Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.exploit-db.com/exploits/30105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89524 - http://www.nerdbox.it/wordpress-download-manager-xss - http://wordpress.org/plugins/download-manager/changelog
CVE ID: CVE-2013-7320 State: PUBLISHED Published: 2014-02-06T15:00:00 Last Updated: 2024-08-06T18:01:20.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64297 - http://secunia.com/advisories/56022 - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006
CVE ID: CVE-2013-7321 State: PUBLISHED Published: 2014-02-06T15:00:00 Last Updated: 2024-08-06T18:01:20.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89728 - http://secunia.com/advisories/56022 - http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006
CVE ID: CVE-2013-7322 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T18:01:20.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, which causes the wrong line to be updated when invalidating an OTP and allows context-dependent attackers to conduct replay attacks, as demonstrated by a commented out line when using libpam-oath. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/296 - http://lists.nongnu.org/archive/html/oath-toolkit-help/201
iner: References: - http://seclists.org/oss-sec/2014/q1/296 - http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00003.html - http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/91316 - http://lists.nongnu.org/archive/html/oath-toolkit-help/2013-12/msg00002.html - http://www.nongnu.org/oath-toolkit/NEWS.html
CVE ID: CVE-2013-7323 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T18:01:20.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56616 - http://www.debian.org/security/2014/dsa-2946 - https://code.google.com/p/python-gnupg/ - http://seclists.org/oss-sec/2014/q1/244 - http://seclists.org/oss-sec/2014/q1/294 - http://seclists.org/oss-sec/2014/q1/243 - http://secunia.com/advisories/59031
CVE ID: CVE-2013-7324 State: PUBLISHED Published: 2020-02-17T18:24:21 Last Updated: 2024-08-06T18:01:20.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/10/13 - https://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-7324.html - https://www.openwall.com/lists/oss-secu
13 - https://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-7324.html - https://www.openwall.com/lists/oss-security/2013/10/08/4
CVE ID: CVE-2013-7325 State: PUBLISHED Published: 2019-12-03T22:23:50 Last Updated: 2024-08-06T18:01:20.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-7325 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7325 - http://www.openwall.com/lists/oss-security/2014/02/12/14
CVE ID: CVE-2013-7326 State: PUBLISHED Published: 2014-02-14T19:00:00 Last Updated: 2024-08-06T18:01:20.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) return_url parameter to modules\com_vtiger_workflow\savetemplate.php, or unspecified vectors to (2) deletetask.php, (3) edittask.php, (4) savetask.php, or (5) saveworkflow.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89662 - http://packetstormsecurity.com/files/124402 - http://osvdb.org/100897 - http://archives.neoha
om/vulnerabilities/89662 - http://packetstormsecurity.com/files/124402 - http://osvdb.org/100897 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0052.html - http://www.enkomio.com/Advisory/SOJOBO-ADV-13-05 - http://www.securityfocus.com/bid/64236
CVE ID: CVE-2013-7327 State: PUBLISHED Published: 2014-02-18T11:00:00 Last Updated: 2024-08-06T18:01:20.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b - https://bugzilla.redhat.co
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b - https://bugzilla.redhat.com/show_bug.cgi?id=1065108 - http://www.ubuntu.com/usn/USN-2126-1 - https://bugs.php.net/bug.php?id=66356
CVE ID: CVE-2013-7328 State: PUBLISHED Published: 2014-02-18T11:00:00 Last Updated: 2024-08-06T18:01:20.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive information via an imagecrop function call with a negative value for the (1) x or (2) y dimension, a different vulnerability than CVE-2013-7226. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b - https://bugzilla.redhat.com/show_b
