Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2586 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T15:44:32.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123407/XAMPP-1.8.1-Local-Write-Access.html - http://archives.neohapsis.com/archives/bugtraq/2013-09/0131.html - http://osvdb.org/97780 - http://www.exploit-db.com/exploits/28654 - http://www.securityfocus.com/bid/62665 - https:/
l - http://osvdb.org/97780 - http://www.exploit-db.com/exploits/28654 - http://www.securityfocus.com/bid/62665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87499
CVE ID: CVE-2013-2594 State: PUBLISHED Published: 2014-01-21T16:00:00 Last Updated: 2024-08-06T15:44:32.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote attackers to execute arbitrary SQL commands via the callref parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactionpenetrationtesting.co.uk/hornbill-supportworks-sql-injection.html - http://seclists.org/fulldisclosure/2013/Apr/232 - http://osvdb.org/92757 - http://www.securityfocus.com/bid/59439 - http://packetstormsecurity.com/files/121402/Hornbill-Supportworks-ITSM-1.0.
7 - http://www.securityfocus.com/bid/59439 - http://packetstormsecurity.com/files/121402/Hornbill-Supportworks-ITSM-1.0.0-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83767 - http://www.exploit-db.com/exploits/25002
CVE ID: CVE-2013-2595 State: PUBLISHED Published: 2014-08-31T10:00:00 Last Updated: 2024-08-06T15:44:32.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls for an unrestricted mmap interface, which allows attackers to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/uncontrolled-memory-mapping-camera-driver-cve-2013-
eferences: - https://www.codeaurora.org/projects/security-advisories/uncontrolled-memory-mapping-camera-driver-cve-2013-2595
CVE ID: CVE-2013-2596 State: PUBLISHED Published: 2013-04-13T01:00:00.000Z Last Updated: 2025-10-22T00:05:43.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2015-0
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2015-0695.html - http://www.securityfocus.com/bid/59264 - http://www.droid-life.com/2013/04/09/root-method-released-for-droid-razr-hd-running-android-4-1-2-other-devices-too/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://marc.info/?l=linux-kernel&m=136616837923938&w=2 - https://github.com/torvalds/linux/commit/b4cbb197c7e7a68dbad0d491242e3ca67420c13e - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b4cbb197c7e7a68dbad0d491242e3ca67420
l - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b4cbb197c7e7a68dbad0d491242e3ca67420c13e - http://rhn.redhat.com/errata/RHSA-2015-0803.html - http://forum.xda-developers.com/showthread.php?t=2255491 - http://www.droidrzr.com/index.php/topic/15208-root-motochopper-yet-another-android-root-exploit/ - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 - http://rhn.redhat.com/errata/RHSA-2015-0782.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - https://github.com/torvalds/linux/commit/fc9bbca8f650e5f738af8806317c0a041a48ae4a - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc9bbca8f650e5f738af8
317c0a041a48ae4a - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc9bbca8f650e5f738af8806317c0a041a48ae4a
CVE ID: CVE-2013-2597 State: PUBLISHED Published: 2014-08-31T10:00:00.000Z Last Updated: 2025-10-22T00:05:36.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.codeaurora.org/projects/security-advisories/s
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597
CVE ID: CVE-2013-2598 State: PUBLISHED Published: 2014-08-31T10:00:00 Last Updated: 2024-08-06T15:44:32.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted boot-image load-destination header values that specify memory locations within bootloader memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/loading-image-data-memory-locations-based-untrusted-header-data-lk-bootload
.codeaurora.org/projects/security-advisories/loading-image-data-memory-locations-based-untrusted-header-data-lk-bootloader-cve-2013-2598
CVE ID: CVE-2013-2599 State: PUBLISHED Published: 2014-08-31T10:00:00 Last Updated: 2024-08-06T15:44:32.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Qualcomm Innovation Center (QuIC) patch to the NativeDaemonConnector class in services/java/com/android/server/NativeDaemonConnector.java in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.3.x enables debug logging, which allows attackers to obtain sensitive disk-encryption passwords via a logcat call. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/logging-potentially-sensitive-information-nativedaemonconnector-cve-2013-2599
CVE ID: CVE-2013-2600 State: PUBLISHED Published: 2019-11-01T11:48:38 Last Updated: 2024-08-06T15:44:32.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniUPnPd has information disclosure use of snprintf() Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85774 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0085.html - http://archives.neohapsis.com/archives/bugtraq/2013-07/0086.html - https://seclists.org/bugtraq/2013/Jul/84
