Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3487 State: PUBLISHED Published: 2014-03-03T16:00:00 Last Updated: 2024-08-06T16:14:54.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to (1) 400.php, (2) 403.php, or (3) 403.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/86160 - http://www.securityfocus.com/bid/61583 - http://osvdb.org/95928 - http://wordpress.org/plugins
m/vulnerabilities/86160 - http://www.securityfocus.com/bid/61583 - http://osvdb.org/95928 - http://wordpress.org/plugins/bulletproof-security/changelog - http://osvdb.org/95930 - http://osvdb.org/95929
CVE ID: CVE-2013-3488 State: PUBLISHED Published: 2020-01-31T17:46:47 Last Updated: 2024-08-06T16:14:54.651Z Vendors: Media Player Classic Products: Media Player Classic - Home Cinema (MPC-HC) Problem Types: Buffer Overflow Description: Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream (M2TS) file. Additional Analyst Notes: - CVE Program Container: References: - http://mpc-hc.org/2013/09/29/1.7.0-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/87695
CVE ID: CVE-2013-3489 State: PUBLISHED Published: 2020-01-31T17:46:51 Last Updated: 2024-08-06T16:14:55.321Z Vendors: Media Player Classic Products: Media Player Classic - Home Cinema (MPC-HC) Problem Types: Integer Overflow Description: Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file Additional Analyst Notes: - CVE Program Container: References: - http://mpc-hc.org/2013/09/29/1.7.0-released - https://exchange.xforce.ibmcloud.com/vulnerabilities/87695
CVE ID: CVE-2013-3491 State: PUBLISHED Published: 2013-07-16T10:00:00 Last Updated: 2024-08-06T16:14:55.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) modify buttons, or (3) insert cross-site scripting (XSS) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60956 - http://secunia.com/advisories/52948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85438
CVE ID: CVE-2013-3492 State: PUBLISHED Published: 2020-01-27T14:24:40 Last Updated: 2024-08-06T16:14:55.806Z Vendors: XnView Products: XnView Problem Types: buffer overflow Description: XnView 2.03 has a stack-based buffer overflow vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61503
CVE ID: CVE-2013-3493 State: PUBLISHED Published: 2020-01-27T14:26:46 Last Updated: 2024-08-06T16:14:56.455Z Vendors: XnView Products: XnView Problem Types: integer overflow Description: XnView 2.03 has an integer overflow vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61505
CVE ID: CVE-2013-3494 State: PUBLISHED Published: 2020-02-12T15:14:19 Last Updated: 2024-08-06T16:14:54.623Z Vendors: UMPlayer Products: UMPlayer Problem Types: code execution Description: A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89262
CVE ID: CVE-2013-3495 State: PUBLISHED Published: 2013-08-28T17:00:00 Last Updated: 2024-08-06T16:14:56.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028931 - https://security.gentoo.org/glsa/201504-04 - http://osvdb.org/96438 - http://secunia.com/advisories/54341 - http://ww
- https://security.gentoo.org/glsa/201504-04 - http://osvdb.org/96438 - http://secunia.com/advisories/54341 - http://www.openwall.com/lists/oss-security/2013/08/20/8 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html - http://www.securityfocus.com/bid/61854
CVE ID: CVE-2013-3496 State: PUBLISHED Published: 2013-05-22T10:00:00Z Last Updated: 2024-09-17T00:36:11.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-05/0072.html
CVE ID: CVE-2013-3497 State: PUBLISHED Published: 2013-05-08T23:00:00 Last Updated: 2024-08-06T16:14:54.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/59760 - http://osvdb.org/93112 - https://kb.juniper.net/KB27374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84109
CVE ID: CVE-2013-3498 State: PUBLISHED Published: 2013-05-08T00:00:00 Last Updated: 2024-08-06T16:14:54.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1028529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84110 - http://secunia.com/advisories/53359 - https://supportportal.juniper.net/JSA10568
CVE ID: CVE-2013-3499 State: PUBLISHED Published: 2013-05-08T10:00:00 Last Updated: 2024-08-06T16:14:55.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain administrative privileges or access files via a crafted header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58404 - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitor
e+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3500 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T17:37:50.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia
7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3501 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-17T02:16:31.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the foundation-webapp/admin/ directory, (2) the NeDi component, or (3) the Noma component. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/201
onents+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3502 State: PUBLISHED Published: 2013-05-08T10:00:00 Last Updated: 2024-08-06T16:14:55.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critic
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260 - http://www.exploit-db.com/exploits/25001
CVE ID: CVE-2013-3503 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T16:48:29.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/f
