Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4945 State: PUBLISHED Published: 2013-07-29T22:00:00Z Last Updated: 2024-09-16T19:37:01.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the (1) ASPSESSIONIDASSRATTQ, (2) TABLE_WIDGET_1, (3) TABLE_WIDGET_2, (4) browserDateTimeInfo, or (5) browserNumberInfo cookie parameter to DashBoardGUI.aspx; or the (6) UID parameter to login.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26806 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0082.html - http://www.se
p://www.exploit-db.com/exploits/26806 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0082.html - http://www.securityfocus.com/bid/61147
CVE ID: CVE-2013-4946 State: PUBLISHED Published: 2013-07-29T22:00:00Z Last Updated: 2024-09-16T23:01:14.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to inject arbitrary web script or HTML via the (1) SelTab parameter to QV_admin.aspx, the (2) CallBack parameter to QV_grid.aspx, or the (3) HelpPage parameter to commonhelp.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26806 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0082.html - http://www.securityfocus.com/bid/61147
CVE ID: CVE-2013-4947 State: PUBLISHED Published: 2013-07-29T23:00:00 Last Updated: 2024-08-06T16:59:41.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54090 - http://osvdb.org/95059 - http://www.securityfocus.com/bid/61075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85544 - http://www.sawmill.net/version_history8.html
CVE ID: CVE-2013-4948 State: PUBLISHED Published: 2013-07-29T23:00:00 Last Updated: 2024-08-06T16:59:41.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the element_2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26553 - http://osvdb.org/94801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85388 - http://packetstormsecurity.com/files/122255/Machform-Form-Maker-2-XSS-Shell-Upload-SQL-Injection.html
CVE ID: CVE-2013-4949 State: PUBLISHED Published: 2013-07-29T23:00:00 Last Updated: 2024-08-06T16:59:41.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in the upload form's directory in data/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/85386 - http://www.exploit-db.com/exploits/26553 - http://osvdb.org/94802 - http://packetstormsecurity.com/files/122255/Machform-Form-Maker-2-XSS-Shell-Upload-SQL-Injection.html
CVE ID: CVE-2013-4950 State: PUBLISHED Published: 2013-07-29T23:00:00 Last Updated: 2024-08-06T16:59:41.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web script or HTML via the element_2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85389 - http://packetstormsecurity.com/files/122255/Machform-Form-Maker-2-XSS-Shell-Upload-SQL-Injection.html - http://osvdb.org/94803
CVE ID: CVE-2013-4951 State: PUBLISHED Published: 2013-07-29T23:00:00Z Last Updated: 2024-09-16T17:03:59.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) pass parameter in views/login.php or (3) name or (4) pass parameter in views/signup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61114 - http://seclists.org/fulldisclosure/2013/Jul/101 - http://osvdb.org/95120 - https://www.mavitunasecurity.com/xss-vulnerabilities-in-mintboard/
CVE ID: CVE-2013-4952 State: PUBLISHED Published: 2013-07-29T23:00:00Z Last Updated: 2024-09-17T01:01:26.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/26416
CVE ID: CVE-2013-4953 State: PUBLISHED Published: 2013-07-29T23:00:00Z Last Updated: 2024-09-16T16:49:00.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53977 - http://www.exploit-db.com/exploits/26405
CVE ID: CVE-2013-4954 State: PUBLISHED Published: 2013-07-29T23:00:00 Last Updated: 2024-08-06T16:59:41.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pass1 or (2) pass2 parameter in a register action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset?reponame=&old=740
onal Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset?reponame=&old=740249%40pie-register&new=740249%40pie-register - http://secunia.com/advisories/54123 - http://osvdb.org/95160 - http://www.securityfocus.com/bid/61140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85604 - http://wordpress.org/plugins/pie-register/changelog/ - http://wordpress.org/support/topic/security-issue-web-application-cross-site-scripting
CVE ID: CVE-2013-4955 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-09-17T00:26:05.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the service parameter. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4955/
CVE ID: CVE-2013-4956 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T16:59:40.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to read or modify those modules depending on the original permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2761 - http://puppetlabs.com/security/cve/cve-2013-4956/ - http
r: References: - http://www.debian.org/security/2013/dsa-2761 - http://puppetlabs.com/security/cve/cve-2013-4956/ - http://rhn.redhat.com/errata/RHSA-2013-1284.html - http://rhn.redhat.com/errata/RHSA-2013-1283.html
CVE ID: CVE-2013-4957 State: PUBLISHED Published: 2013-10-25T23:00:00 Last Updated: 2024-08-06T16:59:41.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88089 - http://secunia.com/advisories/55362 - http://osvdb.org/98639 - http://puppetlabs.com/security/cve/cve-2013-4957
CVE ID: CVE-2013-4958 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-09-16T16:54:14.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.0.1 does not use a session timeout, which makes it easier for attackers to gain privileges by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4958/
CVE ID: CVE-2013-4959 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-09-16T18:33:35.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain sensitive information such as (1) host name, (2) MAC address, and (3) SSH keys via the web browser cache. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4959/
CVE ID: CVE-2013-4961 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-09-16T17:24:19.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4961/
CVE ID: CVE-2013-4962 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-09-17T01:11:25.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4962/
CVE ID: CVE-2013-4963 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T16:59:41.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report, (2) group, or (3) class or possibly have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4963
