Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7265 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://rhn.redhat.com/errata/RHSA-2014-0159.html - http://www.ubuntu.com/usn/USN-2138-1 - http://w
.com/usn/USN-2135-1 - http://rhn.redhat.com/errata/RHSA-2014-0159.html - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2108-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.ubuntu.com/usn/USN-2110-1 - http://seclists.org/oss-sec/2014/q1/29 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - https://github.com/torvalds/linux/commit/bceaa90240b6019ed73b49965eac7d167610be69 - http://www.ubuntu.com/usn/USN-2117-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1035875 - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-
/bugzilla.redhat.com/show_bug.cgi?id=1035875 - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html - http://www.ubuntu.com/usn/USN-2107-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69 - http://www.openwall.com/lists/oss-security/2013/11/28/13 - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7266 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www
www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1039845 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - http://www.ubuntu.com/usn/USN-2117-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 -
f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.openwall.com/lists/oss-security/2013/12/31/7 - https://github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7267 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/us
/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1039845 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - http://www.ubuntu.com/usn/USN-2117-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.ope
bf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.openwall.com/lists/oss-security/2013/12/31/7 - https://github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7268 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN
USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1039845 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - http://www.ubuntu.com/usn/USN-2117-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.openwall
7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.openwall.com/lists/oss-security/2013/12/31/7 - https://github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7269 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/us
bf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.openwall.com/lists/oss-security/2013/12/31/7 - https://github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://www.securityfocus.com/bid/64742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90130 - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7270 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com
com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1039845 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90131 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - http://www.ubuntu.com/usn/USN-2117-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisori
/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.openwall.com/lists/oss-security/2013/12/31/7 - https://github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://www.securityfocus.com/bid/64744 - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7271 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN
USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.securityfocus.com/bid/64746 - https://bugzilla.redhat.com/show_bug.cgi?id=1039845 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - http://www.ubuntu.com/usn/USN-2117-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu
.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.openwall.com/lists/oss-security/2013/12/31/7 - https://github.com/torvalds/linux/commit/f3d3342602f8bcbf37d7c46641cb9bca7618eb1c - https://exchange.xforce.ibmcloud.com/vulnerabilities/90132 - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7273 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:20.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/01/07/10 - https://bugzilla.gnome.org/show_bug.cgi?id=704284 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683338 - http://www.openwall.com/lists/oss-security/2014/01/07/16 - https://bugzilla.redhat.com/
i-bin/bugreport.cgi?bug=683338 - http://www.openwall.com/lists/oss-security/2014/01/07/16 - https://bugzilla.redhat.com/show_bug.cgi?id=1050745
CVE ID: CVE-2013-7274 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T18:01:20.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30356 - http://secunia.com/advisories/56205 - http://www.securityfocus.com/bid/64480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89913
CVE ID: CVE-2013-7275 State: PUBLISHED Published: 2014-01-08T15:00:00Z Last Updated: 2024-09-16T19:45:42.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mybb/mybb/commit/6212bc954d72caf591e141ca36b8df964387bee8 - http://blog.mybb.com/2013/12/16/mybb-1-6-12-released-security-maintenance-release - http://secunia.com/advisories/55945 - http://www.securityfocus.com/bid/64570 - http://osvdb.or
ity-maintenance-release - http://secunia.com/advisories/55945 - http://www.securityfocus.com/bid/64570 - http://osvdb.org/101545
CVE ID: CVE-2013-7276 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T18:01:20.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the current_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124587/WordPress-Recommend-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/89989 - http://secunia.com/advisories/56209 - http://osvdb.org/101487
CVE ID: CVE-2013-7277 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T18:01:20.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to saa.php, (2) username parameter to login.php, or (3) keyword_list parameter to keysearch.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64550 - http://osvdb.org/101492 - https://www.netsparker.com/critical-xss-vulnerabilities-andy-php-knowledgebase - http://sourceforge.net/p/