/git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b - https://bugzilla.redhat.com/show_bug.cgi?id=1065108 - http://www.ubuntu.com/usn/USN-2126-1 - https://bugs.php.net/bug.php?id=66356
CVE ID: CVE-2013-7329 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T18:01:20.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified, allows remote attackers to obtain sensitive information (web queries and environment details) via vectors related to the dump_html function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-March/129444.html - https://bugzilla.redhat.com/show_bug.cgi?id=1067180 - https://rt.cpan.org/Public/Bug/Display.html?id=84403 - http://openwall.com/lists/oss-secur
com/show_bug.cgi?id=1067180 - https://rt.cpan.org/Public/Bug/Display.html?id=84403 - http://openwall.com/lists/oss-security/2014/02/19/11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91735 - https://github.com/markstos/CGI--Application/pull/15 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739505 - http://www.securityfocus.com/bid/65687 - http://lists.fedoraproject.org/pipermail/package-announce/2014-March/129436.html
CVE ID: CVE-2013-7330 State: PUBLISHED Published: 2014-10-17T15:00:00 Last Updated: 2024-08-06T18:01:20.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/36342d71e29e0620f803a7470ce96c61761648d8 - http://www.openwall.com/lists/oss-security/2014/02/21/2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
CVE ID: CVE-2013-7331 State: PUBLISHED Published: 2014-02-26T11:00:00.000Z Last Updated: 2025-10-22T00:05:38.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-
tps://soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messages/ - http://www.securitytracker.com/id/1030818 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-052 - http://www.kb.cert.org/vuls/id/539289 - http://www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html
CVE ID: CVE-2013-7332 State: PUBLISHED Published: 2014-02-26T11:00:00Z Last Updated: 2024-09-16T21:04:06.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - https://soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messag
soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messages/
CVE ID: CVE-2013-7333 State: PUBLISHED Published: 2019-10-23T16:46:21 Last Updated: 2024-08-06T18:01:20.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices connected to the targeted switch. Additional Analyst Notes: - CVE Program Container: References: - http://dovernetworks.com/wp-content/uploads/2013/12/OpenFloodlight-12302013.pdf
CVE ID: CVE-2013-7334 State: PUBLISHED Published: 2014-03-11T16:00:00Z Last Updated: 2024-09-16T18:04:28.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter, related to CVE-2012-6290. Additional Analyst Notes: - CVE Program Container: References: - http://forum.imagecms.net/viewtopic.php?id=1436 - http://osvdb.org/show/osvdb/89512 - https://www.htbridge.com/advisory/HTB23132 - http://packetstormsecurity.com/files/119806/ImageCMS-4.0.0b-SQL-Injection.html - http://archives.n
m/advisory/HTB23132 - http://packetstormsecurity.com/files/119806/ImageCMS-4.0.0b-SQL-Injection.html - http://archives.neohapsis.com/archives/bugtraq/2013-01/0105.html
CVE ID: CVE-2013-7335 State: PUBLISHED Published: 2014-03-12T14:00:00Z Last Updated: 2024-09-16T20:07:52.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53493 - http://www.securityfocus.com/bid/61809 - http://www.dnnsoftware.com/platform/manage/security-center
CVE ID: CVE-2013-7336 State: PUBLISHED Published: 2014-05-07T10:00:00 Last Updated: 2024-08-06T18:01:20.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) by causing domblkstat to be called at the same time as the qemuMonitorGetSpiceMigrationStatus function. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/gls
ainer: References: - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=484cc321 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00004.html - http://www.openwall.com/lists/oss-security/2014/03/18/1 - http://www.openwall.com/lists/oss-security/2014/03/18/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1077620
CVE ID: CVE-2013-7338 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T18:01:20.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/592 - http://www.securityfocus.com/bid/65179 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html - http://hg.
