Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1952 State: PUBLISHED Published: 2013-05-13T23:00:00 Last Updated: 2024-08-06T15:20:37.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105533.html - http://security.gentoo.org/glsa/glsa-201309-24
lists.fedoraproject.org/pipermail/package-announce/2013-May/105533.html - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2013/dsa-2666 - http://www.securityfocus.com/bid/59617 - http://secunia.com/advisories/53312 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83968 - http://osvdb.org/92984 - http://www.openwall.com/lists/oss-security/2013/05/02/9
CVE ID: CVE-2013-1953 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T15:20:37.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=951257 - http://www.openwall.com/lists/oss-security/2013/04/16/3 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:190
CVE ID: CVE-2013-1954 State: PUBLISHED Published: 2013-07-10T19:00:00 Last Updated: 2024-08-06T15:20:37.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=136593191416152&w=2 - http://secunia.com/advisories/59793 - http://marc.info/?l=oss-security&m=136610343501731&w=2 - http://trac.videolan.org/vlc/ticket/8024 - http://www.securityfocus.
//marc.info/?l=oss-security&m=136610343501731&w=2 - http://trac.videolan.org/vlc/ticket/8024 - http://www.securityfocus.com/bid/57333 - http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=b31ce523331aa3a6e620b68cdfe3f161d519631e - http://www.osvdb.org/89598 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17023 - http://www.videolan.org/security/sa1302.html
CVE ID: CVE-2013-1955 State: PUBLISHED Published: 2013-07-18T01:00:00Z Last Updated: 2024-09-16T19:01:34.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs7.easyphpcalendar.com/source/ChangeLog/changeLog.htm - http://www.openwall.com/lists/oss-security/2013/04/16/6 - http://www.easyphpcalendar.com/forums/showthread.php?p=4555
CVE ID: CVE-2013-1956 State: PUBLISHED Published: 2013-04-24T19:00:00Z Last Updated: 2024-08-06T15:20:37.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the namespace root directory, which allows local users to bypass intended filesystem restrictions via a crafted clone system call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3151527ee007b73a0ebd296010f1c0454a919c7d - https://github.com/torvalds/linux/commit/3151527ee007b73a
.git%3Ba=commit%3Bh=3151527ee007b73a0ebd296010f1c0454a919c7d - https://github.com/torvalds/linux/commit/3151527ee007b73a0ebd296010f1c0454a919c7d - http://www.openwall.com/lists/oss-security/2013/04/16/11 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6
CVE ID: CVE-2013-1957 State: PUBLISHED Published: 2013-04-24T19:00:00Z Last Updated: 2024-08-06T15:20:37.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT_READONLY flag, which allows local users to bypass an intended read-only property of a filesystem by leveraging a separate mount namespace. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=132c94e31b8bca8ea921f9f96a57d684fa4ae0a9 - http://www.openwall.com/lists/oss-security/2013/04/16/11 - http://www.kernel.org/pub
31b8bca8ea921f9f96a57d684fa4ae0a9 - http://www.openwall.com/lists/oss-security/2013/04/16/11 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6 - https://github.com/torvalds/linux/commit/132c94e31b8bca8ea921f9f96a57d684fa4ae0a9
CVE ID: CVE-2013-1958 State: PUBLISHED Published: 2013-04-24T19:00:00Z Last Updated: 2024-08-06T15:20:37.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, which allows local users to bypass intended access restrictions by leveraging the time interval during which a user namespace has been created but a PID namespace has not been created. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=92f
CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=92f28d973cce45ef5823209aab3138eb45d8b349 - http://www.openwall.com/lists/oss-security/2013/04/16/11 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6 - https://github.com/torvalds/linux/commit/92f28d973cce45ef5823209aab3138eb45d8b349
CVE ID: CVE-2013-1959 State: PUBLISHED Published: 2013-05-03T10:00:00 Last Updated: 2024-08-06T15:20:37.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/e3211c120a85b792978bcb4be7b2886df18d27f0 - https://github.com/torvalds/linux/commit/6708075f104c3c9b04b23336bb0366ca30c3931b - http://
92978bcb4be7b2886df18d27f0 - https://github.com/torvalds/linux/commit/6708075f104c3c9b04b23336bb0366ca30c3931b - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6708075f104c3c9b04b23336bb0366ca30c3931b - http://www.openwall.com/lists/oss-security/2013/04/29/1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 - http://www.exploit-db.com/exploits/25307 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e3211c120a85b792978bcb4be7b2886df18d27f0
