Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2240 State: PUBLISHED Published: 2013-10-10T00:00:00Z Last Updated: 2024-08-06T15:27:41.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/04/11 - http://galleryproject.org/gallery_3_0_9 - http://sourceforge.net/apps/trac/gallery/ticket/2073 - https://github.com/gallery/gallery3/commit/c5318bb1a2dd266b50317a2adb74d74338593733 - https:
/trac/gallery/ticket/2073 - https://github.com/gallery/gallery3/commit/c5318bb1a2dd266b50317a2adb74d74338593733 - https://bugzilla.redhat.com/show_bug.cgi?id=981197
CVE ID: CVE-2013-2241 State: PUBLISHED Published: 2013-10-10T00:00:00Z Last Updated: 2024-08-06T15:27:41.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information (image files) via the "full" string in the size parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gallery/gallery3/commit/cbbcf1b4791762d7da0ea7b6c4f4b551a4d9caed - http://www.openwall.com/lists/oss-security/2013/07/04/11 - http://galleryproject.org/gallery_3_0_9 - http://www.openwall.com/lists/oss-security/2013/07/05/3 - ht
y/2013/07/04/11 - http://galleryproject.org/gallery_3_0_9 - http://www.openwall.com/lists/oss-security/2013/07/05/3 - https://bugzilla.redhat.com/show_bug.cgi?id=981198 - http://sourceforge.net/apps/trac/gallery/ticket/2074
CVE ID: CVE-2013-2242 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-17T04:00:24.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access restrictions via an HTTP session to a chat server. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39628 - https://moodle.org/mod/forum/discuss.php?d=232
://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39628 - https://moodle.org/mod/forum/discuss.php?d=232498
CVE ID: CVE-2013-2243 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-16T22:50:23.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232500 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39546
CVE ID: CVE-2013-2244 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-17T02:46:49.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37516 - https://moodle.org/mod/forum/discuss.php?d=232501
CVE ID: CVE-2013-2245 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-16T18:43:55.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37818 - https://moodle.org/mod/forum/discuss.php?d=232502
CVE ID: CVE-2013-2246 State: PUBLISHED Published: 2013-07-26T22:00:00Z Last Updated: 2024-09-16T17:08:06.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/feedback:view capability before displaying recent feedback, which allows remote authenticated users to obtain sensitive information via a request for all course feedback that has occurred since a specified time. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=232503 - http://git.moodle.org/gw?p=moodle.git&a=searc
ntainer: References: - https://moodle.org/mod/forum/discuss.php?d=232503 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39570
CVE ID: CVE-2013-2247 State: PUBLISHED Published: 2013-08-28T15:00:00Z Last Updated: 2024-09-16T22:45:55.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fast Permissions Administration module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to the modal content callback, which allows remote attackers to obtain unspecified access to the permissions edit form. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/06/3 - https://drupal.org/node/2028421 - https://drupal.org/node/2028813 - https://drupal.org/node/2028417
CVE ID: CVE-2013-2248 State: PUBLISHED Published: 2013-07-18T01:00:00 Last Updated: 2024-08-06T15:27:41.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix. Additional Analyst Notes: - CVE Program Container: References: - http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html - http://struts.apache.org/release/2.3.x/docs/s2-017.html - http://www.oracle.com/technetwork/topics/security/cp
1e.html - http://struts.apache.org/release/2.3.x/docs/s2-017.html - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html - http://www.securityfocus.com/bid/61196 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
CVE ID: CVE-2013-2249 State: PUBLISHED Published: 2013-07-23T15:00:00 Last Updated: 2024-08-06T15:27:41.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.apache.org/dist/httpd/CHANGES_2.4.6 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/session/mod_session_dbd.c?r1=1409
ndex?page=content&id=JSA10698 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/session/mod_session_dbd.c?r1=1409170&r2=1488158&diff_format=h - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-2249 - https://httpd.apache.org/security/vulnerabilities_24.html - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/threa
/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.ht
ache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178
c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2013-2250 State: PUBLISHED Published: 2013-08-15T16:00:00 Last Updated: 2024-08-06T15:27:41.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61369 - http://ofbiz.apache.org/download.html#vulnerabilities - http://secunia.com/advisories/53910 - http://osvdb.org/95522 - https://exchange.xforce.