- http://www.securityfocus.com/bid/65179 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00008.html - http://hg.python.org/cpython/rev/79ea4ce431b1 - https://security.gentoo.org/glsa/201503-10 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://bugs.python.org/issue20078 - http://seclists.org/oss-sec/2014/q1/595 - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1029973 - https://docs.python.org/3.3/whatsnew/changelog.html
CVE ID: CVE-2013-7339 State: PUBLISHED Published: 2014-03-24T10:00:00 Last Updated: 2024-08-06T18:01:20.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/20/14 - http://www.securityfocus.com/bid/66351 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 - https://
20/14 - http://www.securityfocus.com/bid/66351 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8 - https://bugzilla.redhat.com/show_bug.cgi?id=1079214 - http://secunia.com/advisories/59386 - https://github.com/torvalds/linux/commit/c2349758acf1874e4c2b93fe41d072336f1a31d0 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2349758acf1874e4c2b93fe41d072336f1a31d0
CVE ID: CVE-2013-7340 State: PUBLISHED Published: 2014-03-20T19:00:00Z Last Updated: 2024-09-16T22:20:05.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN VLC Media Player before 2.0.7 allows remote attackers to cause a denial of service (memory consumption) via a crafted playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/developers/vlc-branch/NEWS
CVE ID: CVE-2013-7341 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T18:01:20.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/03/17/1 - http://flash.flowplayer.org/documentation/version-history
ences: - http://openwall.com/lists/oss-security/2014/03/17/1 - http://flash.flowplayer.org/documentation/version-history.html - https://moodle.org/mod/forum/discuss.php?d=256420 - https://github.com/flowplayer/flash/issues/121 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43344
CVE ID: CVE-2013-7342 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T18:01:20.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.1 allows remote attackers to inject arbitrary web script or HTML via the callback parameter, a related issue to CVE-2013-7341. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flowplayer/flowplayer/issues/381 - https://github.com/flowplayer/flowplayer/commit/017f8c2a0865ab31e01d591adc43d34f2dd60e59
CVE ID: CVE-2013-7343 State: PUBLISHED Published: 2014-03-22T01:00:00 Last Updated: 2024-08-06T18:01:20.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML by using URL encoding within the callback parameter name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7342. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flowplayer/flowplayer/issues/381 - https://github.com/flowplayer/flowplayer/commit/27e8f178276c185cbddb4f14c91d4ce7b3865db1
CVE ID: CVE-2013-7344 State: PUBLISHED Published: 2014-03-23T15:00:00 Last Updated: 2024-08-06T18:01:20.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-006/
CVE ID: CVE-2013-7345 State: PUBLISHED Published: 2014-03-23T15:00:00 Last Updated: 2024-08-06T18:01:20.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted ASCII file that triggers a large amount of backtracking, as demonstrated via a file with many newline characters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c - https://bugs.debian
tainer: References: - https://github.com/file/file/commit/ef2329cf71acb59204dd981e2c6cce6c81fe467c - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703993 - http://bugs.gw.com/view.php?id=164 - http://support.apple.com/kb/HT6443 - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://www.debian.org/security/2014/dsa-2873
CVE ID: CVE-2013-7346 State: PUBLISHED Published: 2014-03-27T16:00:00Z Last Updated: 2024-09-17T04:24:38.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0018.html - https://www.htbridge.com/advisory/HTB23148
CVE ID: CVE-2013-7347 State: PUBLISHED Published: 2014-03-30T00:00:00 Last Updated: 2024-08-06T18:01:20.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user and password in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=607179 - http://rhn.redhat.com/errata/RHSA-2013-0128.html
CVE ID: CVE-2013-7348 State: PUBLISHED Published: 2014-04-01T01:00:00 Last Updated: 2024-08-06T18:01:20.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the ioctx_alloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via vectors involving an error condition in the aio_setup_ring function. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d558023207e008a4476a3b7bb8706b2a2bf5d84f - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - htt
commit%3Bh=d558023207e008a4476a3b7bb8706b2a2bf5d84f - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - http://www.openwall.com/lists/oss-security/2014/03/31/10 - https://github.com/torvalds/linux/commit/d558023207e008a4476a3b7bb8706b2a2bf5d84f
CVE ID: CVE-2013-7349 State: PUBLISHED Published: 2014-04-01T00:00:00 Last Updated: 2024-08-06T18:01:20.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter to news/send.php, (2) thread_id parameter to posts/edit.php, or (3) user_email parameter to users/password.php or (4) users/register.php. NOTE: these issues were SPLIT from CVE-2013-5640 due to differences in researchers and disclosure dates. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/critical-xss-sql-injection-vulnerabilities-gnew/ - http:
CVE Program Container: References: - https://www.netsparker.com/critical-xss-sql-injection-vulnerabilities-gnew/ - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5153.php - http://packetstormsecurity.com/files/122771 - http://packetstormsecurity.com/files/123482 - http://www.exploit-db.com/exploits/28684 - http://www.securityfocus.com/bid/62817 - https://www.htbridge.com/advisory/HTB23171