Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ber/119820.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html - http://www.securityfocus.com/bid/63022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88060
CVE ID: CVE-2013-4411 State: PUBLISHED Published: 2019-12-03T14:39:53 Last Updated: 2024-08-06T16:45:14.255Z Vendors: Review Board Products: Review Board Problem Types: URL processing allows unauthorized users to view review lists Description: Review Board: URL processing gives unauthorized users access to review lists Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html - https://security-tracker.debian.org/tracker/CVE-2013-4411 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4411 - https://access.redhat.com/security/cve/cve-2013-4411 - http://lists.fedoraproject.org/pipermail/package-annou
013-4411 - https://access.redhat.com/security/cve/cve-2013-4411 - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html - http://www.securityfocus.com/bid/63023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88061
CVE ID: CVE-2013-4412 State: PUBLISHED Published: 2019-11-04T12:44:54 Last Updated: 2024-08-06T16:45:12.766Z Vendors: slim Products: slim Problem Types: ptr dereference Description: slim has NULL pointer dereference when using crypt() method from glibc 2.17 Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4412 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4412 - https://access.redhat.com/security/cve/cve-2013-4412 - http://www.openwall.com/lists/oss-security/2013/10/09/6 - http://www.securityfocus.com/bid/62906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89675
CVE ID: CVE-2013-4413 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:45:14.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in controller/concerns/render_redirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F (encoded dot dot slash) in the step. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55151 - https://github.com/schneems/wicked/commit/fe31bb2533fffc9d098c69ebeb7afc3b80509f53 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87783 - http://www.securityfocus.com/bid/62891 - http://seclists.org/oss-s
/exchange.xforce.ibmcloud.com/vulnerabilities/87783 - http://www.securityfocus.com/bid/62891 - http://seclists.org/oss-sec/2013/q4/43
CVE ID: CVE-2013-4414 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T16:45:14.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=998606 - http://rhn.redhat.com/errata/RHSA-2013-1851.html - http://rhn.redhat.com/errata/RHSA-2013-1852.html
CVE ID: CVE-2013-4415 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T16:45:13.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_ye
ing, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED. Additional Analyst Notes: - CVE Program Container: References: - http
stems search, related to PAGE_SIZE_LABEL_SELECTED. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=979452 - http://secunia.com/advisories/56952 - http://rhn.redhat.com/errata/RHSA-2014-0148.html - https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f - https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html
CVE ID: CVE-2013-4416 State: PUBLISHED Published: 2013-11-02T19:00:00 Last Updated: 2024-08-06T16:45:14.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest domains to cause a denial of service (domain shutdown) via a large message reply. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.securitytracker.com/id/1029264 - http://osvdb.org/99072 - http://www.openwall.com/lists/oss-security/2013/10/29/5 - http://www.securityfocus.com/bid/63404 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html -
13/10/29/5 - http://www.securityfocus.com/bid/63404 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
CVE ID: CVE-2013-4417 State: REJECTED Published: 2013-12-02T22:00:00 Last Updated: 2013-12-02T21:57:00 Description: No description available.
CVE ID: CVE-2013-4418 State: REJECTED Published: 2013-12-19T22:00:00 Last Updated: 2013-12-19T21:57:00 Description: No description available.
