Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2635 State: PUBLISHED Published: 2013-03-22T10:00:00 Last Updated: 2024-08-06T15:44:32.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.ubuntu.com/usn/USN-1812-1 - https://github.com/torvalds/linux/commit/84d73cd3fb142bf1298a8c13fd4ca50fd2432372 - http://www.mandriva.com
USN-1812-1 - https://github.com/torvalds/linux/commit/84d73cd3fb142bf1298a8c13fd4ca50fd2432372 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://www.ubuntu.com/usn/USN-1809-1 - http://www.ubuntu.com/usn/USN-1814-1 - https://bugzilla.redhat.com/show_bug.cgi?id=923652 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1813-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=84d73cd3fb142bf1298a8c13fd4ca50fd2432372 - http://www.openwall.com/lists/oss-security/2013/03/20/1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 - http:/
/www.openwall.com/lists/oss-security/2013/03/20/1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 - http://www.ubuntu.com/usn/USN-1811-1
CVE ID: CVE-2013-2636 State: PUBLISHED Published: 2013-03-22T10:00:00Z Last Updated: 2024-09-17T03:27:31.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/bridge/br_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/c085c49920b2f900ba716b4ca1c1a55ece9872cc - https://bugzilla.redhat.com/show_bug.cgi?id=923652 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c085c49920b2f900ba716b4ca1c1a55ece9872cc - http://www
rnel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c085c49920b2f900ba716b4ca1c1a55ece9872cc - http://www.openwall.com/lists/oss-security/2013/03/20/1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4
CVE ID: CVE-2013-2637 State: PUBLISHED Published: 2020-02-12T16:07:19 Last Updated: 2024-08-06T15:44:32.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html - http://www.securityfocus.com/bid/58930 - http://www.exploit-db.com/exploits/24922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83288
CVE ID: CVE-2013-2639 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T15:44:32.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the description in a project folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/31517 - http://osvdb.org/103117
CVE ID: CVE-2013-2640 State: PUBLISHED Published: 2013-03-22T17:00:00Z Last Updated: 2024-09-16T22:34:59.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks via unspecified vectors related to "formData=save" requests, a different version than CVE-2013-0731. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset?new=682420 - http://secunia.com/advisories/51917 - http://wordpress.org/extend/plugins
gins.trac.wordpress.org/changeset?new=682420 - http://secunia.com/advisories/51917 - http://wordpress.org/extend/plugins/wp-mailup/changelog/ - http://osvdb.org/91274
CVE ID: CVE-2013-2641 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T15:44:32.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multiple_Vulnerabilities.txt - http://www.sophos.com/en-us/support/knowledgebase/118969.aspx
CVE ID: CVE-2013-2642 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T15:44:32.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the client-ip parameter to the Block page, when using the user_workstation variable in a customized template, and remote authenticated users to execute arbitrary commands via shell metacharacters in the (2) url parameter to the Diagnostic Tools functionality or (3) entries parameter to the Local Site List functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult
Local Site List functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multiple_Vulnerabilities.txt - http://www.sophos.com/en-us/support/knowledgebase/118969.aspx
CVE ID: CVE-2013-2643 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T15:44:32.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) xss parameter in an allow action to rss.php, (2) msg parameter to end-user/errdoc.php, (3) h parameter to end-user/ftp_redirect.php, or (4) threat parameter to the Blocked component. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multi
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multiple_Vulnerabilities.txt - http://www.sophos.com/en-us/support/knowledgebase/118969.aspx
CVE ID: CVE-2013-2644 State: REJECTED Published: 2014-10-05T01:00:00 Last Updated: 2014-10-06T01:57:00 Description: No description available.
