Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4278 State: PUBLISHED Published: 2013-09-16T19:00:00Z Last Updated: 2024-08-06T16:38:01.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ossa/+bug/1212179 - http://lists.openstack.org/pipermail/openstack-announce/2013-August/000138.html - http://rhn.redhat.com/errata
1212179 - http://lists.openstack.org/pipermail/openstack-announce/2013-August/000138.html - http://rhn.redhat.com/errata/RHSA-2013-1199.html
CVE ID: CVE-2013-4279 State: PUBLISHED Published: 2014-04-18T19:00:00 Last Updated: 2024-08-06T16:38:01.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1000215 - http://www.securityfocus.com/bid/65002 - http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130493.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:060
CVE ID: CVE-2013-4280 State: PUBLISHED Published: 2019-11-04T18:50:52 Last Updated: 2024-08-06T16:38:01.855Z Vendors: RedHat Products: vdsm Problem Types: /tmp file vulnerability issues Description: Insecure temporary file vulnerability in RedHat vsdm 4.9.6. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4280 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4280 - https://access.redhat.com/security/cve/cve-2013-4280
CVE ID: CVE-2013-4281 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:59:48.086Z Vendors: n/a Products: Red Hat Openshift Problem Types: CWE-276 Description: In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with local access to the broker to read this file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2014/06/05/19 - https://github.com/openshift/openshift-extras/blob/enterprise-2.0/README.md#security-notice
CVE ID: CVE-2013-4282 State: PUBLISHED Published: 2013-11-02T19:00:00 Last Updated: 2024-08-06T16:38:01.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1473.html - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00008.html - http://rhn.redhat.com/errata/RHSA-2013-1474.html - http://www.debian.org/security/2014/dsa-2839 - http://cgit.freedesktop.org/spice/spice/commi
rrata/RHSA-2013-1474.html - http://www.debian.org/security/2014/dsa-2839 - http://cgit.freedesktop.org/spice/spice/commit/?id=8af619009660b24e0b41ad26b30289eea288fcc2 - http://rhn.redhat.com/errata/RHSA-2013-1460.html - http://www.ubuntu.com/usn/USN-2027-1 - http://www.securityfocus.com/bid/63408
CVE ID: CVE-2013-4283 State: PUBLISHED Published: 2013-09-10T19:00:00Z Last Updated: 2024-08-06T16:38:01.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1182.html - http://directory.fedoraproject.org/wiki/Releases/1.3.0.8 - http://secunia.com/advisories/54650 - http://secunia.com/advisories/54586 - https://bugzilla.redhat.com/show_bug.cgi?id=999634
CVE ID: CVE-2013-4284 State: PUBLISHED Published: 2013-10-09T14:44:00Z Last Updated: 2024-08-06T16:38:01.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted Ajax update request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029122 - http://rhn.redhat.com/errata/RHSA-2013-1295.html - http://rhn.redhat.com/errata/RHSA-2013-1294.html
CVE ID: CVE-2013-4285 State: PUBLISHED Published: 2014-04-28T14:00:00 Last Updated: 2024-08-06T16:38:01.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201402-12.xml
CVE ID: CVE-2013-4286 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T16:38:01.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090. Additional Analyst No
: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0345.html - http://secunia.com/advisories/59733 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - https://rhn.redhat.com/errata/RHSA-2014-0686.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:052 - http://secunia.com/advisories/59724 - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://secunia.com/advisories/57675 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.oracle.com/technetwork/se
m/advisories/57675 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://rhn.redhat.com/errata/RHSA-2014-0344.html - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21678113 - http://tomcat.apache.org/security-8.html - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www-01.ibm.com/support/docview.wss?uid=swg21677147 - http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://advisories.mageia.org/MGASA-2014-0148.html - http://s
http://www-01.ibm.com/support/docview.wss?uid=swg21678231 - http://advisories.mageia.org/MGASA-2014-0148.html - http://secunia.com/advisories/59722 - http://tomcat.apache.org/security-6.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013 - http://secunia.com/advisories/59675 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://www.ubuntu.com/usn/USN-2130-1 - http://secunia.com/advisories/59873 - http://rhn.redhat.com/errata/RHSA-2014-0343.html - http://svn.apache.org/viewvc?view=revision&revision=1521854 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www-01.ibm.com/support/docview.wss?uid=swg21667883 - htt