/download.html#vulnerabilities - http://secunia.com/advisories/53910 - http://osvdb.org/95522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85875 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0143.html
CVE ID: CVE-2013-2251 State: PUBLISHED Published: 2013-07-18T01:00:00.000Z Last Updated: 2025-10-22T00:05:41.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90392 - http:/
echnetwork/topics/security/cpujul2015-2367936.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90392 - http://seclists.org/fulldisclosure/2013/Oct/96 - http://cxsecurity.com/issue/WLB-2014010087 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2 - http://struts.apache.org/release/2.3.x/docs/s2-016.html - http://archiva.apache.org/security.html - http://osvdb.org/98445 - http://www.securitytracker.com/id/1032916 - http://www.securityfocus.com/bid/61189 - http://www.securitytracker.com/id/1029184 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://seclists.org/oss-
cus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://seclists.org/oss-sec/2014/q1/89 - http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html
CVE ID: CVE-2013-2252 State: REJECTED Published: 2022-06-29T18:46:34 Last Updated: 2022-06-29T18:46:34 Description: No description available.
CVE ID: CVE-2013-2254 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T15:27:41.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4pue6PnESsP1KTdEDJm1gpkANFaK
iner: References: - http://mail-archives.apache.org/mod_mbox/sling-dev/201310.mbox/%3CCAKkCf4pue6PnESsP1KTdEDJm1gpkANFaK%2BvUd9mzEVT7tXL%2B3A%40mail.gmail.com%3E - http://secunia.com/advisories/55157 - http://www.securityfocus.com/bid/62903 - https://issues.apache.org/jira/browse/SLING-2913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87765
CVE ID: CVE-2013-2255 State: PUBLISHED Published: 2019-11-01T18:38:01 Last Updated: 2024-08-06T15:27:41.145Z Vendors: OpenStack Products: Keystone, Compute Problem Types: and non-validating HTTPS client Description: HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2255 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2255 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2255 - https://access.redhat.com/security/cve/cve-2013-2255 - https://exchange.xforce.ibm
e.com/show_bug.cgi?id=CVE-2013-2255 - https://access.redhat.com/security/cve/cve-2013-2255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85562 - https://bugs.launchpad.net/ossn/+bug/1188189 - https://www.securityfocus.com/bid/61118
CVE ID: CVE-2013-2256 State: PUBLISHED Published: 2013-09-16T19:00:00Z Last Updated: 2024-08-06T15:27:41.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1199.html - https://bugs.launchpad.net/nova/+bug/1194093 - http://seclists.org/oss-sec/2013/q3/281
CVE ID: CVE-2013-2257 State: PUBLISHED Published: 2019-11-04T16:41:52 Last Updated: 2024-08-06T15:27:41.138Z Vendors: Cryptocat Products: Cryptocat Problem Types: Brute Force Weakness Description: Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61087
CVE ID: CVE-2013-2258 State: PUBLISHED Published: 2019-11-04T16:35:11 Last Updated: 2024-08-06T15:27:41.080Z Vendors: Cryptocat Products: Cryptocat Problem Types: User Impersonation Spoofing Description: Cryptocat before 2.0.22 has Nickname User Impersonation Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61088
CVE ID: CVE-2013-2259 State: PUBLISHED Published: 2019-11-04T16:32:03 Last Updated: 2024-08-06T15:27:41.094Z Vendors: Cryptocat Products: Cryptocat Problem Types: Arbitrary Code Execution Description: Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61089
CVE ID: CVE-2013-2260 State: PUBLISHED Published: 2019-11-04T16:15:31 Last Updated: 2024-08-06T15:27:41.091Z Vendors: Cryptocat Products: Cryptocat Problem Types: Key Entropy Weakness Description: Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://vuldb.com/?id.9435 - https://www.securityfocus.com/bid/61091/info