CVE ID: CVE-2013-2645 State: PUBLISHED Published: 2014-10-06T01:00:00 Last Updated: 2024-08-06T15:44:32.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_120405 allow remote attackers to hijack the authentication of administrators for requests that (1) enable FTP access (aka "FTP directory traversal") to /tmp via the shareEntire parameter to userRpm/NasFtpCfgRpm.htm, (2) change the FTP administrative password via the nas_admin_pwd parameter to userRpm/NasUserAdvRpm.htm, (3) enable FTP on the WAN interface via the internetA parameter to userRpm/NasFtpCfgRpm.htm,
userRpm/NasUserAdvRpm.htm, (3) enable FTP on the WAN interface via the internetA parameter to userRpm/NasFtpCfgRpm.htm, (4) launch the FTP service via the startFtp parameter to userRpm/NasFtpCfgRpm.htm, or (5) enable or disable bandwidth limits via the QoSCtrl parameter to userRpm/QoSCfgRpm.htm. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/knowledge/case_studies/routers/tp-link_wr1043n.php
CVE ID: CVE-2013-2646 State: PUBLISHED Published: 2020-02-03T16:33:02 Last Updated: 2024-08-06T15:44:32.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/59472
CVE ID: CVE-2013-2651 State: PUBLISHED Published: 2013-10-23T15:00:00 Last Updated: 2024-08-06T15:44:33.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) "p" or (2) content parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-10/0033.html - http://packetstormsecurity.com/files/123558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87809
CVE ID: CVE-2013-2652 State: PUBLISHED Published: 2013-11-02T18:00:00 Last Updated: 2024-08-06T15:44:33.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55295 - http://packetstormsecurity.com/files/123771/WebCollab-3.30-HTTP-Response-Splitting.html - http://archives.neohapsis.com/archives/bugtraq/2013-10/0117.html - http://osvdb.org/98768 - https://exchange.xforce.ibmcloud.com/
chives.neohapsis.com/archives/bugtraq/2013-10/0117.html - http://osvdb.org/98768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88177 - http://www.securityfocus.com/bid/63247 - http://secunia.com/advisories/55235 - http://sourceforge.net/p/webcollab/mailman/message/31536457/
CVE ID: CVE-2013-2653 State: PUBLISHED Published: 2013-11-13T00:00:00Z Last Updated: 2024-09-17T00:42:29.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote attackers to conduct phishing attacks without detection by the victim. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chillu/silverstripe-framework/commit/3e88c98ca513880e2b43ed7f27ade17fef5d9170 - http://seclists.org/bugtraq/2013/Aug/12
CVE ID: CVE-2013-2670 State: PUBLISHED Published: 2014-03-14T14:00:00 Last Updated: 2024-08-06T15:44:33.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name (QUERY_STRING) to admin/admin_main.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2671. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cro
-javascript-injection-brother-mfc.html - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - http://osvdb.org/ref/93/brother-mfc-9970cdw-firmware-g-v103-by-hoyt-03072013.html - http://osvdb.org/93068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84095 - http://osvdb.org/ref/93/brother-mfc9970cdw-firmware-l-110-hoytllc-report.html
CVE ID: CVE-2013-2671 State: PUBLISHED Published: 2014-03-14T14:00:00 Last Updated: 2024-08-06T15:44:33.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) val parameter to admin/admin_main.html; (3) id, (4) val, or (5) arbitrary parameter name (QUERY_STRING) to admin/profile_settings_net.html; or (6) kind or (7) arbitrary parameter name (QUERY_STRING) to fax/general_setup.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2670. Additional Analyst Notes: - CVE Program Containe
p.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2670. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html - http://osvdb.org/93092 - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - http://osvdb.org/93093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84093 - http://osvdb.org/ref/93/brother-mfc9970cdw-firmware-l-110-hoytllc-report.html
CVE ID: CVE-2013-2672 State: PUBLISHED Published: 2020-02-03T16:39:45 Last Updated: 2024-08-06T15:44:33.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84094
CVE ID: CVE-2013-2673 State: PUBLISHED Published: 2020-02-03T17:06:02 Last Updated: 2024-08-06T15:44:33.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - https://www.securityfocus.com/bid/59727
