Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1408 State: PUBLISHED Published: 2014-03-24T14:00:00 Last Updated: 2024-08-06T14:57:05.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search or (2) orderby parameter to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/120089/WordPress-Wysija-Newsletters-2.2-SQL-Injection.html - https://www
erences: - http://packetstormsecurity.com/files/120089/WordPress-Wysija-Newsletters-2.2-SQL-Injection.html - https://www.htbridge.com/advisory/HTB23140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81932 - http://osvdb.org/89924 - http://www.securityfocus.com/bid/57775 - http://archives.neohapsis.com/archives/bugtraq/2013-02/0030.html
CVE ID: CVE-2013-1409 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T14:57:05.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/120090/WordPress-CommentLuv-2.92.3-Cross-Site-Scripting.html - http://wordpress.org/plugins/commentluv/changelog - http://archives.neohapsis.com/archives/bugtraq/2013-02/0031.html - https://www.htbridge.com/advisory
mentluv/changelog - http://archives.neohapsis.com/archives/bugtraq/2013-02/0031.html - https://www.htbridge.com/advisory/HTB23138 - http://osvdb.org/89925
CVE ID: CVE-2013-1410 State: PUBLISHED Published: 2020-02-12T14:57:28 Last Updated: 2024-08-06T14:57:05.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-database.net/?id=59355 - https://www.securityfocus.com/bid/57514/info
CVE ID: CVE-2013-1412 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T14:57:05.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57603 - http://www.exploit-db.com/exploits/24444 - http://dleviet.com/dle/bug-fix/3281-security-patches-for-dle-97.html - http://osvdb.org/89662 - http://www.exploit-db.com/exploits/24438 - http://archives.neohapsis.com/archives/bugtraq/
ml - http://osvdb.org/89662 - http://www.exploit-db.com/exploits/24438 - http://archives.neohapsis.com/archives/bugtraq/2013-01/0117.html - http://karmainsecurity.com/KIS-2013-01 - http://secunia.com/advisories/51971
CVE ID: CVE-2013-1413 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T14:57:05.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.csnc.ch/en/modules/news/news_0076.html_533560828.html - http://secunia.com/advisories/52415 - http://seclists.org/fulldisclosure/2013/Mar/0 - http://secunia.com/advisories/56834
CVE ID: CVE-2013-1414 State: PUBLISHED Published: 2013-07-08T17:00:00Z Last Updated: 2024-09-16T20:16:50.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26528/
CVE ID: CVE-2013-1415 State: PUBLISHED Published: 2013-03-03T00:00:00 Last Updated: 2024-08-06T14:57:05.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request. Additional Analyst Notes: - CVE Program Container: References: - http
a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55040 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:157 - http://web.mit.edu/kerberos/www/krb5-1.10/ - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7570 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7577 - http://web.mit.edu/kerberos/www/krb5-1.11/ - https://github.com/krb5/krb5/commit/f249555301940c6df3a2cdda13b56b5674eebc2e - http://lists.opensuse.org/opensuse-updates/2013-03/msg00090.html
CVE ID: CVE-2013-1416 State: PUBLISHED Published: 2013-04-19T10:00:00 Last Updated: 2024-08-06T15:04:48.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS-REQ request. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:157 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00041.html - ht
riva.com/security/advisories?name=MDVSA-2013:157 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00041.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:158 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102074.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00102.html - http://lists.opensuse.org/opensuse-updates/2013-05/msg00011.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102058.html - https://github.com/krb5/krb5/commit/8ee70ec63931d1e38567905387ab9b1d45734d81 - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7600 - http://rhn.redhat.com/errata/RHSA-2013-0748.html
CVE ID: CVE-2013-1417 State: PUBLISHED Published: 2013-11-20T11:00:00 Last Updated: 2024-08-06T15:04:47.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1030743 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00026.html - http://web.mit.edu/
hat.com/show_bug.cgi?id=1030743 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00026.html - http://web.mit.edu/kerberos/krb5-1.11/README-1.11.4.txt - https://github.com/krb5/krb5/commit/4c023ba43c16396f0d199e2df1cfa59b88b62acc
CVE ID: CVE-2013-1418 State: PUBLISHED Published: 2013-11-16T02:00:00 Last Updated: 2024-08-06T15:04:47.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1026942 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00082.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html
opensuse.org/opensuse-updates/2013-11/msg00082.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html - http://advisories.mageia.org/MGASA-2013-0335.html - https://github.com/krb5/krb5/commit/c2ccf4197f697c4ff143b8a786acdd875e70a89d - http://lists.opensuse.org/opensuse-updates/2013-11/msg00086.html - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7757 - http://web.mit.edu/kerberos/krb5-1.10/README-1.10.7.txt - http://www.securityfocus.com/bid/63555 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00026.html - http://web.mit.edu/kerberos/krb5-1.11/README-1.11.4.txt
