Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7005 State: PUBLISHED Published: 2013-12-19T02:00:00 Last Updated: 2024-08-06T17:53:46.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive information by reading the Users[#]["Password"] fields in /tmp/teamf1.cfg.ascii. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30061
CVE ID: CVE-2013-7008 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on a certain droppable field, which allows remote attackers to cause a denial of service (deadlock) or possibly have unspecified other impact via crafted H.264 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/29ffeef5e73b8f41ff3a3f2242d356759c66f91f - https://trac.ffmpeg.org/ticket/2927 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://
s://trac.ffmpeg.org/ticket/2927 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7009 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:46.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Apple RPZA data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/3819db745da2ac7fb3faacb116788c32f4753f34 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/
b116788c32f4753f34 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - https://trac.ffmpeg.org/ticket/2850 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7010 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:46.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2855 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - https://github.com/FFmpeg/FFmpeg/commit/454a11a1c9c686c78aa9795430
http://openwall.com/lists/oss-security/2013/12/08/3 - https://github.com/FFmpeg/FFmpeg/commit/454a11a1c9c686c78aa97954306fb63453299760 - http://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v9.11 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7011 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/547d690d676064069d44703a1917e0dab7e33445 - https://trac.ffmpeg.org/ticket/2906 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html
445 - https://trac.ffmpeg.org/ticket/2906 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7012 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not prevent attempts to use non-zero image offsets, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/780669ef7c23c00836a24921fcc6b03be2b8ca4a - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/l
1fcc6b03be2b8ca4a - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - https://trac.ffmpeg.org/ticket/3080 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7013 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect ordering of arithmetic operations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/2922 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - https://gi
.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - https://github.com/FFmpeg/FFmpeg/commit/821a5938d100458f4d09d634041b05c860554ce0 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7014 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:46.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted PNG data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2855 - https://security.gentoo.org/glsa/201603-06 - https://github.com/FFmpeg/FFmpeg/commit/86736f59d6a527d8bc807d09b93f971c0fe0bb07 - http://ffmpeg.org/security.html - http://openw
ithub.com/FFmpeg/FFmpeg/commit/86736f59d6a527d8bc807d09b93f971c0fe0bb07 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - https://trac.ffmpeg.org/ticket/2919 - http://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v9.11 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7015 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Flash Screen Video data. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/2844 - http://www.debian.org/security/2014/dsa-2855 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http:/
ebian.org/security/2014/dsa-2855 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7 - https://github.com/FFmpeg/FFmpeg/commit/880c73cd76109697447fbfbaa8e5ee5683309446
CVE ID: CVE-2013-7016 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/8bb11c3ca77b52e05a9ed1496a65f8a76e6e2d8f - https://security.gentoo.org/glsa/201603-06 - https://trac.ffmpeg.org/ticket/2848 - http://ffmpeg.org/security
6e6e2d8f - https://security.gentoo.org/glsa/201603-06 - https://trac.ffmpeg.org/ticket/2848 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7017 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:46.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via crafted JPEG2000 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/912ce9dd2080c5837285a471d750fa311e09b555 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7018 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - https://github.com/FFmpeg/FFmpeg/commit/9a271a9368eaabf99e6c2046103ac
p://openwall.com/lists/oss-security/2013/12/08/3 - https://github.com/FFmpeg/FFmpeg/commit/9a271a9368eaabf99e6c2046103acb33957e63b7 - http://openwall.com/lists/oss-security/2013/11/26/7 - https://trac.ffmpeg.org/ticket/2895
CVE ID: CVE-2013-7019 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/2898 - https://github.com/FFmpeg/FFmpeg/commit/a1b9004b768bef606ee98d417bceb9392ceb788d - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/securit
commit/a1b9004b768bef606ee98d417bceb9392ceb788d - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7020 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:46.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3027 - http://secunia.com/advisories/61389 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:227 - https://github.com/FF
//secunia.com/advisories/61389 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:227 - https://github.com/FFmpeg/FFmpeg/commit/b05cd1ea7e45a836f7f6071a716c38bb30326e0f - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7021 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO content, which allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact via crafted data. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/2905 - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-sec
ttp://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7 - https://github.com/FFmpeg/FFmpeg/commit/cdd5df8189ff1537f7abe8defe971f80602cc2d2
CVE ID: CVE-2013-7022 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/2971 - https://github.com/FFmpeg/FFmpeg/commit/e07ac727c1cc9eed39e7f9117c97006f719864bd - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/secur
g/commit/e07ac727c1cc9eed39e7f9117c97006f719864bd - https://security.gentoo.org/glsa/201603-06 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7023 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/f31011e9abfb2ae75bb32bc44e2c34194c8dc40a - https://security.gentoo.org/glsa/201603-06 - https://trac.ffmpeg.org/ticket/2982 - http://ffmpeg.org/se
2c34194c8dc40a - https://security.gentoo.org/glsa/201603-06 - https://trac.ffmpeg.org/ticket/2982 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7024 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/fe448cd28d674c3eff3072552eae366d0b659ce9 - https://security.gentoo.org/glsa/201603-06 - https://trac.ffmpeg.org/ticket/2921
48cd28d674c3eff3072552eae366d0b659ce9 - https://security.gentoo.org/glsa/201603-06 - https://trac.ffmpeg.org/ticket/2921 - http://ffmpeg.org/security.html - http://openwall.com/lists/oss-security/2013/12/08/3 - http://openwall.com/lists/oss-security/2013/11/26/7
CVE ID: CVE-2013-7025 State: PUBLISHED Published: 2013-12-09T11:00:00 Last Updated: 2024-08-06T17:53:45.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html - http://secunia.com/advisories/55923 - h
References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html - http://secunia.com/advisories/55923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89462 - http://osvdb.org/100610 - http://seclists.org/fulldisclosure/2013/Dec/32 - http://www.securityfocus.com/bid/64103 - http://www.securitytracker.com/id/1029433 - http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdf - http://www.exploit-db.com/exploits/30054 - http://www.vulnerability-lab.com/get_content.php?id=1099
CVE ID: CVE-2013-7026 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T17:53:46.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted application that uses shmctl IPC_RMID operations in conjunction with other shm system calls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a
b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2 - http://www.ubuntu.com/usn/USN-2075-1
CVE ID: CVE-2013-7027 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T17:53:45.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service (buffer over-read) via a crafted header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://secunia.com/advisories/55606 - http://
p://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://secunia.com/advisories/55606 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7 - http://www.ubuntu.com/usn/USN-2073-1 - http://www.securitytracker.com/id/1029413 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.securityfocus.com/bid/64013 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2071-1 - https://github.com/torvalds/linux/commit/f5563318ff1bde15b10e736e97ffce13be08bc1a - http://www.ubuntu.com/usn/USN-2074-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f5563318ff1bde15b10e736e97ffce13be08bc1a
ttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f5563318ff1bde15b10e736e97ffce13be08bc1a - http://www.ubuntu.com/usn/USN-2068-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2072-1 - http://www.ubuntu.com/usn/USN-2067-1
CVE ID: CVE-2013-7030 State: PUBLISHED Published: 2013-12-12T17:00:00 Last Updated: 2024-10-29T14:20:36.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly disputes the significance of this report, stating that this is an expected default behavior, and that the product's documentation describes use of the TFTP Encrypted Config option in addressing this issue Additional Analyst Notes: - C
s documentation describes use of the TFTP Encrypted Config option in addressing this issue Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30237/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/89649 - http://osvdb.org/100916
CVE ID: CVE-2013-7032 State: PUBLISHED Published: 2014-02-14T19:00:00 Last Updated: 2024-08-06T17:53:46.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) customer name in a resource created from an uploaded file, a different vulnerability than CVE-2013-7003. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0074.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/89809 - http://osvdb.or
is.com/archives/bugtraq/2013-12/0074.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/89809 - http://osvdb.org/101080 - http://www.livezilla.net/board/index.php?/topic/163-livezilla-changelog
CVE ID: CVE-2013-7033 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:53:45.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting (XSS) attack. Additional Analyst Notes: - CVE Program Container: References: - http://forums.livezilla.net/index.php?/topic/163-livezilla-changelog/ - http://packetstormsecurity.com/files/124444/LiveZilla-5.1.2.0-Insecu
lla.net/index.php?/topic/163-livezilla-changelog/ - http://packetstormsecurity.com/files/124444/LiveZilla-5.1.2.0-Insecure-Password-Storage.html
CVE ID: CVE-2013-7034 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T17:53:45.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-12/0078.html - http://forums.livezilla.net/index.php?/topic/163-livezilla-changelog/ - http://www.securityfocus.com/bid/64383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89796