Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e.xforce.ibmcloud.com/vulnerabilities/89399 - http://seclists.org/fulldisclosure/2013/Dec/14 - http://www.securityfocus.com/bid/64050 - http://osvdb.org/100512 - http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm
CVE ID: CVE-2013-6239 State: PUBLISHED Published: 2019-11-22T18:15:12 Last Updated: 2024-08-06T17:38:58.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123764 - http://seclists.org/fulldisclosure/2013/Oct/221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88276
CVE ID: CVE-2013-6241 State: PUBLISHED Published: 2014-12-27T18:00:00 Last Updated: 2024-08-06T17:38:59.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id sharing scenarios, does not properly construct a SQL statement for next-year birthdays, which allows remote authenticated users to obtain sensitive birthday, displayname, firstname, and surname information via a birthdays action to api/contacts, aka bug 29315. Additional Analyst Notes: - CVE Program Container: References: - https://forum.open-xchange.com/showthread.php?8059-Open-Xchange-rel
nalyst Notes: - CVE Program Container: References: - https://forum.open-xchange.com/showthread.php?8059-Open-Xchange-releases-Security-Patch-2013-10-21-for-v7-2-2-and-v7-4-0 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0025.html
CVE ID: CVE-2013-6242 State: PUBLISHED Published: 2020-01-02T18:05:42 Last Updated: 2024-08-06T17:38:58.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject arbitrary web script or HTML via the subject of an email. NOTE: the vulnerabilities related to the body of the email and the publication name were SPLIT from this CVE ID because they affect different sets of versions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124185/Open-Xchange-frontend6-6.22
st Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124185/Open-Xchange-frontend6-6.22.4-backend-7.4.0-Cross-Site-Scripting.html - http://seclists.org/bugtraq/2013/Nov/127 - https://forum.open-xchange.com/showthread.php?8115-Open-Xchange-releases-Security-Patch-2013-11-12-for-v7-2-2-v6-22-3-and-v7-4-0-v6 - http://www.securitytracker.com/id/1029394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89250
CVE ID: CVE-2013-6243 State: PUBLISHED Published: 2013-10-23T15:00:00 Last Updated: 2024-08-06T17:38:59.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87803 - http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages - http://osvdb.org/98334 - http://secunia.com/advisories/55192 - http://wordpress.org/plugins/l
w=785535%40landing-pages - http://osvdb.org/98334 - http://secunia.com/advisories/55192 - http://wordpress.org/plugins/landing-pages/changelog - http://www.securityfocus.com/bid/62942
CVE ID: CVE-2013-6244 State: PUBLISHED Published: 2013-10-24T00:00:00Z Last Updated: 2024-09-17T00:46:59.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55302 - http://en.securitylab.ru/lab/PT-2013-13 - https://service.sap.com/sap/support/notes/1820894 -
nia.com/advisories/55302 - http://en.securitylab.ru/lab/PT-2013-13 - https://service.sap.com/sap/support/notes/1820894 - http://osvdb.org/98892 - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/bid/63302
CVE ID: CVE-2013-6245 State: PUBLISHED Published: 2013-10-24T00:00:00 Last Updated: 2024-08-06T17:38:59.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63310 - http://www.sybase.com/detail?id=1099371 - http://scn.sap.com/docs/DOC-8218 - http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf - http:/
m/docs/DOC-8218 - http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf - http://osvdb.org/98899 - https://service.sap.com/sap/support/notes/1893560
CVE ID: CVE-2013-6246 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T20:46:48.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63259 - http://packetstormsecurity.com/files/123703/quest-captcha.txt
CVE ID: CVE-2013-6247 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6248 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6249 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6250 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6251 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6252 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6253 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6254 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6255 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6256 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6257 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6258 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6259 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6260 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6261 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6262 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6263 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6264 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6265 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6266 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6267 State: PUBLISHED Published: 2013-12-05T18:00:00 Last Updated: 2024-08-06T17:38:59.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.11.9 allow remote attackers to inject arbitrary web script or HTML via the (1) box parameter to messaging/messagebox.php, cidToEdit parameter to (2) adminregisteruser.php or (3) admin_user_course_settings.php in admin/, (4) module_id parameter to admin/module/module.php, or (5) offset parameter to admin/right/profile_list.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23179 - http://packetstorms
l Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23179 - http://packetstormsecurity.com/files/124200 - http://secunia.com/advisories/55753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89264 - http://www.securitytracker.com/id/1029435 - http://forum.claroline.net/viewtopic.php?f=88&t=26413 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0139.html
CVE ID: CVE-2013-6271 State: PUBLISHED Published: 2013-12-14T20:00:00 Last Updated: 2024-08-06T17:38:59.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UNSPECIFIED option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029410 - https://cureblog.de/2013/11/cve-2013-6271-remove-device-locks-from-android-phone/ - http://seclists.org/fulldisclosure/2013/Nov/204 - http://ww
3/11/cve-2013-6271-remove-device-locks-from-android-phone/ - http://seclists.org/fulldisclosure/2013/Nov/204 - http://www.theregister.co.uk/2013/12/10/android_has_lockbypass_bug/