CVE ID: CVE-2013-1420 State: PUBLISHED Published: 2020-01-02T20:21:27 Last Updated: 2024-08-06T15:04:48.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to backup-edit.php; (2) title or (3) menu parameter to edit.php; or (4) path or (5) returnid parameter to filebrowser.php in admin/. NOTE: the path parameter in admin/upload.php vector is already covered by CVE-2012-6621. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23141 - http://archives.neohapsis.com/a
tes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23141 - http://archives.neohapsis.com/archives/bugtraq/2013-05/0005.html - http://get-simple.info/changelog
CVE ID: CVE-2013-1421 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T15:04:47.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Category Name field to category.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/webcalendar/files/webcalendar%201.2/1.2.7/ - http://osvdb.org/90669 - http://securitymaverick.com/vulnerability-cve-2013-1421-webcalendar-1-2-5-1-2-6-category-name-persistent-xss/
CVE ID: CVE-2013-1422 State: PUBLISHED Published: 2020-02-04T13:39:27 Last Updated: 2024-08-06T15:04:47.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: webcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user"). Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/22/8 - http://www.openwall.com/lists/oss-security/2013/07/25/4 - https://www.securityfocus.com/bid/58250/info
CVE ID: CVE-2013-1423 State: PUBLISHED Published: 2013-03-12T16:00:00Z Last Updated: 2024-09-17T02:27:55.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-specific/group_dump_update.pl, (5) deb-specific/ssh_dump_update.pl, (6) deb-specific/user_dump_update.pl, (7) plugins/scmbzr/common/BzrPlugin.class.php, (8) plugins/scmcvs/common/CVSPlugin.class.php, (9) plugins/scmcvs/cronjobs/cvs.php, (10) plugins/scmcvs/cronjobs/ssh_create.php, (11) plugins/scmgit/common/GitPlugin.class.php, (12) plugins/scmsvn/common/SVNPlugin.class.php, (13) plugins/wiki/cronjobs/create_groups.php, (1
on/GitPlugin.class.php, (12) plugins/scmsvn/common/SVNPlugin.class.php, (13) plugins/wiki/cronjobs/create_groups.php, (14) utils/cvs1/cvscreate.sh, and (15) utils/include.pl in FusionForge 5.0, 5.1, and 5.2 allows local users to change arbitrary file permissions, obtain sensitive information, and have other unspecified impacts via a (1) symlink or (2) hard link attack on certain files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58143 - http://www.debian.org/security/2013/dsa-2633 - https://fusionforge.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=fusionforge/fusionforge.git%3Ba=commitdiff%3Bh=9937b9d94ab60ff67fe249c1b9a6c8e3fc1778ba - https://
/cgi-bin/gitweb.cgi?p=fusionforge/fusionforge.git%3Ba=commitdiff%3Bh=9937b9d94ab60ff67fe249c1b9a6c8e3fc1778ba - https://fusionforge.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=fusionforge/fusionforge.git%3Ba=commitdiff%3Bh=1fc730b97c797e03b89cd37823ab345d35286cf4 - https://fusionforge.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=fusionforge/fusionforge.git%3Ba=commitdiff%3Bh=0cc51b3aca51fa915a35195fdf729bcdb903f2af - http://www.openwall.com/lists/oss-security/2013/02/25/5 - http://secunia.com/advisories/52371 - http://secunia.com/advisories/52318 - http://osvdb.org/90605
CVE ID: CVE-2013-1424 State: PUBLISHED Published: 2025-06-26T20:02:13.658Z Last Updated: 2025-06-26T20:20:42.726Z Vendors: matplotlib Products: matplotlib Description: Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugs.debian.org/775691 - https://github.com/matplotlib/matplotlib/commit/ba4016014cb4fb4927e36ce8ea429fed47dcb787
CVE ID: CVE-2013-1425 State: PUBLISHED Published: 2019-11-07T20:40:53 Last Updated: 2024-08-06T15:04:47.859Z Vendors: ldap-git-backup Products: ldap-git-backup Problem Types: Insecure Permissions Description: ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1425 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1096253.html - https://github.com/elmar/ldap-git-backup/commit/a90f3217fce87962db82d212f73af70693087124
CVE ID: CVE-2013-1426 State: PUBLISHED Published: 2019-11-07T20:46:19 Last Updated: 2024-08-06T15:04:48.401Z Vendors: mahara Products: mahara Problem Types: Cross-Site Scripting Description: Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1426 - https://mahara.org/interaction/forum/topic.php?id=5365 - https://bugs.launchpad.net/mahara/+bug/1153423
CVE ID: CVE-2013-1427 State: PUBLISHED Published: 2013-03-21T17:00:00 Last Updated: 2024-08-06T15:04:48.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP via a symlink attack or a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/91462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82897 - http://www.securityfocus.com/bid/58528 -
osvdb.org/91462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82897 - http://www.securityfocus.com/bid/58528 - http://www.debian.org/security/2013/dsa-2649