.org/101492 - https://www.netsparker.com/critical-xss-vulnerabilities-andy-php-knowledgebase - http://sourceforge.net/p/aphpkb/code/91 - http://aphpkb.blogspot.dk/2013/12/release-of-aphpkb-0958.html - http://osvdb.org/101467 - http://osvdb.org/101491 - http://secunia.com/advisories/56228
CVE ID: CVE-2013-7278 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T18:01:20.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89988 - http://www.securityfocus.com/bid/64572
CVE ID: CVE-2013-7279 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T18:01:20.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3 Video plugin before 0.983 for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/s3-video/changelog - http://secunia.com/advisories/56167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89866 - http://plugins.trac.wordpress.org/changeset?old_path=%2Fs3-video&old=823847&new_path=%2Fs3-video
vulnerabilities/89866 - http://plugins.trac.wordpress.org/changeset?old_path=%2Fs3-video&old=823847&new_path=%2Fs3-video&new=823847 - http://www.securityfocus.com/bid/64420
CVE ID: CVE-2013-7280 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T18:01:20.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and earlier allows remote attackers to cause a denial of service (crash) via a long string in a .m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/29445 - http://packetstormsecurity.com/files/120611/Hanso-Player-2.1.0-Buffer-Overflow.html - http://www.exploit-db.com/exploits/24556 - http://www.securityfocus.com/bid/58251 - http://osvdb.org/show/osvdb/90816
CVE ID: CVE-2013-7281 State: PUBLISHED Published: 2014-01-08T16:00:00 Last Updated: 2024-08-06T18:01:20.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2108-1 - http://www.ubun
buntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2108-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - https://github.com/torvalds/linux/commit/bceaa90240b6019ed73b49965eac7d167610be69 - http://www.ubuntu.com/usn/USN-2117-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1035875 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.ubuntu.com/usn/USN-2107-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc
ttp://www.ubuntu.com/usn/USN-2107-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69 - http://www.securitytracker.com/id/1029566 - http://www.openwall.com/lists/oss-security/2013/11/28/13 - http://www.securityfocus.com/bid/64747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90222
CVE ID: CVE-2013-7282 State: PUBLISHED Published: 2014-01-10T11:00:00 Last Updated: 2024-08-06T18:01:20.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS-WIR300N router with firmware 5.07.36_NIS01 allows remote attackers to bypass authentication via a "Cookie: :language=en" HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.ampliasecurity.com/advisories/nisuta-nswir150ne-nswir300n-wireless-router-remote-management-web-interface-authentication-bypass-vulnerability.html - http://www.ampliasecurity.com/advisories/AMPLIA-ARA050913.txt
CVE ID: CVE-2013-7283 State: PUBLISHED Published: 2014-01-09T16:00:00Z Last Updated: 2024-09-17T00:21:03.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56276 - https://lists.libreswan.org/pipermail/swan-announce/2013/000007.html - http://www.osvdb.org/101575 - https://github.com/libreswan/libreswan/commit/ef2d756e73a188401c36133c2e2f7ce4f3c6ae55
CVE ID: CVE-2013-7284 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:20.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/62 - https://rt.cpan.org/Public/Bug/Display.html?id=90474 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789 - https://bugzilla.redhat.com/show_bug.cgi?id=1030572 - http://seclists.org/oss-sec/2014/q1/56 - h
report.cgi?bug=734789 - https://bugzilla.redhat.com/show_bug.cgi?id=1030572 - http://seclists.org/oss-sec/2014/q1/56 - https://bugzilla.redhat.com/show_bug.cgi?id=1051108
CVE ID: CVE-2013-7285 State: PUBLISHED Published: 2019-05-15T16:54:57 Last Updated: 2024-08-06T18:01:20.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/69 - https://www.mail-archive.com/user%40xstream.codehaus.org/msg00604.html - https://www.mail-archive.com/user%40xstream.codehaus.org/msg00607.html - https://lists.
eam.codehaus.org/msg00604.html - https://www.mail-archive.com/user%40xstream.codehaus.org/msg00607.html - https://lists.apache.org/thread.html/dcf8599b80e43a6b60482607adb76c64672772dc2d9209ae2170f369%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/6d3d34adcf3dfc48e36342aa1f18ce3c20bb8e4c458a97508d5bfed1%40%3Cissues.activemq.apache.org%3E - http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html - https://x-stream.github.io/CVE-2013-7285.html - https://www.oracle.com/security-alerts/cpuoct2020.html - http://web.archive.org/web/20140204133306/http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html
CVE ID: CVE-2013-7286 State: PUBLISHED Published: 2020-02-12T17:45:49 Last Updated: 2024-08-06T18:01:20.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/21 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92352
CVE ID: CVE-2013-7287 State: PUBLISHED Published: 2020-02-13T22:09:38 Last Updated: 2024-08-06T18:01:20.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Apr/21 - https://www.securityfocus.com/archive/1/531713
CVE ID: CVE-2013-7288 State: PUBLISHED Published: 2014-01-10T16:00:00Z Last Updated: 2024-09-17T01:50:54.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mybb/mybb/commit/238696e37d6a22b89e6bba11e4de3e6620cb5547 - http://blog.mybb.com/2013/12/16/mybb-1-6-12-released-security-maintenance-release - http://secunia.com/advisories/55945 - http://www.securi