CVE ID: CVE-2013-4419 State: PUBLISHED Published: 2013-11-05T20:00:00 Last Updated: 2024-08-06T16:45:14.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1536.html - http://secunia.com/advisories/55813 - https://www.redhat.com/
nces: - http://rhn.redhat.com/errata/RHSA-2013-1536.html - http://secunia.com/advisories/55813 - https://www.redhat.com/archives/libguestfs/2013-October/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=1016960 - http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00001.html
CVE ID: CVE-2013-4420 State: PUBLISHED Published: 2014-02-20T16:00:00 Last Updated: 2024-08-06T16:45:14.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731860 - http://www.debian.org/security/2014/dsa-2863 - https://lists.feep.net:8080/pipermail/libtar/2014-February/000403.html
CVE ID: CVE-2013-4421 State: PUBLISHED Published: 2013-10-25T23:00:00 Last Updated: 2024-08-06T16:45:14.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55173 - https://matt.ucc.asn.au/dropbear/CHANGES - https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html - http://lists.opensuse
bf76f54de6f - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html - http://www.securityfocus.com/bid/62958 - https://support.citrix.com/article/CTX216642 - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119300.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html - http://www.openwall.com/lists/oss-security/2013/10/11/4
CVE ID: CVE-2013-4422 State: PUBLISHED Published: 2013-10-23T15:00:00 Last Updated: 2024-08-06T16:45:13.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message. Additional Analyst Notes: - CVE Program Container: References: - http://quassel-irc.org/node/120 - http://secunia.com/advisories/55194 - http://secunia.com/advisories/55581 - http://bugs.quassel-irc.org/issues/1244 - http://seclists.org/oss-sec/2013/q4/74 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87805 - htt
/issues/1244 - http://seclists.org/oss-sec/2013/q4/74 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87805 - http://security.gentoo.org/glsa/glsa-201311-03.xml - http://www.securityfocus.com/bid/62923
CVE ID: CVE-2013-4423 State: PUBLISHED Published: 2019-11-04T12:49:35 Last Updated: 2024-08-06T16:45:14.592Z Vendors: CloudForms Products: CloudForms Problem Types: user password stored in recoverable format Description: CloudForms stores user passwords in recoverable format Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4423 - https://access.redhat.com/security/cve/cve-2013-4423
CVE ID: CVE-2013-4424 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T16:45:14.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1843.html
CVE ID: CVE-2013-4425 State: PUBLISHED Published: 2013-11-15T18:16:00 Last Updated: 2024-08-06T16:45:14.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/99518 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0029.html - http://www.securityfocus.com/bid/63566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88606
CVE ID: CVE-2013-4426 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T16:45:13.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/109 - https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG - https://github.com/leonnnn/pyxtrlock/issues/8
CVE ID: CVE-2013-4427 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T16:45:14.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/25/16 - https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG - http://www.openwall.com/lists/oss-security/2013/10/16/8
CVE ID: CVE-2013-4428 State: PUBLISHED Published: 2013-10-27T00:00:00 Last Updated: 2024-08-06T16:45:14.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1525.html - http://www.ubuntu.com/usn/USN-2003-1 - https://launchpad.net/glance/+milestone/2013.1.4 - https://bugs.launch
525.html - http://www.ubuntu.com/usn/USN-2003-1 - https://launchpad.net/glance/+milestone/2013.1.4 - https://bugs.launchpad.net/glance/+bug/1235378 - http://www.openwall.com/lists/oss-security/2013/10/15/8 - http://www.securityfocus.com/bid/63159 - http://www.openwall.com/lists/oss-security/2013/10/16/9 - https://bugs.launchpad.net/glance/+bug/1235226 - https://launchpad.net/glance/+milestone/2013.2
CVE ID: CVE-2013-4429 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T16:45:13.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the (1) artefact id in an upload action when creating a journal or (2) instconf_artefactid_selected[ID] parameter in an upload action when editing a block. Additional Analyst Notes: - CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=5753 - http://www.openwall.com/lists/oss-security/2013/10/08/3 - http://www.
