure/2013/Jul/71 - http://secunia.com/advisories/52956 - http://seclists.org/fulldisclosure/2013/Jul/77 - http://seclists.org/fulldisclosure/2013/Jul/79 - http://secunia.com/blog/372/
CVE ID: CVE-2013-3246 State: PUBLISHED Published: 2020-01-02T19:38:44 Last Updated: 2024-08-06T16:00:10.106Z Vendors: XnView Products: XnView Problem Types: Buffer Overflow Description: Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.fuzzmyapp.com/advisories/FMA-2013-003/FMA-2013-003-EN.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/84643
CVE ID: CVE-2013-3247 State: PUBLISHED Published: 2020-01-02T19:38:36 Last Updated: 2024-08-06T16:00:10.099Z Vendors: XnView Products: XnView Problem Types: Buffer Overflow Description: Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.fuzzmyapp.com/advisories/FMA-2013-003/FMA-2013-003-EN.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/84642
CVE ID: CVE-2013-3248 State: PUBLISHED Published: 2013-10-03T23:00:00Z Last Updated: 2024-09-17T04:09:46.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52707 - http://osvdb.org/show/osvdb/94934
CVE ID: CVE-2013-3249 State: PUBLISHED Published: 2014-03-20T16:00:00 Last Updated: 2024-08-06T16:07:35.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the "Add from text file" feature in the DameWare Exporter tool (DWExporter.exe) in DameWare Remote Support 10.0.0.372, 9.0.1.247, and earlier allows user-assisted attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85973 - http://www.securityfocus.com/bid/61453 - http://secunia.com/advisories/53096
CVE ID: CVE-2013-3250 State: PUBLISHED Published: 2013-06-21T20:00:00Z Last Updated: 2024-09-16T20:16:46.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53125 - http://wordpress.org/plugins/wp-maintenance-mode/changelog/
CVE ID: CVE-2013-3251 State: PUBLISHED Published: 2014-04-10T14:00:00 Last Updated: 2024-08-06T16:07:35.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53126 - http://osvdb.org/93873
CVE ID: CVE-2013-3252 State: PUBLISHED Published: 2014-04-10T14:00:00 Last Updated: 2024-08-06T16:07:35.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/93096 - http://secunia.com/advisories/53127 - http://wordpress.org/plugins/wp-postviews/changelog
CVE ID: CVE-2013-3253 State: PUBLISHED Published: 2013-08-09T18:00:00Z Last Updated: 2024-09-16T17:48:49.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/750054/xhanch-my-twitter - http://secunia.com/advisories/53133 - http://forum.xhanch.com/index.php/topic%2C3806.0.html - http://www.securityfocus.com/bid/61629
CVE ID: CVE-2013-3254 State: PUBLISHED Published: 2013-05-10T10:00:00Z Last Updated: 2024-09-16T18:08:00.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the WP Photo Album Plus plugin before 5.0.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the commentid parameter in a wppa_manage_comments edit action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53105 - http://wordpress.org/extend/plugins/wp-photo-album-plus/changelog/
CVE ID: CVE-2013-3256 State: PUBLISHED Published: 2013-08-08T20:00:00 Last Updated: 2024-08-06T16:07:35.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that "manipulate plugin settings." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53138 - http://www.securityfocus.com/bid/61561 - http://wordpress.org/plugins/sexybookmarks/changelog/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/86126
CVE ID: CVE-2013-3257 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T16:07:35.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84245 - http://wordpress.org/plugins/related-posts/changelog/ - http://www.securityfocus.com/bid/59836
CVE ID: CVE-2013-3258 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T16:07:36.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/digg-digg/changelog/ - http://secunia.com/advisories/53120 - http://www.securityfocus.com/bid/60046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84418
CVE ID: CVE-2013-3259 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T16:07:36.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60418 - http://secunia.com/advisories/52698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84835 - http://osvdb.org/94037
CVE ID: CVE-2013-3260 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T16:07:36.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/94036 - http://secunia.com/advisories/52698 - http://www.securityfocus.com/bid/60420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84836 - http://secunia.com/secunia_research/2013-05
CVE ID: CVE-2013-3261 State: PUBLISHED Published: 2013-06-01T10:00:00Z Last Updated: 2024-09-16T20:53:29.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53111 - http://wordpress.org/plugins/flash-album-gallery/changelog/
CVE ID: CVE-2013-3262 State: PUBLISHED Published: 2013-08-09T21:00:00 Last Updated: 2024-08-06T16:07:36.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/723187/download-monitor - https://exchange.xforce.ibmcloud.com/vulnerabilities/85921 - http://secunia.com/advisories/53116 - http://www.securityfocus.com/bid/61407
CVE ID: CVE-2013-3263 State: PUBLISHED Published: 2013-11-05T20:00:00Z Last Updated: 2024-09-16T20:06:45.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress allow remote attackers to inject arbitrary web script or HTML via the (1) siteurl parameter to campaign/campaignone.php; the (2) action, (3) campaignname, (4) campaignformat, or (5) emailtemplate parameter to campaign/campaigntwo.php; the (6) listid parameter to list/edit.php; the (7) campaignid or (8) siteurl parameter to campaign/editcampaign.php; the (9) campaignid parameter to campaign/sele
the (7) campaignid or (8) siteurl parameter to campaign/editcampaign.php; the (9) campaignid parameter to campaign/selectlistb4send.php; the (10) campaignid, (11) campaignname, (12) campaignsubject, or (13) selectedcampaigns parameter to campaign/sendCampaign.php; or the (14) campaignid, (15) campaignname, (16) campaignformat, or (17) action parameter to campaign/updatecampaign.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53170 - http://www.securityfocus.com/bid/62621
CVE ID: CVE-2013-3264 State: PUBLISHED Published: 2013-11-05T20:00:00Z Last Updated: 2024-09-17T00:01:44.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers to modify list or campaign data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53170 - http://www.securityfocus.com/bid/62621
CVE ID: CVE-2013-3266 State: PUBLISHED Published: 2013-05-02T10:00:00 Last Updated: 2024-08-06T16:07:36.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by specifying a plain file instead of a directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53241 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:05.nfsserver.asc - h
s: - http://secunia.com/advisories/53241 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:05.nfsserver.asc - http://www.debian.org/security/2013/dsa-2672 - http://www.securitytracker.com/id/1028491
CVE ID: CVE-2013-3267 State: PUBLISHED Published: 2013-05-03T10:00:00Z Last Updated: 2024-09-16T18:44:46.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/86-20130407-core-xss-vulnerability.html