CVE ID: CVE-2013-2601 State: PUBLISHED Published: 2013-09-12T18:00:00 Last Updated: 2024-08-06T15:44:32.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/96749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86967 - http://support.citrix.com/article/CTX138633
CVE ID: CVE-2013-2602 State: PUBLISHED Published: 2014-06-06T14:00:00 Last Updated: 2024-08-06T15:44:32.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote attackers to execute arbitrary code via the (1) seTokensArray, or (2) seTokensValuesArray parameter to the AddTokens method; (3) seLastNameTokensArray parameter to the AddLastNameTokens method; (4) seFrameIdArray, (5) seSourceIdArray, (6) seHasBreakdownArray, (7) seIsIndexedArray, (8) seAllConcatArray, (9) seRefererURLArray, or (10) seMandatoryFieldsArray parameter to the AddMultipleSearches method; (11) seS
ConcatArray, (9) seRefererURLArray, or (10) seMandatoryFieldsArray parameter to the AddMultipleSearches method; (11) seSourceIdArray, (12) seIsIndexedArray, (13) seAllConcatArray, (14) seRefererURLArray, (15) seQATestsArray, (16) seAllSourceIDsArray, (17) seAllSourceTitlesArray, (18) seMandatoryFieldsArray, or (19) seAllSourceRootURLArray parameter to the TestYourself method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/93500 - http://osvdb.org/93499 - http://osvdb.org/93498 - http://osvdb.org/93501
CVE ID: CVE-2013-2603 State: PUBLISHED Published: 2015-01-12T19:00:00 Last Updated: 2024-08-06T15:44:32.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted arguments to the (1) AddTag, (2) Ping, (3) QueuePause, (4) QueueRemove, (5) QueueTop, (6) RemoveTag, (7) TagRemoved, or (8) message method. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecu
moved, or (8) message method. Additional Analyst Notes: - CVE Program Container: References: - https://www.riskbasedsecurity.com/research/RBS-2013-006.pdf - http://www.riskbasedsecurity.com/reports/RBS-GameHouseAnalysis-Sept2013.pdf - http://www.osvdb.org/96919
CVE ID: CVE-2013-2604 State: PUBLISHED Published: 2015-01-12T19:00:00 Last Updated: 2024-08-06T15:44:32.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated by DDRAW.DLL in the Zuma Deluxe directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.riskbasedsecurity.com/reports/RBS-GameHouseAnalysis-Sept2013.pdf - https://www.riskbasedsecurity.com/research/R
tp://www.riskbasedsecurity.com/reports/RBS-GameHouseAnalysis-Sept2013.pdf - https://www.riskbasedsecurity.com/research/RBS-2013-005.pdf - http://www.osvdb.org/96918
CVE ID: CVE-2013-2612 State: PUBLISHED Published: 2020-01-27T21:58:21 Last Updated: 2024-08-06T15:44:32.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with root privileges due to an error in the Web UI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85782 - https://www.securityfocus.com/bid/61167/info
CVE ID: CVE-2013-2615 State: PUBLISHED Published: 2013-03-20T22:00:00Z Last Updated: 2024-09-17T01:20:58.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Mar/122 - http://www.osvdb.org/91232 - http://packetstormsecurity.com/files/120845/Ruby-Gem-Fastreader-1.0.8-Code-Execution.html - http://packetstormsecurity.com/files/120776/Ruby-Gem-Fastreader-1.0.8-Command-Execution.html - http://www.openwall.com/lists/oss-security/2013/03
y.com/files/120776/Ruby-Gem-Fastreader-1.0.8-Command-Execution.html - http://www.openwall.com/lists/oss-security/2013/03/19/9
CVE ID: CVE-2013-2616 State: PUBLISHED Published: 2013-03-20T22:00:00 Last Updated: 2024-08-06T15:44:32.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Mar/123 - http://packetstormsecurity.com/files/120777/Ruby-Gem-Minimagic-Command-Execution.html - http://www.osvdb.org/91231 - http://www.securityfocus.com/bid/58448 - http://www.openwall.com/lists/oss-security/2013/03/19/9
CVE ID: CVE-2013-2617 State: PUBLISHED Published: 2013-03-20T22:00:00Z Last Updated: 2024-09-16T19:35:48.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/120778/Ruby-Gem-Curl-Command-Execution.html - http://www.osvdb.org/91230 - http://www.openwall.com/lists/oss-security/2013/03/19/9 - http://seclists.org/fulldisclosure/2013/Mar/124
CVE ID: CVE-2013-2618 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T15:44:32.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the map_title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58793 - http://packetstormsecurity.com/files/121034/Network-Weathermap-0.97a-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/83187 - http://seclists.org/fulldisclosure/2013/Apr/1 - http://www.network-weathermap.com/cont
cloud.com/vulnerabilities/83187 - http://seclists.org/fulldisclosure/2013/Apr/1 - http://www.network-weathermap.com/content/security-notice-cve-2013-2618-network-weathermap-097a-persistent-xss - http://www.exploit-db.com/exploits/24913 - http://osvdb.org/91869
CVE ID: CVE-2013-2619 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T15:44:32.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot) to the default URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83185 - http://www.exploit-db.com/exploits/24915 - http://seclists.org/fulldisclosure/2013/Apr/2 - http://packetstormsecurity.com/files/121035/Aspen-0.8-Directory-Traversal.html - http://www.securityfocus.com/bid/58794