//mahara.org/interaction/forum/topic.php?id=5753 - http://www.openwall.com/lists/oss-security/2013/10/08/3 - http://www.openwall.com/lists/oss-security/2013/10/15/1 - https://bugs.launchpad.net/mahara/+bug/1211758 - http://www.openwall.com/lists/oss-security/2013/10/16/7
CVE ID: CVE-2013-4430 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T16:45:13.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML via the Host header to lib/web.php. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1175446 - http://www.openwall.com/lists/oss-security/2013/10/08/3 - https://mahara.org/interaction/forum/topic.php?id=5754 - http://www.openwall.com/lists/oss-security/2013/10/15/1 - http://www.openwall.com/lists/oss-sec
orum/topic.php?id=5754 - http://www.openwall.com/lists/oss-security/2013/10/15/1 - http://www.openwall.com/lists/oss-security/2013/10/16/7
CVE ID: CVE-2013-4431 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T16:45:13.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request. Additional Analyst Notes: - CVE Program Container: References: - https://mahara.org/interaction/forum/topic.php?id=5753 - http://www.openwall.com/lists/oss-security/2013/10/08/3 - http://www.openwall.com/lists/oss-security/2013/10/15/1 - http://www.openwall.com/lists/oss-security/2013/10/16/7 - https://bugs.launchpad.n
com/lists/oss-security/2013/10/15/1 - http://www.openwall.com/lists/oss-security/2013/10/16/7 - https://bugs.launchpad.net/mahara/+bug/1233500
CVE ID: CVE-2013-4432 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T16:45:13.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary folders (1) by leveraging an active folder tab loaded before permissions were removed or (2) via the folder parameter to artefact/file/groupfiles.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/08/3 - https://mahara.org/interaction/forum/topic.php?id=5864 - http://www.openwall.com/lists/os
ts/oss-security/2013/10/08/3 - https://mahara.org/interaction/forum/topic.php?id=5864 - http://www.openwall.com/lists/oss-security/2013/10/15/1 - http://www.openwall.com/lists/oss-security/2013/10/16/7 - https://bugs.launchpad.net/mahara/+bug/1034180
CVE ID: CVE-2013-4433 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:45:14.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pecl.php.net/package-changelog.php?package=xhprof&release=0.9.4 - https://bugzilla.redhat.com/show_bug.cgi?id=1018114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88085 - http://www.openwall.com/lists/oss-security/2013/10/16/10 - http://www.securityfocus.com/bid/62928
CVE ID: CVE-2013-4434 State: PUBLISHED Published: 2013-10-25T23:00:00 Last Updated: 2024-08-06T16:45:14.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55173 - https://matt.ucc.asn.au/dropbear/CHANGES - http://www.securityfocus.com/bid/62993 - http://www.openwall.com/lists/oss-security/2013/10/16/11 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html -
/www.openwall.com/lists/oss-security/2013/10/16/11 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html - https://support.citrix.com/article/CTX216642 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html - https://secure.ucc.asn.au/hg/dropbear/rev/d7784616409a
CVE ID: CVE-2013-4435 State: PUBLISHED Published: 2013-11-05T18:00:00Z Last Updated: 2024-09-17T01:36:05.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/18/3 - http://docs.saltstack.com/topics/releases/0.17.1.html
CVE ID: CVE-2013-4436 State: PUBLISHED Published: 2013-11-05T18:00:00Z Last Updated: 2024-09-16T22:41:15.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/18/3 - http://docs.saltstack.com/topics/releases/0.17.1.html
CVE ID: CVE-2013-4437 State: PUBLISHED Published: 2013-11-05T18:00:00Z Last Updated: 2024-09-17T04:04:59.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/18/3 - http://docs.saltstack.com/topics/releases/0.17.1.html
CVE ID: CVE-2013-4438 State: PUBLISHED Published: 2013-11-05T18:00:00Z Last Updated: 2024-09-17T03:54:13.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/18/3 - http://docs.saltstack.com/topics/releases/0.17.1.html
CVE ID: CVE-2013-4439 State: PUBLISHED Published: 2013-11-05T18:00:00Z Last Updated: 2024-09-16T16:18:55.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/10/18/3 - https://github.com/saltstack/salt/pull/7356 - http://docs.saltstack.com/topics/releases/0.17.1.html
CVE ID: CVE-2013-4440 State: PUBLISHED Published: 2014-12-19T15:00:00 Last Updated: 2024-08-06T16:45:14.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/06/06/1 - http://sourceforge.net/p/pwgen/code/ci/00118ccac4656adb028504639b313d7b09e62b79/ - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146237.html - http://lists.fedoraproject.org/pipermail/package-announce/201
org/pipermail/package-announce/2014-December/146237.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146015.html - http://www.openwall.com/lists/oss-security/2013/10/16/15 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:008 - http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146285.html - http://advisories.mageia.org/MGASA-2014-0535.html
CVE ID: CVE-2013-4441 State: PUBLISHED Published: 2020-01-27T16:08:55 Last Updated: 2024-08-06T16:45:14.717Z Vendors: Pwgen Products: Pwgen Problem Types: Password Description: The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726578 - http://www.openwall.com/lists/oss-security/2013/06/06/1 - http://www.openwall.com/lists/oss-security/2013/10/16/15 - https://www.openwall.com/lists/oss-security/2012/01/22/6