CVE ID: CVE-2013-1428 State: PUBLISHED Published: 2013-04-26T16:00:00 Last Updated: 2024-08-06T15:04:48.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of service (crash) or possibly execute arbitrary code via a large TCP packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gsliepen/tinc/commit/17a33dfd95b1a29e90db76414eb9622df9632320 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105559.html - http://www.tinc-vpn.org/pipermail/tinc/2013-April/
s.fedoraproject.org/pipermail/package-announce/2013-May/105559.html - http://www.tinc-vpn.org/pipermail/tinc/2013-April/003240.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106167.html - http://www.tinc-vpn.org/news/ - http://osvdb.org/92653 - http://secunia.com/advisories/53087 - http://secunia.com/advisories/53108 - http://www.debian.org/security/2013/dsa-2663 - http://www.securityfocus.com/bid/59369 - http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105531.html - http://freecode.com/projects/tinc/releases/354122
CVE ID: CVE-2013-1429 State: PUBLISHED Published: 2019-11-07T21:42:08 Last Updated: 2024-08-06T15:04:48.418Z Vendors: lintian Products: lintian Problem Types: Symbolic Link Following Description: Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1429 - https://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-1429.html - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1113881.html - https://bugs.launchpad.net/ubuntu/+source/lintian/+bug/1169636
CVE ID: CVE-2013-1430 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-06T15:04:48.284Z Vendors: n/a Products: xrdp before 0.9.1 Problem Types: cleartext password exposure Description: An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1430 - https://github.com/neutrinolabs/xrdp/pull/497 - http://www.securityfocus.com/bid/94958
CVE ID: CVE-2013-1431 State: PUBLISHED Published: 2013-09-23T20:00:00 Last Updated: 2024-08-06T15:04:48.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q2/438 - http://secunia.com/advisories/53779 - http://www.ubuntu.com/usn/USN-1873-1 - https://bugs.freedesktop.org/show_bug.cgi?id=65036 - http://www.
visories/53779 - http://www.ubuntu.com/usn/USN-1873-1 - https://bugs.freedesktop.org/show_bug.cgi?id=65036 - http://www.debian.org/security/2013/dsa-2702
CVE ID: CVE-2013-1432 State: PUBLISHED Published: 2013-08-28T17:00:00 Last Updated: 2024-08-06T15:04:48.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on pages stored for deferred cleanup, which allows local PV guest kernels to cause a denial of service (premature page free and hypervisor crash) or possibly gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.openwall.com/lists/oss-security/2013/06/26/5 - http://support.citrix.com
gentoo.org/glsa/glsa-201309-24.xml - http://www.openwall.com/lists/oss-security/2013/06/26/5 - http://support.citrix.com/article/CTX138134 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006
CVE ID: CVE-2013-1433 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1434 State: PUBLISHED Published: 2013-08-23T16:00:00 Last Updated: 2024-08-06T15:04:48.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in (1) api_poller.php and (2) utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54181 - http://www.securityfocus.com/bid/61657 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00053.html - http://www.debian.org/security/2012/dsa-2739 - http://secunia.com/advisories/54386 - http://svn.cacti.net/viewvc?view=rev&revision=7394
an.org/security/2012/dsa-2739 - http://secunia.com/advisories/54386 - http://svn.cacti.net/viewvc?view=rev&revision=7394 - http://www.securitytracker.com/id/1028893 - http://forums.cacti.net/viewtopic.php?f=21&t=50593 - http://www.openwall.com/lists/oss-security/2013/08/07/15
CVE ID: CVE-2013-1435 State: PUBLISHED Published: 2013-08-23T16:00:00 Last Updated: 2024-08-06T15:04:48.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54181 - http://svn.cacti.net/viewvc?view=rev&revision=7392 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00053.html - http://www.debian.org/security/2012/dsa-2739 - http://secunia.com/advisories/54386 - http://svn.cacti.net/viewvc?view=rev&revision=7393 - http://forums.ca
2/dsa-2739 - http://secunia.com/advisories/54386 - http://svn.cacti.net/viewvc?view=rev&revision=7393 - http://forums.cacti.net/viewtopic.php?f=21&t=50593 - http://www.openwall.com/lists/oss-security/2013/08/07/15
CVE ID: CVE-2013-1436 State: PUBLISHED Published: 2014-10-06T23:00:00 Last Updated: 2024-08-06T15:04:48.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61491 - http://security.gentoo.org/glsa/glsa-201405-28.xml - http://www.openwall.com/lists/oss-security/2013/07/26/5 - http://handra.rampa.sk/dawb/patch?repoPURL=http%3A%2F%2Fc
ml - http://www.openwall.com/lists/oss-security/2013/07/26/5 - http://handra.rampa.sk/dawb/patch?repoPURL=http%3A%2F%2Fcode.haskell.org%2FXMonadContrib&repoPHash=20130708144813-1499c-0c3e284d3523c0694b9423714081761813bc1e89
CVE ID: CVE-2013-1437 State: PUBLISHED Published: 2020-01-28T14:24:02 Last Updated: 2024-08-06T15:04:48.318Z Vendors: Perl Toolchain Gang Products: Module-Metadata Problem Types: Eval Injection Description: Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/changes/distribution/Module-Metadata - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114904.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114912.html