CVE ID: CVE-2013-6272 State: PUBLISHED Published: 2018-05-02T15:00:00 Last Updated: 2024-08-06T17:39:00.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Jul/13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/94423 - http://packetstormsecurity.com/files/127359/Android-OS-Auth
https://exchange.xforce.ibmcloud.com/vulnerabilities/94423 - http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html - https://curesec.com/blog/article/blog/35.html - http://www.securityfocus.com/bid/68415
CVE ID: CVE-2013-6275 State: PUBLISHED Published: 2019-11-05T18:50:49 Last Updated: 2024-08-06T17:38:59.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-6275 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-6275 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0134.html - http://www.exploit-db.com/exploits/29274 - http://www.securityfocus.com/bid/63377 - http://www.securitytracker.com/id/1029285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88321
CVE ID: CVE-2013-6276 State: PUBLISHED Published: 2021-08-09T17:25:40 Last Updated: 2024-08-06T17:38:59.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models Additional Analyst Notes: - CVE Program Container: References: - http://firmware.re/vulns/acsa-2013-002.php - http://web.archive.org/web/20210320190014/http://firmware.re/vulns/acsa-2013-002.php
CVE ID: CVE-2013-6277 State: PUBLISHED Published: 2020-02-13T22:59:17 Last Updated: 2024-08-06T17:38:59.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNAP VioCard 300 has hardcoded RSA private keys. Additional Analyst Notes: - CVE Program Container: References: - http://firmware.re/usenixsec14/ - http://firmware.re/vulns/acsa-2013-002.php
CVE ID: CVE-2013-6280 State: PUBLISHED Published: 2013-10-25T14:00:00Z Last Updated: 2024-09-16T22:31:18.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/plugins/social-sharing-toolkit/changelog
CVE ID: CVE-2013-6281 State: PUBLISHED Published: 2013-10-25T14:00:00Z Last Updated: 2024-09-17T01:40:36.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "page" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55396 - http://osvdb.org/98831 - http://packetstormsecurity.com/files/123699/WordPress-dhtmlxspreadsheet-Cross-Site-Scripting.html
CVE ID: CVE-2013-6282 State: PUBLISHED Published: 2013-11-19T15:00:00.000Z Last Updated: 2025-10-22T00:05:39.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.5 - https://www.exploit-db.com/exp
Vulnrichment: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.5 - https://www.exploit-db.com/exploits/40975/ - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8404663f81d212918ff85f493649a7991209fa04 - http://www.codeaurora.org/projects/security-advisories/missing-access-checks-putusergetuser-kernel-api-cve-2013-6282 - http://www.securityfocus.com/bid/63734 - http://www.openwall.com/lists/oss-security/2013/11/14/11 - https://github.com/torvalds/linux/commit/8404663f81d212918ff85f493649a7991209fa04 - http://www.ubuntu.com/usn/USN-2067-1
CVE ID: CVE-2013-6283 State: PUBLISHED Published: 2013-10-25T23:00:00 Last Updated: 2024-08-06T17:39:01.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/27700 - http://www.osvdb.org/96603 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19318
CVE ID: CVE-2013-6284 State: PUBLISHED Published: 2013-10-26T16:00:00Z Last Updated: 2024-09-17T02:11:06.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/ - http://scn.sap.com/docs/DOC-8218 - http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf
CVE ID: CVE-2013-6285 State: PUBLISHED Published: 2013-10-28T01:00:00Z Last Updated: 2024-09-16T17:08:25.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obtain sensitive query-structure information via an invalid search request, a different vulnerability than CVE-2013-6020. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/911678
CVE ID: CVE-2013-6288 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T17:39:01.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62674 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/ - http://secunia.com/advisories/54978 - http://typo3.org/extensions/repository/view/solr
CVE ID: CVE-2013-6289 State: PUBLISHED Published: 2013-10-28T22:00:00 Last Updated: 2024-08-06T17:39:01.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62674 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/ - http://secunia.com/advisories/54978 - http://typo3.org/extensions/repository/view/solr
CVE ID: CVE-2013-6295 State: PUBLISHED Published: 2020-02-18T16:15:02 Last Updated: 2024-08-06T17:39:00.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module Additional Analyst Notes: - CVE Program Container: References: - http://davidsopaslabs.blogspot.com/2013/10/how-salesman-could-hack-prestashop.html - http://davidsopaslabs.blogspot.com/2013/
CVE ID: CVE-2013-6299 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:01.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6300, CVE-2013-6301, CVE-2013-6320, and CVE-2013-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
3-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88525 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6300 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:00.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6301, CVE-2013-6320, and CVE-2013-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
3-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88526 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6301 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:00.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6320, and CVE-2013-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabil
3-6333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88527 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6302 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:39:00.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6331. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88532 - http://www-01.ibm.com/support/docview.wss?uid=swg2166
es: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88532 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6303 State: PUBLISHED Published: 2014-03-05T11:00:00 Last Updated: 2024-08-06T17:38:59.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88534 - http://www-01.ibm.com/support/docview.wss?uid=swg21666110
CVE ID: CVE-2013-6304 State: PUBLISHED Published: 2014-03-06T11:00:00 Last Updated: 2024-08-06T17:38:59.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a (1) configuration or (2) JAR file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65929 - http://www-01.ibm.com/support/docview.wss?uid=swg21666093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88535