e.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3504 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-17T01:25:49.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to overwrite arbitrary files by leveraging access to the nagios account. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vul
://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3505 State: PUBLISHED Published: 2013-05-08T10:00:00 Last Updated: 2024-08-06T16:14:56.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended access restrictions via a direct request for a (1) log file or (2) configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58410 - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitori
+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3506 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T19:41:37.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content, which allows remote attackers to execute arbitrary commands by creating a .shtml file and leveraging Server Side Includes (SSI) functionality. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advi
+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3507 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-17T01:10:45.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive information via a direct request for (1) a configuration file, (2) a database dump, or (3) the Tomcat status context. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_hi
ls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3508 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-17T01:20:39.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via vectors involving file editing. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vul
//www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3509 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T19:46:18.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the scan functionality in the System / NeDi menu. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_ris
ttps://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3510 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T19:41:38.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL commands via (1) nedi/html/System-Export.php, (2) nedi/html/Devices-List.php, or (3) the Noma component. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_
cess+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3511 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T23:25:56.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilitie
onsult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3512 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T18:54:25.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows remote authenticated users to read or modify configuration settings via unspecified vectors, as demonstrated by reading credentials. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork
s+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3513 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-17T02:53:32.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) store XSS sequences or (2) delete entries. Additional Analyst Notes: - CVE Program Container: References: - https://kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_Gro
w+bypass+of+role+access+controls - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-1_GroundWork_Monitoring_Multiple_high_risk_vulnerabilities_part2_wo_poc_v10.txt - http://www.kb.cert.org/vuls/id/345260
CVE ID: CVE-2013-3514 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T16:14:56.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. (dot dot) in the group parameter to (1) plugin-preferences.php or (2) plugin-settings.php in www/admin, a different vulnerability than CVE-2013-7376. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/94778 - http://seclists.org/bugtraq/2013/Jul/27 -
nalyst Notes: - CVE Program Container: References: - http://osvdb.org/94778 - http://seclists.org/bugtraq/2013/Jul/27 - https://www.htbridge.com/advisory/HTB23155
CVE ID: CVE-2013-3515 State: PUBLISHED Published: 2013-07-29T21:00:00 Last Updated: 2024-08-06T16:14:56.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) package parameter to www/admin/plugin-index.php or the (2) group parameter to www/admin/plugin-settings.php. Additional Analyst Notes: - CVE Program Container: References: - https://svn.openx.org/openx/trunk/www/admin/plugin-settings.php - https://svn.openx.org/openx/trunk/www/admin/plugin-index.php - https://www.htbridge.com/advisory/HTB23155-openx-changeset-82710.dif
.openx.org/openx/trunk/www/admin/plugin-index.php - https://www.htbridge.com/advisory/HTB23155-openx-changeset-82710.diff - https://exchange.xforce.ibmcloud.com/vulnerabilities/85411 - http://osvdb.org/94774 - http://seclists.org/bugtraq/2013/Jul/27 - https://www.htbridge.com/advisory/HTB23155 - http://www.exploit-db.com/exploits/26624 - http://osvdb.org/94775
CVE ID: CVE-2013-3516 State: PUBLISHED Published: 2019-11-13T19:30:07 Last Updated: 2024-08-06T16:14:56.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/research/studies-and-papers/netgear_wnr3500/
CVE ID: CVE-2013-3517 State: PUBLISHED Published: 2019-11-13T18:03:57 Last Updated: 2024-08-06T16:14:56.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/
CVE ID: CVE-2013-3519 State: PUBLISHED Published: 2013-12-04T15:00:00 Last Updated: 2024-08-06T16:14:56.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2013-0014.html