Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6797 State: PUBLISHED Published: 2013-11-15T20:00:00Z Last Updated: 2024-09-16T18:49:22.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bw_url parameter in the bw-videos page to wp-admin/admin.php, as demonstrated by embedding a URL to a JavaScript file. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/blue-wrench-videos-widget/changelog - http://osvdb.org/
VE Program Container: References: - http://wordpress.org/plugins/blue-wrench-videos-widget/changelog - http://osvdb.org/98923 - http://osvdb.org/98922 - http://securityundefined.com/wordpress-plugin-blue-wrench-video-widget-csrf-persistent-xss-0day-disclosure/
CVE ID: CVE-2013-6798 State: PUBLISHED Published: 2013-11-16T11:00:00 Last Updated: 2024-08-06T17:46:23.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests, a different vulnerability than CVE-2013-3694. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89202 -
onal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89202 - http://www.blackberry.com/btsc/KB35315
CVE ID: CVE-2013-6799 State: PUBLISHED Published: 2013-11-16T11:00:00Z Last Updated: 2024-09-17T03:17:46.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105. Additional Analyst Notes: - CVE Program Container: References: - http://cxsecurity.com/issue/WLB-2013110059 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0033.html - http://archives.neohapsis.com/archives/bugtraq/2013-11/0051.html
CVE ID: CVE-2013-6800 State: PUBLISHED Published: 2013-11-16T11:00:00 Last Updated: 2024-08-06T17:46:23.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than CVE-2013-1418. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/c2ccf4197f697c4ff143b8a786acdd875e70a89d - http://krbdev.mit.edu/rt/Ticket/Display.html?id=7757 - http://www.securityfocus.com/bid/63770
CVE ID: CVE-2013-6801 State: PUBLISHED Published: 2013-11-16T15:00:00Z Last Updated: 2024-09-16T19:55:56.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed .doc file containing an embedded image, as demonstrated by word2003forkbomb.doc, related to a "fork bomb" issue. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0038.html - http://archives.neohapsis.com/archives/bugtraq/2013-11/0045.html - http://archives.neohapsis.com/archives/bugtraq/2013-11/0035.html
CVE ID: CVE-2013-6802 State: PUBLISHED Published: 2013-11-16T15:00:00 Last Updated: 2024-08-06T17:46:23.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=319125 - http://www.hppwn2own.com/chrome-nexus-4-samsung-galaxy-s4-falls/ - http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html - h
e-nexus-4-samsung-galaxy-s4-falls/ - http://googlechromereleases.blogspot.com/2013/11/chrome-for-android-update.html - http://googlechromereleases.blogspot.com/2013/11/stable-channel-update_14.html - https://code.google.com/p/chromium/issues/detail?id=319117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89201
CVE ID: CVE-2013-6804 State: PUBLISHED Published: 2013-12-05T18:00:00 Last Updated: 2024-08-06T17:46:23.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to search/results/all/1/4. Additional Analyst Notes: - CVE Program Container: References: - https://www.jamroom.net/the-jamroom-network/networkmarket/43/search/expanded_changelog=1 - https://www.htbridge.com/advisory/HTB23184 - http://secunia.com/advisories/55886 - https://www.jamroom.net/the-jamroom-network/tracker/128/xss-vulnerability-in-search-
tp://secunia.com/advisories/55886 - https://www.jamroom.net/the-jamroom-network/tracker/128/xss-vulnerability-in-search-module
CVE ID: CVE-2013-6805 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:46:23.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover credentials by reading a .eod8 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koto/exceed-mitm
CVE ID: CVE-2013-6806 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:46:23.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koto/exceed-mitm
CVE ID: CVE-2013-6807 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:46:23.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koto/exceed-mitm
CVE ID: CVE-2013-6808 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:46:23.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.packetlabs.net/cve-2013-6808/ - http://www.zend.to/changelog.php
CVE ID: CVE-2013-6809 State: PUBLISHED Published: 2013-12-13T17:00:00 Last Updated: 2024-08-06T17:46:23.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the Remote File field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100511 - http://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/89455 - http://seclists.org/fulldisclosure/2013/Dec/15
CVE ID: CVE-2013-6810 State: PUBLISHED Published: 2013-12-12T17:00:00 Last Updated: 2024-08-06T17:46:23.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42702/ - http://www.securitytracker.com/id/1029485 - http://www.attrition.org/pipermail/vim/2014-January/002755.html - http://www.zerodayinitiative.