CVE ID: CVE-2013-2621 State: PUBLISHED Published: 2020-02-03T14:15:15 Last Updated: 2024-08-06T15:44:32.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84683 - https://www.isecauditors.com/advisories-2013#2013-009
CVE ID: CVE-2013-2622 State: PUBLISHED Published: 2020-02-03T14:27:20 Last Updated: 2024-08-06T15:44:32.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site Scripting (XSS) in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selected_theme" parameter in error.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87807 - https://packetstormsecurity.com/files/123557/Uebimiau-2.7.11-Cross-Site-Scripting-Open-Redirection.html
CVE ID: CVE-2013-2623 State: PUBLISHED Published: 2020-02-03T14:35:34 Last Updated: 2024-08-06T15:44:32.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "f_email" parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60288 - https://www.isecauditors.com/advisories-2013#2013-009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84684
CVE ID: CVE-2013-2624 State: PUBLISHED Published: 2020-02-03T14:39:52 Last Updated: 2024-08-06T15:44:32.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request. Additional Analyst Notes: - CVE Program Container: References: - https://www.isecauditors.com/advisories-2013#2013-009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84685
CVE ID: CVE-2013-2625 State: PUBLISHED Published: 2019-11-27T18:08:35 Last Updated: 2024-08-06T15:44:32.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2625 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html - http://archives.neohapsis.com/archives/bugtraq/2013-08/0009.html - http://www.securityfocus.com/bid/58936 - https:
tml - http://archives.neohapsis.com/archives/bugtraq/2013-08/0009.html - http://www.securityfocus.com/bid/58936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83287
CVE ID: CVE-2013-2627 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T15:44:32.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2013/Dec/107 - http://www.securityfocus.com/bid/64426 - http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt - http://osvdb.org/101156
CVE ID: CVE-2013-2628 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T15:44:32.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for unspecified requests, related to the lack of an anti-CSRF token. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2013/Dec/107 - http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt - http://osvdb.org/101154
CVE ID: CVE-2013-2629 State: PUBLISHED Published: 2013-12-23T20:00:00 Last Updated: 2024-08-06T15:44:32.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2013/Dec/107 - http://www.csnc.ch/misc/files/advisories/CSNC-2013-005-006-007_Leed_Multiple_vulns.txt
CVE ID: CVE-2013-2630 State: PUBLISHED Published: 2013-07-31T10:00:00Z Last Updated: 2024-09-17T03:07:28.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B8C50A6C7-8633-45A8-A0A6-3D454437AD53%7D
CVE ID: CVE-2013-2631 State: PUBLISHED Published: 2020-02-03T14:46:45 Last Updated: 2024-08-06T15:44:32.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twg_browserx" and "twg_browsery" in the page image.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.isecauditors.com/advisories-2013#2013-012 - https://packetstormsecurity.com/files/121128/TinyWebGallery-1.8.9-Path-Disclosure.html
CVE ID: CVE-2013-2632 State: PUBLISHED Published: 2013-03-21T21:00:00Z Last Updated: 2024-09-17T00:11:00.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/v8/source/browse/trunk/ChangeLog - https://code.google.com/p/chromium/issues/detail?id=194749 - http://googlechromereleases.blogspot.com/2013/03/dev-channel-update_18.html
CVE ID: CVE-2013-2633 State: PUBLISHED Published: 2013-03-21T21:00:00Z Last Updated: 2024-09-16T17:53:59.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters. Additional Analyst Notes: - CVE Program Container: References: - http://piwik.org/blog/2013/03/piwik-1-11/
CVE ID: CVE-2013-2634 State: PUBLISHED Published: 2013-03-22T10:00:00 Last Updated: 2024-08-06T15:44:32.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=29cd8ae0e1a39e239a3a7b67da1986add1199fc0 - http://www.ubuntu.com/usn/USN-1812-1 - http://www.mandriva.com/securi
mit%3Bh=29cd8ae0e1a39e239a3a7b67da1986add1199fc0 - http://www.ubuntu.com/usn/USN-1812-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1829-1 - http://rhn.redhat.com/errata/RHSA-2013-1051.html - http://www.ubuntu.com/usn/USN-1809-1 - https://github.com/torvalds/linux/commit/29cd8ae0e1a39e239a3a7b67da1986add1199fc0 - http://www.ubuntu.com/usn/USN-1814-1 - https://bugzilla.redhat.com/show_bug.cgi?id=923652 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://www.ubuntu.com/usn/USN-1813-1 - http://www.openwall.com/lists/oss-security/2013/03/20/1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 - http://www.ub
enwall.com/lists/oss-security/2013/03/20/1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 - http://www.ubuntu.com/usn/USN-1811-1