21854 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www-01.ibm.com/support/docview.wss?uid=swg21667883 - https://bugzilla.redhat.com/show_bug.cgi?id=1069921 - http://marc.info/?l=bugtraq&m=144498216801440&w=2 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://svn.apache.org/viewvc?view=revision&revision=1552565 - http://www-01.ibm.com/support/docview.wss?uid=swg21675886 - http://svn.apache.org/viewvc?view=revision&revision=1521829 - http://www.securityfocus.com/bid/65773 - http://secunia.com/advisories/59036 - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://list
he.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987a
%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2013-4287 State: PUBLISHED Published: 2013-10-17T23:00:00 Last Updated: 2024-08-06T16:38:01.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/10/1 - http://s
Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/10/1 - http://secunia.com/advisories/55381 - http://rhn.redhat.com/errata/RHSA-2013-1523.html - http://blog.rubygems.org/2013/09/09/CVE-2013-4287.html - https://puppet.com/security/cve/cve-2013-4287 - http://rhn.redhat.com/errata/RHSA-2013-1427.html - http://rhn.redhat.com/errata/RHSA-2013-1852.html - http://rhn.redhat.com/errata/RHSA-2013-1441.html - http://rhn.redhat.com/errata/RHSA-2014-0207.html
CVE ID: CVE-2013-4288 State: PUBLISHED Published: 2013-10-03T21:00:00 Last Updated: 2024-08-06T16:38:01.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-10/msg00005.html - http://rhn.redhat.com/errata/RHSA-2013-1270.ht
ces: - http://lists.opensuse.org/opensuse-updates/2013-10/msg00005.html - http://rhn.redhat.com/errata/RHSA-2013-1270.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00004.html - http://www.openwall.com/lists/oss-security/2013/09/18/4 - http://seclists.org/oss-sec/2013/q3/626 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00062.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00000.html - http://rhn.redhat.com/errata/RHSA-2013-1460.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1002375 - http://www.ubuntu.com/usn/USN-1953-1
CVE ID: CVE-2013-4289 State: PUBLISHED Published: 2014-04-18T14:00:00 Last Updated: 2024-08-06T16:38:01.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62363 - http://secunia.com/advisories/57285 - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://seclists.org/oss-sec/2013/q3/593
CVE ID: CVE-2013-4290 State: PUBLISHED Published: 2014-04-18T14:00:00 Last Updated: 2024-08-06T16:38:02.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57285 - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://www.securityfocus.com/bid/62362 - http://seclists.org/oss-sec/2013/q3/593
CVE ID: CVE-2013-4291 State: PUBLISHED Published: 2013-09-30T21:00:00Z Last Updated: 2024-08-06T16:38:01.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1006509 - http://libvirt.org/news.html - http://wiki.libvirt.org/page/Maintenance_Releases - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=fe11d34a6d46d6641ce90dc665164fda7bb6bff8
CVE ID: CVE-2013-4292 State: PUBLISHED Published: 2013-09-30T21:00:00 Last Updated: 2024-08-06T16:38:01.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large number of domain migrate parameters in certain RPC calls in (1) daemon/remote.c and (2) remote/remote_driver.c. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/news.html - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://www.mail-archive.com/libvir-list%40redhat.com/msg83332.html
CVE ID: CVE-2013-4293 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-08-06T16:38:01.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which allows local users to obtain sensitive information by reading the log files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1002853 - http://rhn.redhat.com/errata/RHSA-2013-1448.html
CVE ID: CVE-2013-4294 State: PUBLISHED Published: 2013-09-23T20:00:00 Last Updated: 2024-08-06T16:38:01.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/97237 - http://www.ubuntu.com/usn/USN-2002-1 - http://secunia.com/advisories/54706 - http://seclists.org/oss-sec/2013/q3/586 - https://bugs.launchpad.net/keystone/+b
- http://secunia.com/advisories/54706 - http://seclists.org/oss-sec/2013/q3/586 - https://bugs.launchpad.net/keystone/+bug/1202952 - http://rhn.redhat.com/errata/RHSA-2013-1285.html
CVE ID: CVE-2013-4295 State: PUBLISHED Published: 2013-10-24T01:00:00Z Last Updated: 2024-09-16T19:56:00.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63260 - http://shindig.apache.org/security.html - http://archives.neohapsis.com/archives/bugtraq/2013-10/0104.html