tracker.com/id/1029485 - http://www.attrition.org/pipermail/vim/2014-January/002755.html - http://www.zerodayinitiative.com/advisories/ZDI-13-283/ - http://archives.neohapsis.com/archives/bugtraq/2013-12/0053.html - http://marc.info/?l=bugtraq&m=138723620521347&w=2 - https://www.exploit-db.com/exploits/42701/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/90728 - http://secunia.com/advisories/56143
CVE ID: CVE-2013-6811 State: PUBLISHED Published: 2019-11-22T17:50:45 Last Updated: 2024-08-06T17:46:23.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to (1) Custom Services in Port Forwarding, (2) Port Triggering Entries, (3) URL Filters in Parental Control, (4) Print Server settings, (5) QoS Queue Setup, or (6) QoS Classification Entries. Additional Analyst Notes: - CVE Program Container: References: - https://exchange
up, or (6) QoS Classification Entries. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89612 - https://web.archive.org/web/20131208091355/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10005
CVE ID: CVE-2013-6812 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:46:23.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ONEDC app before 1.7 for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56279 - https://nextdc.com/advisory/cve/cve-2013-6812 - https://nextdc.com/advisory/228
CVE ID: CVE-2013-6814 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensitive information (cookies and SAPPASSPORT) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1854826 - http://secunia.com/advisories/55778 - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/erpscan-13-021-sap-portal-unvalidated-redirect/
CVE ID: CVE-2013-6815 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1890819 - http://secunia.com/advisories/55620 - https://erpscan.io/advisories/erpscan-13-020-sap-netweaver-shsti_upload_xml-xxe/ - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2013-6816 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2) DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1828801 - http://secunia.com/advisories/55777 - https://erpscan.io/advisories/erpscan-13-018-sap-netweaver-servlet-javadumpservice-multiple-xss/ - https://erpscan.io/advisories/erpscan-13-019-sap-netweaver-servl
8-sap-netweaver-servlet-javadumpservice-multiple-xss/ - https://erpscan.io/advisories/erpscan-13-019-sap-netweaver-servlet-datacollector-multiple-xss/ - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2013-6817 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SAP Network Interface Router (SAProuter) 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1820666 - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/dsecrg-13-013-saprouter-heap-overflow/
CVE ID: CVE-2013-6818 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1685106 - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/dsecrg-13-008-sap-netweaver-logviewer-security-check-bypass/
CVE ID: CVE-2013-6819 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1784894 - https://erpscan.io/advisories/dsecrg-13-006-sap-netweaver-performance-provider-xss/ - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2013-6820 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1757675 - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/dsecrg-13-004-sap-netweaver-di-arbitrary-file-upload/
CVE ID: CVE-2013-6821 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1628537 - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/dsecrg-13-003-sap-netweaver-exportability-check-service-unauthorized-directory-traversal/
CVE ID: CVE-2013-6822 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/dsecrg-13-002-sap-grmgapp-xxe-and-authentication-bypass/
CVE ID: CVE-2013-6823 State: PUBLISHED Published: 2013-11-19T19:00:00 Last Updated: 2024-08-06T17:46:23.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://scn.sap.com/docs/DOC-8218 - https://erpscan.io/advisories/dsecrg-13-002-sap-grmgapp-xxe-and-authentication-bypass/
CVE ID: CVE-2013-6824 State: PUBLISHED Published: 2013-12-19T02:00:00 Last Updated: 2024-08-06T17:46:23.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-7479 - http://www.zabbix.com/rn1.8.19rc1.php - http://security.gentoo.org/glsa/glsa-201401-26.xml - http://www.zabbix.com/rn2.0.10rc1.php - http://www.zabbix.com/rn2.2.1rc1.php
CVE ID: CVE-2013-6825 State: PUBLISHED Published: 2014-06-10T14:00:00 Last Updated: 2024-08-06T17:46:23.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7) dcmpstat/tests/msgserv.cc, and (8) dcmqrdb/apps/dcmqrscp.cc in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by creating a large number of processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532261/100/0/threaded - http:
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532261/100/0/threaded - http://packetstormsecurity.com/files/126883/DCMTK-Privilege-Escalation.html - http://secunia.com/advisories/58916 - http://git.dcmtk.org/web?p=dcmtk.git%3Ba=blob%3Bf=CHANGES.361 - http://www.securityfocus.com/bid/67784 - http://seclists.org/fulldisclosure/2014/Jun/11
CVE ID: CVE-2013-6826 State: PUBLISHED Published: 2013-11-19T19:00:00Z Last Updated: 2024-09-16T23:56:53.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123980/fortianalyzer-xsrf.txt - http://www.securityfocus.com/bid/63663
CVE ID: CVE-2013-6827 State: PUBLISHED Published: 2013-11-20T11:00:00Z Last Updated: 2024-09-16T18:28:55.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitrary files via a full pathname in the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0133.html
CVE ID: CVE-2013-6828 State: PUBLISHED Published: 2013-11-20T11:00:00Z Last Updated: 2024-09-16T19:56:17.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sys_usermng operation via the it parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0133.html
CVE ID: CVE-2013-6829 State: PUBLISHED Published: 2013-11-20T11:00:00Z Last Updated: 2024-09-16T19:36:16.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0133.html
CVE ID: CVE-2013-6830 State: PUBLISHED Published: 2013-11-20T11:00:00Z Last Updated: 2024-09-16T16:33:57.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary commands via shell metacharacters in the nsserver parameter during an nslookup operation. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0139.html
CVE ID: CVE-2013-6831 State: PUBLISHED Published: 2013-11-20T11:00:00Z Last Updated: 2024-09-17T01:51:24.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict user specifications, which allows local users to gain privileges via a sudo command that leverages access to the qmailq account. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0139.html
CVE ID: CVE-2013-6832 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:46:23.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0106.html
CVE ID: CVE-2013-6833 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:46:23.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0107.html
CVE ID: CVE-2013-6834 State: PUBLISHED Published: 2013-11-21T02:00:00 Last Updated: 2024-08-06T17:46:23.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0107.html
CVE ID: CVE-2013-6835 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T17:46:23.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2014/Mar/63 - http://support.apple.com/kb/HT6441 - http://www.securityfocus.com/bid/66108 - http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html - http://support.apple.com/kb/HT6162