CVE ID: CVE-2013-2261 State: PUBLISHED Published: 2019-11-04T15:43:47 Last Updated: 2024-08-06T15:27:41.139Z Vendors: n/a Products: n/a Problem Types: Software Detection Weakness Description: Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61090
CVE ID: CVE-2013-2262 State: PUBLISHED Published: 2019-11-04T15:50:02 Last Updated: 2024-08-06T15:27:41.129Z Vendors: Cryptocat Products: Cryptocat Problem Types: Activity Remote Disclosure Description: Cryptocat strophe.js before 2.0.22 has information disclosure Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://vuldb.com/?id.9438 - https://www.securityfocus.com/bid/61092
CVE ID: CVE-2013-2263 State: PUBLISHED Published: 2013-03-19T14:00:00 Last Updated: 2024-08-06T15:27:41.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX136623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82591 - http://secunia.com/advisories/52479 - http://www.securitytracker.com/id/1028255 - http://osvdb.org/90905
CVE ID: CVE-2013-2264 State: PUBLISHED Published: 2013-03-29T18:00:00Z Last Updated: 2024-09-16T17:38:10.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for invalid INVITE, SUBSCRIBE, and REGISTER transactions depending on whether the user account exists, which allows remote attackers to enumerate account names by (1) reading HTTP status codes, (2) reading additional
xists, which allows remote attackers to enumerate account names by (1) reading HTTP status codes, (2) reading additional text in a 403 (aka Forbidden) response, or (3) observing whether certain retransmissions occur. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2013-003.html - https://issues.asterisk.org/jira/browse/ASTERISK-21013
CVE ID: CVE-2013-2266 State: PUBLISHED Published: 2013-03-28T16:00:00 Last Updated: 2024-08-06T15:27:41.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-00871/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101603.html - http://l
.isc.org/article/AA-00871/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101603.html - http://linux.oracle.com/errata/ELSA-2014-1244 - http://rhn.redhat.com/errata/RHSA-2013-0689.html - http://www.isc.org/software/bind/advisories/cve-2013-2266 - https://kb.isc.org/article/AA-00879/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101500.html - http://marc.info/?l=bugtraq&m=136804614120794&w=2 - http://marc.info/?l=bugtraq&m=136804614120794&w=2 - http://www.securityfocus.com/bid/58736 - http://rhn.redhat.com/errata/RHSA-2013-0690.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - https://oval.cisecurity.org/reposito
0.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19579 - http://www.debian.org/security/2013/dsa-2656 - http://support.apple.com/kb/HT5880 - http://www.ubuntu.com/usn/USN-1783-1
CVE ID: CVE-2013-2267 State: PUBLISHED Published: 2020-01-27T21:39:36 Last Updated: 2024-08-06T15:27:41.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83229
CVE ID: CVE-2013-2268 State: PUBLISHED Published: 2013-02-23T21:00:00 Last Updated: 2024-08-06T15:27:41.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MathML implementation in WebKit in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, has unknown impact and remote attack vectors, related to a "high severity security issue." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16329
CVE ID: CVE-2013-2269 State: PUBLISHED Published: 2013-10-01T17:00:00Z Last Updated: 2024-09-17T01:51:41.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in conjunction with information from a "default holding page" to discover the link that is used for sponsor approval of the guest request, then performing a direct request to that link. Additional Analyst Notes: - CVE Program Container: Ref
the guest request, then performing a direct request to that link. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/support/alerts/aid-050813.asc - http://www.securityfocus.com/bid/59805 - http://secunia.com/advisories/53358