Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3932 State: PUBLISHED Published: 2020-01-02T19:26:30 Last Updated: 2024-08-06T16:22:01.474Z Vendors: Jomres Products: Jomres component for Joomla! Problem Types: SQL Injection Description: SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86252 - https://www.joomlacorner.com/joomla-news/joomla-vulnerab
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86252 - https://www.joomlacorner.com/joomla-news/joomla-vulnerability-news/834-joomla-jomres-component-script-insertion-and-sql-injection-vulnerabilities.html
CVE ID: CVE-2013-3933 State: PUBLISHED Published: 2014-02-11T17:00:00 Last Updated: 2024-08-06T16:22:01.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the user_name parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/96313 - http://secunia.com/advisories/54054 - http://www.securityfocus.com/bid/61790
CVE ID: CVE-2013-3934 State: PUBLISHED Published: 2013-09-10T19:00:00Z Last Updated: 2024-09-16T22:30:49.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long font name in a WPS file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53266 - http://www.securityfocus.com/bid/61796 - http://www.securitytracker.com/id/1028920
CVE ID: CVE-2013-3935 State: PUBLISHED Published: 2020-01-02T14:31:52 Last Updated: 2024-08-06T16:22:01.472Z Vendors: Opsview Products: Opsview, Opsview Core Problem Types: Cross-Site Request Forgery Description: Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes - http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822
CVE ID: CVE-2013-3936 State: PUBLISHED Published: 2020-01-02T14:31:49 Last Updated: 2024-08-06T16:30:48.701Z Vendors: Opsview Products: Opsview, Opsview Core Problem Types: Cross-Site Scripting Description: Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes - http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822
CVE ID: CVE-2013-3937 State: PUBLISHED Published: 2020-01-02T19:11:47 Last Updated: 2024-08-06T16:30:48.910Z Vendors: XnView Products: XnView Problem Types: Buffer Overflow Description: Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52101 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087
CVE ID: CVE-2013-3938 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T16:30:48.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUM_ELEMENTS field in an IFD_ENTRY structure in a JXR file, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56172 - http://www.securityfocus.com/bid/66187
CVE ID: CVE-2013-3939 State: PUBLISHED Published: 2020-01-02T19:11:43 Last Updated: 2024-08-06T16:30:48.182Z Vendors: XnView Products: XnView Problem Types: Other Description: xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52101 - http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087
CVE ID: CVE-2013-3940 State: PUBLISHED Published: 2013-11-13T00:00:00 Last Updated: 2024-08-06T16:30:48.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image in a Windows Write (.wri) document, which is not properly handled in WordPad, aka "Graphics Device Interface Integer Overflow Vulnerability.
.wri) document, which is not properly handled in WordPad, aka "Graphics Device Interface Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18722 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-089
CVE ID: CVE-2013-3941 State: PUBLISHED Published: 2020-01-02T19:11:40 Last Updated: 2024-08-06T16:30:48.222Z Vendors: XnView Products: XnView Problem Types: Buffer Overflow Description: Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://newsgroup.xnview.com/viewtopic.php?f=35&t=29087 - http://secunia.com/advisories/52101
CVE ID: CVE-2013-3942 State: PUBLISHED Published: 2020-02-11T17:37:49 Last Updated: 2024-08-06T16:30:49.386Z Vendors: Daum Products: Potplayer Problem Types: untrusted search path Description: Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89352
CVE ID: CVE-2013-3943 State: PUBLISHED Published: 2014-03-12T14:00:00 Last Updated: 2024-08-06T16:30:49.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Display Name field in the Manage Profile. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53493 - http://www.securityfocus.com/bid/61809 - http://www.dnnsoftware.com/platform/manage/security-center
CVE ID: CVE-2013-3944 State: PUBLISHED Published: 2020-01-02T18:43:09 Last Updated: 2024-08-06T16:30:48.201Z Vendors: IrfanView Products: MrSID plugin Problem Types: Buffer Overflow Description: Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64385 - https://www.irfanview.com/history_old.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/89804
CVE ID: CVE-2013-3945 State: PUBLISHED Published: 2020-01-02T18:43:05 Last Updated: 2024-08-06T16:30:48.178Z Vendors: IrfanView Products: MrSID plugin Problem Types: Buffer Overflow Description: The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89805 - https://www.irfanview.com/history_old.htm
CVE ID: CVE-2013-3946 State: PUBLISHED Published: 2020-01-02T18:43:01 Last Updated: 2024-08-06T16:30:49.080Z Vendors: IrfanView Products: MrSID plugin Problem Types: Buffer Overflow Description: Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89806 - https://www.irfanview.com/history_old.htm
CVE ID: CVE-2013-3947 State: PUBLISHED Published: 2018-04-24T20:00:00 Last Updated: 2024-08-06T16:30:49.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain privileges via a crafted 0xA3350014 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90626
CVE ID: CVE-2013-3948 State: PUBLISHED Published: 2013-06-05T10:00:00 Last Updated: 2024-08-06T16:30:48.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialog, which makes it easier for remote attackers to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that leverages an open redirect vulnerability within a trusted domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vul
s: - http://www.syscan.org/index.php/sg/program/day/2 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - http://support.apple.com/kb/HT6162
CVE ID: CVE-2013-3949 State: PUBLISHED Published: 2013-06-05T10:00:00Z Last Updated: 2024-09-16T23:45:48.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the _POSIX_SPAWN_DISABLE_ASLR and _POSIX_SPAWN_ALLOW_DATA_EXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the posix_spawnattr_setflags function. Additional Analyst Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage
can.org/index.php/sg/program/day/2 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
