Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
html - http://www.securityfocus.com/bid/57159 - http://www.securitytracker.com/id?1027937 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.openwall.com/lists/oss-security/2013/01/04/2 - http://seclists.org/oss-sec/2013/q1/att-17/xsa37-4_2.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/80977 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://osvdb.org/88913
CVE ID: CVE-2013-0155 State: PUBLISHED Published: 2013-01-13T22:00:00 Last Updated: 2024-08-06T14:18:09.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660 and CVE-2012-2694. Additional Analyst Notes: - CVE Program Container: References: - http://li
ted issue to CVE-2012-2660 and CVE-2012-2694. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html - http://rhn.redhat.com/errata/RHSA-2013-0155.html - http://www.debian.org/security/2013/dsa-2609 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html - https://puppet.com/security/cve/cve-2013-0155 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00082.html - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html - http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A - http:/
ts.opensuse.org/opensuse-updates/2013-12/msg00079.html - http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A - http://rhn.redhat.com/errata/RHSA-2013-0154.html - https://groups.google.com/group/rubyonrails-security/msg/bc6f13dafe130ee9?dmode=source&output=gplain
CVE ID: CVE-2013-0156 State: PUBLISHED Published: 2013-01-13T22:00:00 Last Updated: 2024-08-06T14:18:09.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion. Additional Analyst Notes: - CVE Program Container: Re
upport for (1) YAML type conversion or (2) Symbol type conversion. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/group/rubyonrails-security/msg/c1432d0f8c70e89d?dmode=source&output=gplain - http://www.insinuator.net/2013/01/rails-yaml/ - http://rhn.redhat.com/errata/RHSA-2013-0155.html - http://www.kb.cert.org/vuls/id/628463 - https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156 - http://www.fujitsu.com/global/support/software/security/products-f/sw-sv-rcve-ror201301e.html - http://www.kb.cert.org/vuls/id/380039 - http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
.html - http://www.kb.cert.org/vuls/id/380039 - http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html - http://www.debian.org/security/2013/dsa-2604 - http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A - http://rhn.redhat.com/errata/RHSA-2013-0154.html - https://puppet.com/security/cve/cve-2013-0156 - http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/ - http://rhn.redhat.com/errata/RHSA-2013-0153.html
CVE ID: CVE-2013-0157 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T14:18:09.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/697464 - http://osvdb.org/88953 - http://rhn.redhat.com/errata/RHSA-2013-0517.html - http://marc.info/?l
bugs.debian.org/697464 - http://osvdb.org/88953 - http://rhn.redhat.com/errata/RHSA-2013-0517.html - http://marc.info/?l=oss-security&m=135749410312247&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:154 - https://bugzilla.redhat.com/show_bug.cgi?id=892330
CVE ID: CVE-2013-0158 State: PUBLISHED Published: 2013-02-24T22:00:00 Last Updated: 2024-08-06T14:18:09.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04 - http://rhn.redhat.com/errata/RHSA-2013-0220.html - https://github.com/jenki
t/3dc13b957b14cec649036e8dd517f0f9cb21fb04 - http://rhn.redhat.com/errata/RHSA-2013-0220.html - https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04 - https://github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5 - https://github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd - https://github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602 - http://www.openwall.com/lists/oss-security/2013/01/07/4 - https://bugzilla.redhat.com/show_bug.cgi?id=892795 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-ad
7/4 - https://bugzilla.redhat.com/show_bug.cgi?id=892795 - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb
CVE ID: CVE-2013-0159 State: PUBLISHED Published: 2018-05-01T19:00:00 Last Updated: 2024-08-06T14:18:09.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=892299 - https://bugzilla.redhat.com/show_bug.cgi?id=892815
CVE ID: CVE-2013-0160 State: PUBLISHED Published: 2013-02-18T02:00:00 Last Updated: 2024-08-06T14:18:09.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.openwall.com/lists/oss-security/2013/01/08/3 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html - http://lists.opensuse.
