Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://linux.oracle.com/errata/ELSA-2014-0771.html - http://www.ubuntu.com/usn/USN-2112-1 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2111-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://rhn.redhat.com/errata/RHSA-2014-0100.html - http://www.ubuntu.com/usn/USN-2075-1 - http://linux.oracle.com/errata/ELSA-2014-3043.html - http://www.ubuntu.com/usn/USN-2067-1 - http://www.ubuntu.com/usn/USN-2064-1 - http://www.securityfocus.com/bid/63886
CVE ID: CVE-2013-6379 State: REJECTED Published: 2013-11-25T15:00:00 Last Updated: 2013-12-01T17:26:34 Description: No description available.
CVE ID: CVE-2013-6380 State: PUBLISHED Published: 2013-11-27T02:00:00 Last Updated: 2024-08-06T17:39:01.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via an FSACTL_SEND_RAW_SRB ioctl call that triggers a crafted SRB command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - https://bugzilla.redhat.com/show_bug.cgi?id=103359
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - https://bugzilla.redhat.com/show_bug.cgi?id=1033593 - http://www.openwall.com/lists/oss-security/2013/11/22/5 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2115-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2116-1 - http://www.ubuntu.com/usn/USN-2114-1 - https://github.com/torvalds/linux/commit/b4789b8e6be3151a955ade74872822f30e8cd914 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.ubuntu.com/usn/USN-2109-1 - http://www.ubuntu.com/usn/USN-2111-1 - http://git.kernel.org/?p=linux/kernel/git/to
tp://www.ubuntu.com/usn/USN-2109-1 - http://www.ubuntu.com/usn/USN-2111-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b4789b8e6be3151a955ade74872822f30e8cd914 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2075-1
CVE ID: CVE-2013-6381 State: PUBLISHED Published: 2013-11-27T02:00:00 Last Updated: 2024-08-06T17:39:01.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0159.html - http://rhn.redhat.com/errata/RHSA-2014-0285.html - http://www.openwall.com/lists/oss-security/2013/11/22/5 - h
59.html - http://rhn.redhat.com/errata/RHSA-2014-0285.html - http://www.openwall.com/lists/oss-security/2013/11/22/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1033600 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fb392b1a63ae36c31f62bc3fc8630b49d602b62 - http://www.securityfocus.com/bid/63890 - http://rhn.redhat.com/errata/RHSA-2014-0284.html - https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62
CVE ID: CVE-2013-6382 State: PUBLISHED Published: 2013-11-27T02:00:00 Last Updated: 2024-08-06T17:39:01.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2) XFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value, related to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c and the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c. Additional Analyst Notes: - CVE Progr
fs_ioctl.c and the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.openwall.com/lists/oss-security/2013/11/22/5 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.ubuntu.com/usn/USN-2158-1 - http://www.ubuntu.com/usn/USN-2117-1 - http://www.securityfocus.com/bid/63889 - http://www.ubuntu.com/usn/USN-2109-1 - https://bugzilla.redhat.
sn/USN-2117-1 - http://www.securityfocus.com/bid/63889 - http://www.ubuntu.com/usn/USN-2109-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1033603 - http://www.spinics.net/lists/xfs/msg23343.html
CVE ID: CVE-2013-6383 State: PUBLISHED Published: 2013-11-27T02:00:00 Last Updated: 2024-08-06T17:39:01.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2108-1 - http://rhn.redhat.com/errata/RHSA-2014-0285.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f856567b930dfcdbc3323261bf77240ccdde01f5 - http://www.openwall.c
=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f856567b930dfcdbc3323261bf77240ccdde01f5 - http://www.openwall.com/lists/oss-security/2013/11/22/5 - http://www.ubuntu.com/usn/USN-2073-1 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - https://github.com/torvalds/linux/commit/f856567b930dfcdbc3323261bf77240ccdde01f5 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://www.ubuntu.com/usn/USN-2074-1 - http://www.ubuntu.com/usn/USN-2107-1 - http://www.ubuntu.com/usn/USN-2068-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.8 - http://www.ubuntu.com/usn/USN-2072-1 - http:/
SN-2068-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.8 - http://www.ubuntu.com/usn/USN-2072-1 - http://rhn.redhat.com/errata/RHSA-2014-0100.html - http://www.ubuntu.com/usn/USN-2075-1 - http://www.ubuntu.com/usn/USN-2067-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1033530
CVE ID: CVE-2013-6384 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T17:39:01.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to obtain sensitive information (the DB2 or MongoDB password) by reading the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/25/3 - https://bugs.launchpad.net/ceilometer/+bug/1244476 - http://www.openwall.com/lists/oss-security/2013/11/22/3