CVE ID: CVE-2013-3950 State: PUBLISHED Published: 2013-06-05T10:00:00 Last Updated: 2024-08-06T16:30:48.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLD_SHARED_CACHE_DIR environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://www.securitytracker.com/id/1029054 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - http://list
- http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-3951 State: PUBLISHED Published: 2013-06-05T10:00:00 Last Updated: 2024-08-06T16:30:49.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: sys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user-space stack-cookie implementation, which allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring, as demonstrated by an iOS untethering attack or an attack against a setuid Mac OS X program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://www.sysca
ional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033703 - http://www.syscan.org/index.php/sg/program/day/2 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html - https://support.apple.com/HT205213 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
CVE ID: CVE-2013-3952 State: PUBLISHED Published: 2013-06-05T10:00:00Z Last Updated: 2024-09-16T22:46:04.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROC_PIDFDPIPEINFO option to the proc_info system call for a kernel pipe handle. Additional Analyst Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
CVE ID: CVE-2013-3953 State: PUBLISHED Published: 2013-06-05T10:00:00 Last Updated: 2024-08-06T16:30:49.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mach_port_space_info function in osfmk/ipc/mach_debug.c in the XNU kernel in Apple Mac OS X 10.8.x does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://www.securitytracker.com/id/1029054 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - http://support
http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-3954 State: PUBLISHED Published: 2013-06-05T10:00:00 Last Updated: 2024-08-06T16:30:48.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate the data for file actions and port actions, which allows local users to (1) cause a denial of service (panic) via a size value that is inconsistent with a header count field, or (2) obtain sensitive information from kernel heap memory via a certain size value in conjunction with a crafted buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://www.securityt
st Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://www.securitytracker.com/id/1029054 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-3955 State: PUBLISHED Published: 2013-06-05T10:00:00 Last Updated: 2024-08-06T16:30:48.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service (memory corruption) or have unspecified other impact via an invalid file on an msdosfs filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.syscan.org/index.php/sg/program/day/2 - http://www.securitytracker.com/id/1029054 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_
.php/sg/program/day/2 - http://www.securitytracker.com/id/1029054 - http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-3956 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T16:30:49.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://pastebin.com/GB4iiEwR - http://www.exploit-db.com/exploits/26452 - http://www.exploit-db.com/exploits/27191 - http://www.novell
n.com/GB4iiEwR - http://www.exploit-db.com/exploits/26452 - http://www.exploit-db.com/exploits/27191 - http://www.novell.com/support/kb/doc.php?id=7012497
CVE ID: CVE-2013-3957 State: PUBLISHED Published: 2013-06-14T19:00:00Z Last Updated: 2024-09-16T20:06:43.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf
CVE ID: CVE-2013-3958 State: PUBLISHED Published: 2013-06-14T19:00:00Z Last Updated: 2024-09-16T18:07:49.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for remote attackers to obtain access via an unspecified request. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf
CVE ID: CVE-2013-3959 State: PUBLISHED Published: 2013-06-14T19:00:00Z Last Updated: 2024-09-16T20:42:00.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, exhibits different behavior for NetBIOS user names depending on whether the user account exists, which allows remote authenticated users to enumerate account names via crafted URL parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345843.pdf
CVE ID: CVE-2013-3960 State: PUBLISHED Published: 2020-01-24T14:35:55 Last Updated: 2024-08-06T16:30:49.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89171 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18896
CVE ID: CVE-2013-3961 State: PUBLISHED Published: 2014-03-11T15:00:00 Last Updated: 2024-08-06T16:30:49.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/94141 - http://www.securityfocus.com/bid/60481 - http://www.webera.fr/advisory-02-php-agenda-isql-exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/84938 - http://seclists.org/fulldisclosure/2013/Jun/67 - http://packetstormsecurity.com/files/121978/Simple-PHP-Ag
ities/84938 - http://seclists.org/fulldisclosure/2013/Jun/67 - http://packetstormsecurity.com/files/121978/Simple-PHP-Agenda-2.2.8-SQL-Injection.html - http://www.exploit-db.com/exploits/26136
CVE ID: CVE-2013-3962 State: PUBLISHED Published: 2013-10-01T19:00:00Z Last Updated: 2024-09-17T00:40:40.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models before firmware 1.0.4.44, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84 - http://www.grandstream.com/firmware/BETATEST/GXV35xx_GXV36xx_H/Release_Note_GXV35xx_GXV36xx_H1.0.4.44.pdf
CVE ID: CVE-2013-3963 State: PUBLISHED Published: 2013-10-01T19:00:00Z Last Updated: 2024-09-16T17:18:50.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified victims for requests that add users. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84
CVE ID: CVE-2013-3964 State: PUBLISHED Published: 2013-10-01T19:00:00Z Last Updated: 2024-09-16T22:45:41.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Jun/84
CVE ID: CVE-2013-3969 State: PUBLISHED Published: 2013-10-01T20:00:00Z Last Updated: 2024-09-16T16:24:09.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/30/10 - http://blog.scrt.ch/2013/06/04/mongodb-rce-by-databasespraying/ - http://secunia.com/advisories/54170 - http://www.mongodb.org/about/alerts/ - https://j
ongodb-rce-by-databasespraying/ - http://secunia.com/advisories/54170 - http://www.mongodb.org/about/alerts/ - https://jira.mongodb.org/browse/SERVER-9878