CVE ID: CVE-2013-2674 State: PUBLISHED Published: 2020-02-03T17:36:59 Last Updated: 2024-08-06T15:44:33.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84091 - https://www.securityfocus.com/bid/59725
CVE ID: CVE-2013-2675 State: PUBLISHED Published: 2020-02-05T17:30:25 Last Updated: 2024-08-06T15:44:33.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84092 - https://www.securityfocus.com/bid/59724
CVE ID: CVE-2013-2676 State: PUBLISHED Published: 2020-02-04T14:05:13 Last Updated: 2024-08-06T15:44:33.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84090 - https://www.securityfocus.com/bid/59726
CVE ID: CVE-2013-2678 State: PUBLISHED Published: 2020-02-04T14:15:06 Last Updated: 2024-08-06T15:44:33.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59710 - http://www.exploit-db.com/exploits/25292 - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - h
292 - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84072
CVE ID: CVE-2013-2679 State: PUBLISHED Published: 2020-02-18T16:26:54 Last Updated: 2024-08-06T15:44:33.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web script or HTML via the (1) log_type, (2) ping_ip, (3) ping_size, (4) submit_type, or (5) traceroute_ip parameter to apply.cgi or (6) new_workgroup or (7) submit_button parameter to storage/apply.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html - http://packetstormsecurity.com/files
erences: - http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - http://osvdb.org/93059 - http://osvdb.org/93060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84069
CVE ID: CVE-2013-2680 State: PUBLISHED Published: 2020-02-05T20:47:20 Last Updated: 2024-08-06T15:44:33.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59712 - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84073
CVE ID: CVE-2013-2681 State: PUBLISHED Published: 2020-02-05T20:51:41 Last Updated: 2024-08-06T15:44:33.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59714 - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84068
CVE ID: CVE-2013-2682 State: PUBLISHED Published: 2020-02-05T20:55:27 Last Updated: 2024-08-06T15:44:33.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59717 - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84071
CVE ID: CVE-2013-2683 State: PUBLISHED Published: 2020-02-06T20:15:50 Last Updated: 2024-08-06T15:44:33.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59713 - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84067
CVE ID: CVE-2013-2684 State: PUBLISHED Published: 2020-02-06T20:18:51 Last Updated: 2024-08-06T15:44:33.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59716 - http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/84070
CVE ID: CVE-2013-2685 State: PUBLISHED Published: 2013-03-29T18:00:00Z Last Updated: 2024-09-16T16:44:08.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.asterisk.org/pub/security/AST-2013-001.html - https://issues.asterisk.org/jira/browse/ASTERISK-20901
CVE ID: CVE-2013-2686 State: PUBLISHED Published: 2013-03-29T18:00:00Z Last Updated: 2024-09-16T22:35:02.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which allows remote attackers to conduct stack-consumption attacks and cause a denial of service (daemon crash) via a crafted HTTP POST request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-5976. Additional Anal
rafted HTTP POST request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-5976. Additional Analyst Notes: - CVE Program Container: References: - https://issues.asterisk.org/jira/browse/ASTERISK-20967 - http://telussecuritylabs.com/threats/show/TSL20130327-01 - http://downloads.asterisk.org/pub/security/AST-2013-002.html
CVE ID: CVE-2013-2687 State: PUBLISHED Published: 2013-07-12T16:00:00Z Last Updated: 2024-09-17T03:33:05.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/qnxph_1-adv.txt - http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01 - http://w
s: - http://aluigi.altervista.org/adv/qnxph_1-adv.txt - http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01 - http://www.qnx.com/download/feature.html?programid=24850
CVE ID: CVE-2013-2688 State: PUBLISHED Published: 2013-07-12T16:00:00Z Last Updated: 2024-09-16T19:05:19.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of the /dev/photon device file. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/qnxph_1-adv.txt - http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01 - http://www.qnx.com/download/feat
vista.org/adv/qnxph_1-adv.txt - http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01 - http://www.qnx.com/download/feature.html?programid=24850