CVE ID: CVE-2013-1960 State: PUBLISHED Published: 2013-07-03T18:00:00 Last Updated: 2024-08-06T15:20:37.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53237 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105253.html - http://www.debian.org/security/2013/dsa-2698 - http://www.securityfocus.com/bid/59609 - http://secunia.com/adviso
html - http://www.debian.org/security/2013/dsa-2698 - http://www.securityfocus.com/bid/59609 - http://secunia.com/advisories/53765 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html - http://rhn.redhat.com/errata/RHSA-2014-0223.html - http://seclists.org/oss-sec/2013/q2/254 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105828.html - https://bugzilla.redhat.com/show_bug.cgi?id=952158 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104916.html
CVE ID: CVE-2013-1961 State: PUBLISHED Published: 2013-07-03T18:00:00 Last Updated: 2024-08-06T15:20:37.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53237 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105253.html - http://www.debian.org/security/2013/dsa-2698 - http://secunia.com/advisories/53765 - http://lists.opensuse.org/o
.html - http://www.debian.org/security/2013/dsa-2698 - http://secunia.com/advisories/53765 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html - https://bugzilla.redhat.com/show_bug.cgi?id=952131 - http://rhn.redhat.com/errata/RHSA-2014-0223.html - http://seclists.org/oss-sec/2013/q2/254 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105828.html - http://www.securityfocus.com/bid/59607 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104916.html
CVE ID: CVE-2013-1962 State: PUBLISHED Published: 2013-05-29T00:00:00 Last Updated: 2024-08-06T15:20:37.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool." Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106906.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=ca697e90d5bd6a6dfb94bfb6d4438bdf9a44b739 - http://www.openwall.com/lists/o
libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=ca697e90d5bd6a6dfb94bfb6d4438bdf9a44b739 - http://www.openwall.com/lists/oss-security/2013/05/16/9 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106921.html - http://osvdb.org/93451 - https://bugzilla.redhat.com/show_bug.cgi?id=953107 - http://www.ubuntu.com/usn/USN-1895-1 - http://www.securityfocus.com/bid/59937 - http://secunia.com/advisories/53475 - http://secunia.com/advisories/53440 - http://rhn.redhat.com/errata/RHSA-2013-0831.html - http://www.securitytracker.com/id/1028577 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00022.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84341 - https://www.red
rg/opensuse-updates/2013-06/msg00022.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84341 - https://www.redhat.com/archives/libvir-list/2013-May/msg01222.html
CVE ID: CVE-2013-1963 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:20:37.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-018/
CVE ID: CVE-2013-1964 State: PUBLISHED Published: 2013-05-21T18:00:00 Last Updated: 2024-08-06T15:20:37.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possibly have other impacts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59293 - http://secunia.com/advisories/55082 - http://www.openwall.com/lists/oss-security/2013/04/18/9 - http://security.gentoo.org/glsa/glsa-201309-24.xml - ht
5082 - http://www.openwall.com/lists/oss-security/2013/04/18/9 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2013/dsa-2666 - http://www.securitytracker.com/id/1028459 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html
CVE ID: CVE-2013-1965 State: PUBLISHED Published: 2013-07-10T19:00:00 Last Updated: 2024-08-06T15:20:37.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect. Additional Analyst Notes: - CVE Program Container: References: - http://struts.apache.org/development/2.x/docs/s2-012.html - https://bugzilla.redhat.com/show_bug.cgi?id=967655 - http://www.securityfocus.com/bid/60082
CVE ID: CVE-2013-1966 State: PUBLISHED Published: 2013-07-10T19:00:00 Last Updated: 2024-08-06T15:20:37.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60166 - https://bugzilla.redhat.com/show_bug.cgi?id=967656 - http://struts.apache.org/development/2.x/docs/s2-013.html - https://cwiki.apache.org/confluence/display/WW/S2-013
CVE ID: CVE-2013-1967 State: PUBLISHED Published: 2014-02-05T15:00:00 Last Updated: 2024-08-06T15:20:37.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud Server 5.0.x before 5.0.5 and 4.5.x before 4.5.10, allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83647 - https://github.com/johndyer/mediaelement/commit/9223dc6bfc50251a9a3cba0210e71be80fc38ecd - https://bugzilla.redhat.com/show_bug.cgi?id=955307 - http
mediaelement/commit/9223dc6bfc50251a9a3cba0210e71be80fc38ecd - https://bugzilla.redhat.com/show_bug.cgi?id=955307 - http://seclists.org/oss-sec/2013/q2/111 - http://secunia.com/advisories/53079 - http://owncloud.org/about/security/advisories/oC-SA-2013-017 - http://seclists.org/oss-sec/2013/q2/133 - https://github.com/johndyer/mediaelement/tree/2.11.1
CVE ID: CVE-2013-1968 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T15:20:37.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvTxsMFeHgc8bK2V-2PrSrKoBffTi8%2BxbHA5tocrrewWew%40mail.gmail.com%3E - http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvRK51pQsybfvsAzjxQJrmVpL0fEa1K4WGkUP9Tzz6KFDw%40mail
chives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvRK51pQsybfvsAzjxQJrmVpL0fEa1K4WGkUP9Tzz6KFDw%40mail.gmail.com%3E - http://rhn.redhat.com/errata/RHSA-2014-0255.html - http://www.ubuntu.com/usn/USN-1893-1 - https://subversion.apache.org/security/CVE-2013-1968-advisory.txt - http://www.debian.org/security/2013/dsa-2703 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18986 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html
CVE ID: CVE-2013-1969 State: PUBLISHED Published: 2013-04-25T23:00:00 Last Updated: 2024-08-06T15:20:37.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/libxml2/commit/?id=de0cc20c29cb3f056062925395e0f68d2250a46f - http://lists.opensuse.org/o
- https://git.gnome.org/browse/libxml2/commit/?id=de0cc20c29cb3f056062925395e0f68d2250a46f - http://lists.opensuse.org/opensuse-updates/2013-04/msg00109.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00081.html - https://bugzilla.gnome.org/show_bug.cgi?id=690202 - http://www.ubuntu.com/usn/USN-1817-1 - http://www.openwall.com/lists/oss-security/2013/04/17/4 - http://secunia.com/advisories/53061 - http://www.openwall.com/lists/oss-security/2013/04/19/1
CVE ID: CVE-2013-1970 State: REJECTED Published: 2013-04-25T23:00:00Z Last Updated: 2024-09-16T23:51:54.590Z Description: No description available.
CVE ID: CVE-2013-1971 State: PUBLISHED Published: 2013-06-25T18:00:00 Last Updated: 2024-08-06T15:20:37.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83649 - https://drupal.org/node/1972804 - http://www.securityfocus.com/bid/59276
CVE ID: CVE-2013-1972 State: PUBLISHED Published: 2013-06-24T16:13:00 Last Updated: 2024-08-06T15:20:37.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-04/0237.html - https://drupal.org/node/1972942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83651 - https://drupal.org/no
l - https://drupal.org/node/1972942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83651 - https://drupal.org/node/1972084 - https://drupal.org/node/1972082 - http://osvdb.org/92533
CVE ID: CVE-2013-1973 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T15:20:37.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The autocomplete callback in Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-rc1 does not properly handle node permissions, which allows remote authenticated users to obtain sensitive field values via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52996 - https://drupal.org/node/1971848 - http://osvdb.org/92532 - https://drupal.org/node/1972976 - https://drupal.org/node/1971856
CVE ID: CVE-2013-1976 State: PUBLISHED Published: 2013-07-09T17:00:00 Last Updated: 2024-08-06T15:20:37.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0871.html - http://rhn.redhat.com/errata/RHSA-2013-0869.html - h
r: References: - http://rhn.redhat.com/errata/RHSA-2013-0871.html - http://rhn.redhat.com/errata/RHSA-2013-0869.html - https://bugzilla.redhat.com/show_bug.cgi?id=927622 - http://rhn.redhat.com/errata/RHSA-2013-0870.html - http://rhn.redhat.com/errata/RHSA-2013-0872.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html
CVE ID: CVE-2013-1977 State: PUBLISHED Published: 2013-05-21T18:00:00Z Last Updated: 2024-08-06T15:20:37.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/devstack/+bug/1168252 - http://www.openwall.com/lists/oss-security/2013/04/23/7 - http://www.openwall.com/lists/oss-security/2013/04/19/2
CVE ID: CVE-2013-1978 State: PUBLISHED Published: 2013-12-12T18:00:00 Last Updated: 2024-08-06T15:20:37.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64098 - http://rhn.redhat.com/errata/RHSA-2013-1778.html - https://security.gentoo.org/glsa/201603-01 - https://bugzilla.red
8 - http://rhn.redhat.com/errata/RHSA-2013-1778.html - https://security.gentoo.org/glsa/201603-01 - https://bugzilla.redhat.com/show_bug.cgi?id=953902 - http://www.debian.org/security/2013/dsa-2813 - http://www.ubuntu.com/usn/USN-2051-1
CVE ID: CVE-2013-1979 State: PUBLISHED Published: 2013-05-03T10:00:00 Last Updated: 2024-08-06T15:20:37.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html - https://bugzilla.redhat.com/show_bug.cgi?id=955629 - http://www.mandriva.com/security/advisor
e/2013-April/103750.html - https://bugzilla.redhat.com/show_bug.cgi?id=955629 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html - http://www.openwall.com/lists/oss-security/2013/04/29/1 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://github.com/torvalds/linux/commit/83f1b4ba917db5dc5a061a44b3403ddb6e783494 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=83f1b4ba917db5dc5a061a44b3403d