com/usn/USN-2128-1 - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html - https://bugzilla.redhat.com/show_bug.cgi?id=892983 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html
CVE ID: CVE-2013-0161 State: PUBLISHED Published: 2020-01-29T14:54:30 Last Updated: 2024-08-06T14:18:09.320Z Vendors: Havalite Products: CMS Problem Types: XSS Description: Havalite CMS 1.1.7 has a stored XSS vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/01/08/4
CVE ID: CVE-2013-0162 State: PUBLISHED Published: 2013-03-01T02:00:00Z Last Updated: 2024-08-06T14:18:09.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=892806 - http://rhn.redhat.com/errata/RHSA-2013-0548.html - http://rhn.redhat.com/errata/RHSA-2013-0544.html
CVE ID: CVE-2013-0163 State: PUBLISHED Published: 2019-12-05T14:57:36 Last Updated: 2024-08-06T14:18:09.140Z Vendors: OpenShift haproxy cartridge Products: OpenShift haproxy cartridge Problem Types: predictable /tmp in set-proxy connection hook Description: OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0163 - https://access.redhat.com/security/cve/cve-2013-0163
CVE ID: CVE-2013-0164 State: PUBLISHED Published: 2013-02-24T22:00:00Z Last Updated: 2024-08-06T14:18:09.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/origin-server/commit/524465f70a32d0eb6bf047e6a05c76c22d52bfa2 - http://rhn.redhat.com/errata/RHSA-2013-0220.html - https://github.com/openshift/origin-server/pull/1136 - https://bugzilla.redhat.com/show_bug.cgi?
a/RHSA-2013-0220.html - https://github.com/openshift/origin-server/pull/1136 - https://bugzilla.redhat.com/show_bug.cgi?id=893307
CVE ID: CVE-2013-0165 State: PUBLISHED Published: 2019-11-01T18:12:44 Last Updated: 2024-08-06T14:18:09.190Z Vendors: OpenShift mongodb cartridge Products: OpenShift mongodb cartridge Problem Types: Other Description: cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0165
CVE ID: CVE-2013-0166 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T14:18:09.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key. Additional Analyst Notes: - CVE Program Container: References: - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=66e8211c0b1347970096e04b18aa52567c325200 - http://rhn.redhat.com/errata/RHSA-2013-0587.html - https://oval.cisecurity.org/repository/search
6e04b18aa52567c325200 - http://rhn.redhat.com/errata/RHSA-2013-0587.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19360 - http://secunia.com/advisories/55139 - http://www.openssl.org/news/secadv_20130204.txt - https://bugzilla.redhat.com/show_bug.cgi?id=908052 - http://marc.info/?l=bugtraq&m=136396549913849&w=2 - http://marc.info/?l=bugtraq&m=137545771702053&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://marc.info/?l=bugtraq&m=136432043316835&w=2 - http://rhn.redhat.com/errata/RHSA-2013-0833.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001 - http://git.opens
13-0833.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001 - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7 - http://secunia.com/advisories/53623 - http://www.kb.cert.org/vuls/id/737740 - http://marc.info/?l=bugtraq&m=137545771702053&w=2 - http://www.debian.org/security/2013/dsa-2621 - http://rhn.redhat.com/errata/RHSA-2013-0783.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://secunia.com/advisories/55108 - http://rhn.redhat.com/errata/RHSA-2013-0782.html - http://marc.info/?l=bugtraq&m=136432043316835&w=2 - http://marc.info/?l=bugtraq&m=136396549913849&w=2
A-2013-0782.html - http://marc.info/?l=bugtraq&m=136432043316835&w=2 - http://marc.info/?l=bugtraq&m=136396549913849&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://www.splunk.com/view/SP-CAAAHXG - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19487 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18754 - http://support.apple.com/kb/HT5880 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19081 - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=ebc71865f0506a293242bd4aec97cdc7a8ef24b0
CVE ID: CVE-2013-0167 State: PUBLISHED Published: 2013-08-19T23:00:00Z Last Updated: 2024-08-06T14:18:09.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=893332 - https://rhn.redhat.com/errata/RHSA-2013-0907.html - https://rhn.redhat.com/errata/RHSA-2013-0886.html
CVE ID: CVE-2013-0168 State: PUBLISHED Published: 2013-03-12T22:00:00 Last Updated: 2024-08-06T14:18:09.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=893355 - http://rhn.redhat.com/errata/RHSA-2013-0211.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81834 - ht
355 - http://rhn.redhat.com/errata/RHSA-2013-0211.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81834 - http://www.securitytracker.com/id/1028076 - http://www.securityfocus.com/bid/57750
CVE ID: CVE-2013-0169 State: PUBLISHED Published: 2013-02-08T19:00:00 Last Updated: 2024-08-06T14:18:09.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/deb
he "Lucky Thirteen" issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html - http://www.matrixssl.org/news.html - http://rhn.redhat.com/errata/RHSA-2013-0587.html - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html - http://www.us-cert.gov/cas/techalerts/TA13-051A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19016 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 - http://secunia.com/advisories/55139 - http://secunia.com/advisories/55322 - https://oval.cisecurity
ame=MDVSA-2013:095 - http://secunia.com/advisories/55139 - http://secunia.com/advisories/55322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19608 - http://www.openssl.org/news/secadv_20130204.txt - http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/ - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084 - http://www.isg.rhul.ac.uk/tls/TLStiming.pdf - http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html - http://www.debian.org/security/2013/dsa-2622 - http://www.securityfocus.com/bi
security-announce/2013-03/msg00002.html - http://www.debian.org/security/2013/dsa-2622 - http://www.securityfocus.com/bid/57778 - http://www-01.ibm.com/support/docview.wss?uid=swg21644047 - http://openwall.com/lists/oss-security/2013/02/05/24 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://secunia.com/advisories/55351 - http://marc.info/?l=bugtraq&m=136396549913849&w=2 - https://puppet.com/security/cve/cve-2013-0169 - http://marc.info/?l=bugtraq&m=137545771702053&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://marc.info/?l=bugtraq&m=136432043316835&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00020.html - http://r
?l=bugtraq&m=136432043316835&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00020.html - http://rhn.redhat.com/errata/RHSA-2013-0833.html - http://www.ubuntu.com/usn/USN-1735-1 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001 - http://secunia.com/advisories/53623 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html - http://www.kb.cert.org/vuls/id/737740 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19424 - http://marc.info/?l=bugtraq&m=
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19424 - http://marc.info/?l=bugtraq&m=137545771702053&w=2 - http://www.debian.org/security/2013/dsa-2621 - http://rhn.redhat.com/errata/RHSA-2013-0783.html - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://secunia.com/advisories/55108 - http://rhn.redhat.com/errata/RHSA-2013-0782.html - http://marc.info/?l=bugtraq&m=136432043316835&w=2 - http://marc.info/?l=bugtraq&m=136439120408139&w=2 - http://marc.info/?l=bugtraq&m=136396549913849&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://list
bugtraq&m=136396549913849&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html - https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19540 - http://www.securitytracker.com/id/1029190 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18841 - http://www.splunk.com/view/SP-CAAAHXG - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://support.apple.com/kb/HT5880 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://secunia.com/advisories/5
http://support.apple.com/kb/HT5880 - http://marc.info/?l=bugtraq&m=136733161405818&w=2 - http://secunia.com/advisories/55350 - https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf
CVE ID: CVE-2013-0170 State: PUBLISHED Published: 2013-02-08T20:00:00 Last Updated: 2024-08-06T14:18:09.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermai
message queue. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.html - http://osvdb.org/89644 - http://libvirt.org/news.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/81552 - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.html - http://wiki.libvirt.org/page/Maintenance_Releases - http://www.securitytracker.com/id/1028047 - htt
bruary/098326.html - http://wiki.libvirt.org/page/Maintenance_Releases - http://www.securitytracker.com/id/1028047 - http://www.ubuntu.com/usn/USN-1708-1 - http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=46532e3e8ed5f5a736a02f67d6c805492f9ca720 - http://secunia.com/advisories/52001 - http://rhn.redhat.com/errata/RHSA-2013-0199.html - http://www.securityfocus.com/bid/57578 - https://bugzilla.redhat.com/show_bug.cgi?id=893450 - http://secunia.com/advisories/52003
CVE ID: CVE-2013-0171 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T14:18:09.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/2069 - http://theforeman.org/security.html
CVE ID: CVE-2013-0172 State: PUBLISHED Published: 2013-01-17T21:00:00Z Last Updated: 2024-08-06T14:18:09.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/security/CVE-2013-0172
CVE ID: CVE-2013-0173 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T14:18:09.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foreman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/2069 - http://theforeman.org/security.html
CVE ID: CVE-2013-0174 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T14:18:09.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/2069 - http://theforeman.org/security.html