CVE ID: CVE-2013-6385 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T17:39:01.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even when CSRF validation has failed, which might allow remote attackers to trigger application-specific impacts such as arbitrary code execution via application-specific vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56148 - http://www.debian.org/security/2013/dsa-2828 - http://www.openwall.com/lists/oss-security/2013/11/22/4 - https://dru
8 - http://www.debian.org/security/2013/dsa-2828 - http://www.openwall.com/lists/oss-security/2013/11/22/4 - https://drupal.org/SA-CORE-2013-003 - http://www.debian.org/security/2013/dsa-2804
CVE ID: CVE-2013-6386 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T17:39:01.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predictable seeds and allows remote attackers to predict security strings and bypass intended restrictions via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56148 - http://www.debian.org/security/2013/dsa-2828 - http://www.openwall.com/lists/oss-security/2013/11/22/4 - https://drupal.org/SA-CORE-2013-003 - http://www.debian.org/security/2013/dsa-2
ll.com/lists/oss-security/2013/11/22/4 - https://drupal.org/SA-CORE-2013-003 - http://www.debian.org/security/2013/dsa-2804
CVE ID: CVE-2013-6387 State: PUBLISHED Published: 2013-12-24T20:00:00 Last Updated: 2024-08-06T17:39:01.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/22/4 - https://drupal.org/SA-CORE-2013-003 - http://www.debian.org/security/2013/dsa-2804
CVE ID: CVE-2013-6388 State: PUBLISHED Published: 2013-12-24T20:00:00 Last Updated: 2024-08-06T17:39:01.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to inject arbitrary web script or HTML via vectors related to CSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/22/4 - https://drupal.org/SA-CORE-2013-003 - http://www.debian.org/security/2013/dsa-2804
CVE ID: CVE-2013-6389 State: PUBLISHED Published: 2013-12-07T21:00:00 Last Updated: 2024-08-06T17:39:01.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/11/22/4 - https://drupal.org/SA-CORE-2013-003 - http://www.debian.org/security/2013/dsa-2804
CVE ID: CVE-2013-6390 State: REJECTED Published: 2022-06-30T20:23:46 Last Updated: 2022-06-30T20:23:46 Description: No description available.
CVE ID: CVE-2013-6391 State: PUBLISHED Published: 2013-12-14T17:00:00 Last Updated: 2024-08-06T17:39:01.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2061-1 - http://www.securityfocus.com/bid/64253 - http://www.openwall.com/lists/oss-security/2013/12/11/7 - http://secunia
61-1 - http://www.securityfocus.com/bid/64253 - http://www.openwall.com/lists/oss-security/2013/12/11/7 - http://secunia.com/advisories/56154 - http://secunia.com/advisories/56079 - http://rhn.redhat.com/errata/RHSA-2014-0089.html - https://bugs.launchpad.net/keystone/+bug/1242597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89657
CVE ID: CVE-2013-6392 State: PUBLISHED Published: 2013-11-30T02:00:00 Last Updated: 2024-08-06T17:39:01.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/base/genlock.c?id=e3c430
gram Container: References: - https://www.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/base/genlock.c?id=e3c43027bdb59f03eec7ead0a01c77e4bf801625&h=jb_3.2.3 - http://openwall.com/lists/oss-security/2013/11/25/4
CVE ID: CVE-2013-6393 State: PUBLISHED Published: 2014-02-06T22:00:00 Last Updated: 2024-08-06T17:39:01.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html - http://www.debian.org/security/2014/dsa-2870 - http://archives.neohapsis.com/archives/bugtraq/2014-1
-02/msg00065.html - http://www.debian.org/security/2014/dsa-2870 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - https://bugzilla.redhat.com/show_bug.cgi?id=1033990 - http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html - http://osvdb.org/102716 - https://bugzilla.redhat.com/attachment.cgi?id=847926&action=diff - http://www.mandriva.com/security/advisories?name=MDVSA-2015:060 - http://www.securityfocus.com/bid/65258 - http://advisories.mageia.org/MGASA-2014-0040.html - http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html - http://rhn.redhat.com/errata/RHSA-2014-0355.html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html - http://r
/rhn.redhat.com/errata/RHSA-2014-0355.html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html - http://rhn.redhat.com/errata/RHSA-2014-0354.html - https://support.apple.com/kb/HT6536 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html - http://www.debian.org/security/2014/dsa-2850 - http://rhn.redhat.com/errata/RHSA-2014-0353.html - https://bitbucket.org/xi/libyaml/commits/tag/0.1.5 - https://puppet.com/security/cve/cve-2013-6393 - http://www.ubuntu.com/usn/USN-2098-1
CVE ID: CVE-2013-6394 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T17:39:01.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00052.html - http://www.percona.com/doc/percona-xtrabackup/2.1/release-notes/2.1/2.1.6.html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00044.html - http://www.openwall.com/lists/oss-security/201
html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00044.html - http://www.openwall.com/lists/oss-security/2013/11/26/11
CVE ID: CVE-2013-6395 State: PUBLISHED Published: 2013-12-05T18:00:00 Last Updated: 2024-08-06T17:39:01.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/346 - https://github.com/ganglia/ganglia-web/issues/218 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89272 - http://secunia.c
ian.org/cgi-bin/bugreport.cgi?bug=730507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89272 - http://secunia.com/advisories/55854 - http://www.rusty-ice.de/advisory/advisory_2013002.txt - http://osvdb.org/100380
CVE ID: CVE-2013-6396 State: PUBLISHED Published: 2014-02-18T19:00:00 Last Updated: 2024-08-06T17:39:01.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/python-swiftclient/+bug/1199783 - http://www.openwall.com/lists/oss-security/2014/02/17/7
CVE ID: CVE-2013-6397 State: PUBLISHED Published: 2013-12-07T20:00:00 Last Updated: 2024-08-06T17:39:01.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63935 - http://rhn.redhat.c
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63935 - http://rhn.redhat.com/errata/RHSA-2014-0029.html - https://issues.apache.org/jira/browse/SOLR-4882 - http://www.openwall.com/lists/oss-security/2013/11/27/1 - http://secunia.com/advisories/55730 - http://rhn.redhat.com/errata/RHSA-2013-1844.html - http://lucene.apache.org/solr/4_6_0/changes/Changes.html - http://secunia.com/advisories/59372 - http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html
CVE ID: CVE-2013-6398 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T17:39:01.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60284 - http://secunia.com/advisories/55960 - https://issues.apache.org/jira/browse/CLOUDSTACK-5263 - https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual - http://www.securityfocus.com/bid/69432 - http
tps://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual - http://www.securityfocus.com/bid/69432 - http://www.securitytracker.com/id/1030762 - http://support.citrix.com/article/CTX140989
CVE ID: CVE-2013-6399 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T17:39:01.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdi
//lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=4b53c2c72cb5541cf394033b528a6fe2a86c0ac1
CVE ID: CVE-2013-6400 State: PUBLISHED Published: 2013-12-13T17:00:00 Last Updated: 2024-08-06T17:39:01.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspecified errors occur, which causes the TLB entries to not be flushed and allows local guest administrators to cause a denial of service (host crash) or gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55932 - http://www.securitytracker.com/id/1029468 - http://lists.opensuse.org/opensuse-security-an
ecunia.com/advisories/55932 - http://www.securitytracker.com/id/1029468 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125081.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125111.html - http://lists.xen.org/archives/html/xen-announce/2013-12/msg00002.html - http://www.openwall.com/lists/oss-security/2013/12/10/7
CVE ID: CVE-2013-6401 State: PUBLISHED Published: 2014-03-20T18:00:00 Last Updated: 2024-08-06T17:39:01.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1035538 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00057.html - https://github.com/akheron/jansson/commit/8f80c2d83808150724d31793e6ade92749b1faa4 - http://comments.gmane.org/gmane.comp.se
s://github.com/akheron/jansson/commit/8f80c2d83808150724d31793e6ade92749b1faa4 - http://comments.gmane.org/gmane.comp.security.oss.general/12099
CVE ID: CVE-2013-6402 State: PUBLISHED Published: 2014-01-05T20:00:00 Last Updated: 2024-08-06T17:39:01.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2085-1 - https://bugzilla.novell.com/show_bug.cgi?id=852368 - https://security-tracker.debian.org/tracker/CVE-2013-6402 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00087.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725876 - http:/
s.opensuse.org/opensuse-updates/2014-01/msg00087.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725876 - http://www.debian.org/security/2013/dsa-2829 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00098.html
CVE ID: CVE-2013-6403 State: PUBLISHED Published: 2013-12-24T18:00:00 Last Updated: 2024-08-06T17:39:01.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55792 - http://www.openwall.com/lists/oss-security/2013/11/28/6 - http://owncloud.org/changelog/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/89323