CVE ID: CVE-2013-4964 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-09-17T01:50:33.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4964/
CVE ID: CVE-2013-4965 State: PUBLISHED Published: 2013-10-25T23:00:00Z Last Updated: 2024-09-16T19:52:20.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/98640 - http://puppetlabs.com/security/cve/cve-2013-4965
CVE ID: CVE-2013-4966 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T16:59:41.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029873 - http://puppetlabs.com/security/cve/cve-2013-4966
CVE ID: CVE-2013-4967 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-09-17T00:11:37.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4967
CVE ID: CVE-2013-4968 State: PUBLISHED Published: 2019-12-11T17:50:12 Last Updated: 2024-08-06T16:59:40.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management." Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2013-4968
CVE ID: CVE-2013-4969 State: PUBLISHED Published: 2014-01-07T18:00:00 Last Updated: 2024-08-06T16:59:41.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2831 - http://secunia.com/advisories/56254 - http://secunia.com/advisories/56253 - http://puppetlabs.com/security/cve/cve-2013-4969 - http://www.ubuntu.com/usn/USN-2077-1
CVE ID: CVE-2013-4971 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T16:59:41.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029873 - http://puppetlabs.com/security/cve/cve-2013-4971
CVE ID: CVE-2013-4973 State: PUBLISHED Published: 2013-08-27T01:00:00 Last Updated: 2024-08-06T16:59:41.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61989 - http://service.real.com/realplayer/security/08232013_player/en/ - http://www.kb.cert.org/vuls/id/246524
CVE ID: CVE-2013-4974 State: PUBLISHED Published: 2013-08-27T01:00:00 Last Updated: 2024-08-06T16:59:41.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealMedia file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61990 - http://service.real.com/realplayer/security/08232013_player/en/
CVE ID: CVE-2013-4975 State: PUBLISHED Published: 2019-12-27T16:45:02 Last Updated: 2024-08-06T16:59:41.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hikvision DS-2CD7153-E IP Camera has Privilege Escalation Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabilities - http://www.securityfocus.com/bid/61643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86291
CVE ID: CVE-2013-4976 State: PUBLISHED Published: 2019-12-27T16:48:23 Last Updated: 2024-08-06T16:59:41.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabilities - http://www.securityfocus.com/bid/61646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86293
CVE ID: CVE-2013-4977 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T16:59:41.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61642 - http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabilities - http://ar
tyfocus.com/bid/61642 - http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabilities - http://archives.neohapsis.com/archives/bugtraq/2013-08/0046.html - http://packetstormsecurity.com/files/122718/Hikvision-IP-Cameras-Overflow-Bypass-Privilege-Escalation.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86292
CVE ID: CVE-2013-4978 State: PUBLISHED Published: 2014-02-05T15:00:00 Last Updated: 2024-08-06T16:59:41.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62036 - http://www.coresecurity.com/advisories/aloaha-pdf-suite-buffer-overflow-vulnerability - http://secunia.com/advisories/54585 - http://archives.neohapsis.com/archives/bugtraq/2013-08/0179.html
CVE ID: CVE-2013-4979 State: PUBLISHED Published: 2014-01-31T15:00:00 Last Updated: 2024-08-06T16:59:41.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-08/0180.html - http://secunia.com/advisories/54584 - http://www.coresecurity.com/advisories/eps-viewer-buffer-overflow-vulnerability
CVE ID: CVE-2013-4980 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T16:59:41.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a long string in the URI in an RTSP SETUP request. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Aug/284 - http://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities - http://osvdb.org/96692
CVE ID: CVE-2013-4981 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T16:59:41.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a long string in the Network.SMTP.Receivers parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Aug/284 - http://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities - http://osvdb.org/96693
CVE ID: CVE-2013-4982 State: PUBLISHED Published: 2019-12-27T16:53:10 Last Updated: 2024-08-06T16:59:41.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVTECH AVN801 DVR has a security bypass via the administration login captcha Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62035 - http://seclists.org/fulldisclosure/2013/Aug/284 - https://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities
CVE ID: CVE-2013-4983 State: PUBLISHED Published: 2013-09-10T10:00:00Z Last Updated: 2024-09-17T03:02:50.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities - http://www.sophos.com/en-us/support/knowledgebase/119773.aspx
CVE ID: CVE-2013-4984 State: PUBLISHED Published: 2013-09-10T10:00:00Z Last Updated: 2024-09-16T19:04:18.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities - http://www.sophos.com/en-us/support/knowledgebase/119773.aspx
CVE ID: CVE-2013-4985 State: PUBLISHED Published: 2019-12-27T16:58:37 Last Updated: 2024-08-06T16:59:41.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63541 - http://www.exploit-db.com/exploits/29516 - http://www.coresecurity.com/advisories/vivotek-ip-cameras-rtsp-authentication-bypass
CVE ID: CVE-2013-4986 State: PUBLISHED Published: 2013-10-04T20:00:00Z Last Updated: 2024-09-17T01:51:17.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/97959 - http://packetstormsecurity.com/files/123476 - http://secunia.com/advisories/55058 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html - http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability
CVE ID: CVE-2013-4987 State: PUBLISHED Published: 2013-11-08T02:00:00Z Last Updated: 2024-09-17T03:23:16.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/advisories/pinapp-mail-secure-access-control-failure