CVE ID: CVE-2013-4296 State: PUBLISHED Published: 2013-09-30T21:00:00 Last Updated: 2024-08-06T16:38:01.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a crafted RPC call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=e7f400a110e2e3673b96
/security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=e7f400a110e2e3673b96518170bfea0855dd82c0 - http://www.debian.org/security/2013/dsa-2764 - http://www.ubuntu.com/usn/USN-1954-1 - http://wiki.libvirt.org/page/Maintenance_Releases - http://rhn.redhat.com/errata/RHSA-2013-1272.html - https://bugzilla.redhat.com/show_bug.cgi?id=1006173 - http://rhn.redhat.com/errata/RHSA-2013-1460.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00024.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00023.html
CVE ID: CVE-2013-4297 State: PUBLISHED Published: 2013-09-30T21:00:00 Last Updated: 2024-08-06T16:38:01.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=2dba0323ff0cec31bdcea9dd3b2428af297401f2 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-429
t%3Ba=commitdiff%3Bh=2dba0323ff0cec31bdcea9dd3b2428af297401f2 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4297
CVE ID: CVE-2013-4298 State: PUBLISHED Published: 2013-09-10T19:00:00 Last Updated: 2024-08-06T16:38:02.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1949-1 - https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=23921 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721273 - http://www.imagemagick.o
se-server/viewtopic.php?f=3&t=23921 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721273 - http://www.imagemagick.org/script/changelog.php - http://secunia.com/advisories/54671 - http://secunia.com/advisories/54581 - http://www.debian.org/security/2013/dsa-2750
CVE ID: CVE-2013-4299 State: PUBLISHED Published: 2013-10-24T10:00:00 Last Updated: 2024-08-06T16:38:01.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1436.html - http://www.ubuntu.com/usn/USN-2015-1 - http://rhn.redhat.com/errata/RHSA-2013-1783.html - https://github.com/torvalds/linux/commit/e9c6a182649f4259db704ae15a91ac820e63b0ca - http://www.ubuntu
A-2013-1783.html - https://github.com/torvalds/linux/commit/e9c6a182649f4259db704ae15a91ac820e63b0ca - http://www.ubuntu.com/usn/USN-2043-1 - http://rhn.redhat.com/errata/RHSA-2013-1490.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://rhn.redhat.com/errata/RHSA-2013-1519.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9c6a182649f4259db704ae15a91ac820e63b0ca - http://www.ubuntu.com/usn/USN-2040-1 - http://www.ubuntu.com/usn/USN-2016-1 - http://rhn.redhat.com/errata/RHSA-2013-1520.html - http://www.ubuntu.com/usn/USN-2044-1 - http://www.ubuntu.com/usn/USN-2066-1 - http://rhn.redhat.com/errata/RHSA-2013-1449.html - http
untu.com/usn/USN-2044-1 - http://www.ubuntu.com/usn/USN-2066-1 - http://rhn.redhat.com/errata/RHSA-2013-1449.html - http://rhn.redhat.com/errata/RHSA-2013-1860.html - https://bugzilla.redhat.com/show_bug.cgi?id=1004233 - http://www.ubuntu.com/usn/USN-2049-1 - http://www.ubuntu.com/usn/USN-2045-1 - http://rhn.redhat.com/errata/RHSA-2013-1460.html - http://rhn.redhat.com/errata/RHSA-2013-1450.html - http://www.ubuntu.com/usn/USN-2050-1 - http://www.ubuntu.com/usn/USN-2042-1 - http://www.ubuntu.com/usn/USN-2041-1 - http://www.ubuntu.com/usn/USN-2067-1 - http://www.ubuntu.com/usn/USN-2046-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2013-4300 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T16:38:01.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain privileges via PID spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d661684cf6820331feae71146c35da83d794467e - http://www.ubuntu.com/usn/USN-1995-1 - https://github.com/torvalds/linux/commit/d661684cf6820331feae71146c35da83d794467e - https://bugzilla.redhat.c
N-1995-1 - https://github.com/torvalds/linux/commit/d661684cf6820331feae71146c35da83d794467e - https://bugzilla.redhat.com/show_bug.cgi?id=1004736 - http://www.openwall.com/lists/oss-security/2013/09/05/3 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.11.bz2 - http://www.ubuntu.com/usn/USN-1998-1
CVE ID: CVE-2013-4301 State: PUBLISHED Published: 2013-10-27T00:00:00 Last Updated: 2024-08-06T16:38:01.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a "<" (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/86895 - http://seclists.org/oss-sec/2013/q3/553 - http://secunia.com/advisories/54715 - htt
ibmcloud.com/vulnerabilities/86895 - http://seclists.org/oss-sec/2013/q3/553 - http://secunia.com/advisories/54715 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html - http://osvdb.org/96913 - https://bugzilla.wikimedia.org/show_bug.cgi?id=46332 - https://www.mediawiki.org/wiki/Release_notes/1.19 - https://www.mediawiki.org/wiki/Release_notes/1.20 - https://www.mediawiki.org/wiki/Release_notes/1.21