Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0631 State: PUBLISHED Published: 2013-01-09T01:00:00.000Z Last Updated: 2025-10-22T00:05:44.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.adobe.com/support/security/bulletins/apsb13-03.html - http://www.adobe.com/support/security/advisories/apsa13-01.html
CVE ID: CVE-2013-0632 State: PUBLISHED Published: 2013-01-17T00:00:00.000Z Last Updated: 2025-10-22T00:05:44.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.exploit-db.com/exploits/30210 - http://www.adobe.com/support/security/bulletins/apsb13-03.html
References: - http://www.exploit-db.com/exploits/30210 - http://www.adobe.com/support/security/bulletins/apsb13-03.html - http://www.adobe.com/support/security/advisories/apsa13-01.html
CVE ID: CVE-2013-0633 State: PUBLISHED Published: 2013-02-08T11:00:00 Last Updated: 2024-08-06T14:33:05.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-04.html - http://rhn.redhat.com/errata/RHSA-
ainer: References: - http://www.adobe.com/support/security/bulletins/apsb13-04.html - http://rhn.redhat.com/errata/RHSA-2013-0243.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00006.html
CVE ID: CVE-2013-0634 State: PUBLISHED Published: 2013-02-08T11:00:00 Last Updated: 2024-08-06T14:33:05.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-04.html - http
lyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-04.html - http://rhn.redhat.com/errata/RHSA-2013-0243.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00006.html
CVE ID: CVE-2013-0635 State: PUBLISHED Published: 2013-02-13T21:00:00 Last Updated: 2024-08-06T14:33:05.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-06.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html
CVE ID: CVE-2013-0636 State: PUBLISHED Published: 2013-02-13T21:00:00 Last Updated: 2024-08-06T14:33:05.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb13-06.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html
CVE ID: CVE-2013-0637 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announc
rs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0638 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0647. Additional Analyst Notes: -
e (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0647. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0639 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-s
specified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0640 State: PUBLISHED Published: 2013-02-14T01:00:00.000Z Last Updated: 2025-10-22T00:05:44.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html - http://www.kb.cert.org/vuls/id/422807 - http://lists.opensuse.org/opensuse-security-announc
-vulnerability-report.html - http://www.kb.cert.org/vuls/id/422807 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html - http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16406 - http://rhn.redhat.com/errata/RHSA-2013-0551.html - http://www.adobe.com/support/security/bulletins/apsb13-07.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html - http://www.adobe.com/support/security/advisories/apsa13-02.html - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2013-0641 State: PUBLISHED Published: 2013-02-14T01:00:00.000Z Last Updated: 2025-10-22T00:05:44.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html - http://www.kb.cert.org/vuls/id/422807 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html - htt
http://www.kb.cert.org/vuls/id/422807 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html - http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html - http://rhn.redhat.com/errata/RHSA-2013-0551.html - http://www.adobe.com/support/security/bulletins/apsb13-07.html - http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296 - http://www.adobe.com/support/security/advis
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296 - http://www.adobe.com/support/security/advisories/apsa13-02.html - http://security.gentoo.org/glsa/glsa-201308-03.xml
CVE ID: CVE-2013-0642 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-13
pecified vectors, a different vulnerability than CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0643 State: PUBLISHED Published: 2013-02-27T00:00:00.000Z Last Updated: 2025-10-22T00:05:43.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2013-0574.html - http://www.adobe.com/support/secu
ISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2013-0574.html - http://www.adobe.com/support/security/bulletins/apsb13-08.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.html
CVE ID: CVE-2013-0644 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0649 and CVE-2013-1374. Additional Analyst Notes:
code via unspecified vectors, a different vulnerability than CVE-2013-0649 and CVE-2013-1374. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0645 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-13
pecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0646 State: PUBLISHED Published: 2013-03-13T10:00:00 Last Updated: 2024-08-06T14:33:05.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-sec
ecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html - http://www.adobe.com/support/security/bulletins/apsb13-09.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0643.html
CVE ID: CVE-2013-0647 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638. Additional Analyst Notes: -
e (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0648 State: PUBLISHED Published: 2013-02-27T00:00:00.000Z Last Updated: 2025-10-22T00:05:43.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2013-0574.html - http://www.adobe.com/support/secu
CVE ID: CVE-2013-0649 State: PUBLISHED Published: 2013-02-12T20:00:00 Last Updated: 2024-08-06T14:33:05.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-1374. Additional Analyst Notes:
code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-1374. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html - http://rhn.redhat.com/errata/RHSA-2013-0254.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html - http://www.us-cert.gov/cas/techalerts/TA13-043A.html - http://www.adobe.com/support/security/bulletins/apsb13-05.html
CVE ID: CVE-2013-0650 State: PUBLISHED Published: 2013-03-13T10:00:00 Last Updated: 2024-08-06T14:33:05.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/
ode via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html - http://www.adobe.com/support/security/bulletins/apsb13-09.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html - http://marc.info/?l=bugtraq&m=139455789818399&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0643.html
CVE ID: CVE-2013-0651 State: PUBLISHED Published: 2013-01-27T18:00:00Z Last Updated: 2024-09-16T18:18:04.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf
CVE ID: CVE-2013-0652 State: PUBLISHED Published: 2013-01-27T18:00:00Z Last Updated: 2024-09-17T03:13:24.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf
CVE ID: CVE-2013-0653 State: PUBLISHED Published: 2013-01-27T18:00:00Z Last Updated: 2024-09-16T17:15:24.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf
CVE ID: CVE-2013-0654 State: PUBLISHED Published: 2013-01-27T18:00:00Z Last Updated: 2024-09-16T19:15:02.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (daemon crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf