Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7038 State: PUBLISHED Published: 2013-12-13T17:00:00 Last Updated: 2024-08-06T17:53:46.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64138 - https://bugs.gentoo.org/show_bug.cgi?id=493450 - https://bugzilla.redhat.com/show_bug.cgi?id=1039384 - http://security.gentoo.org/glsa/glsa-201402-01.xml - https://gnunet.org/svn/libmicrohttpd/ChangeLog - h
cgi?id=1039384 - http://security.gentoo.org/glsa/glsa-201402-01.xml - https://gnunet.org/svn/libmicrohttpd/ChangeLog - http://www.openwall.com/lists/oss-security/2013/12/09/11 - http://secunia.com/advisories/55903
CVE ID: CVE-2013-7039 State: PUBLISHED Published: 2013-12-13T17:00:00 Last Updated: 2024-08-06T17:53:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1039390 - http://www.securityfocus.com/bid/64138 - https://bugs.gentoo.org/show_bug.cgi?id=493450 - http://security.gent
1039390 - http://www.securityfocus.com/bid/64138 - https://bugs.gentoo.org/show_bug.cgi?id=493450 - http://security.gentoo.org/glsa/glsa-201402-01.xml - https://gnunet.org/svn/libmicrohttpd/ChangeLog - http://www.openwall.com/lists/oss-security/2013/12/09/11 - http://secunia.com/advisories/55903
CVE ID: CVE-2013-7040 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:53:45.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfo
incomplete fix for CVE-2012-1150. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64194 - http://www.openwall.com/lists/oss-security/2013/12/09/13 - http://www.openwall.com/lists/oss-security/2013/12/09/3 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://bugs.python.org/issue14621 - https://support.apple.com/kb/HT205031
CVE ID: CVE-2013-7041 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T17:53:46.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/09/5 - http://www.securityfocus.com/bid/64180 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731368 - http://www.openwall.com/lists/oss-security/2013/12/09/16 - https://security.gentoo.org/glsa/201605-05 - http://www.ubuntu.com/usn/USN-2
wall.com/lists/oss-security/2013/12/09/16 - https://security.gentoo.org/glsa/201605-05 - http://www.ubuntu.com/usn/USN-2935-2 - http://www.ubuntu.com/usn/USN-2935-3 - https://bugzilla.redhat.com/show_bug.cgi?id=1038555 - http://www.ubuntu.com/usn/USN-2935-1
CVE ID: CVE-2013-7042 State: PUBLISHED Published: 2013-12-10T15:00:00 Last Updated: 2024-08-06T17:53:45.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.suse.com/support/update/announcement/2013/suse-su-20131813-1.html - https://bugzilla.novell.com/show_bug.cgi?id=852101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89897 - http://osvdb.org/100652
CVE ID: CVE-2013-7043 State: PUBLISHED Published: 2013-12-10T19:00:00 Last Updated: 2024-08-06T17:53:45.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via the Password parameter to goform/RgSecurity; (2) reboot the device via the Restart parameter to goform/restart; (3) modify Wi-Fi settings, as demonstrated by the WpaPreSharedKey parameter to goform/wlanSecurity; or (4) modify parental controls via the ParentalPassword parameter to
WpaPreSharedKey parameter to goform/wlanSecurity; or (4) modify parental controls via the ParentalPassword parameter to goform/RgParentalBasic. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89654 - http://www.exploit-db.com/exploits/29927/
CVE ID: CVE-2013-7048 State: PUBLISHED Published: 2014-01-23T21:00:00 Last Updated: 2024-08-06T17:53:45.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/nova/+bug/1227027 - http://rhn.redhat.com/errata/RHSA-2014-0231.html - http://www.openwall.com/lists/oss-security/2014/01/13/2
CVE ID: CVE-2013-7049 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T17:53:46.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long string in a DH1080_INIT message. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/znc-msvc/ - http://seclists.org/oss-sec/2013/q4/482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89671 - http://www.securityfocus.com/bid/64254 - http://osvdb.org/100859 - http://seclists.org/oss-sec/2
vulnerabilities/89671 - http://www.securityfocus.com/bid/64254 - http://osvdb.org/100859 - http://seclists.org/oss-sec/2013/q4/489
CVE ID: CVE-2013-7050 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T17:53:45.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1040266 - http://seclists.org/oss-sec/2013/q4/486 - http://osvdb.org/100855 - http://www.securityfocus.com/bid/64241 - http://seclists.org/oss-sec/2013/q4/470 - http://anonscm.debian.org/gitweb/?p=collab-maint/dev
rityfocus.com/bid/64241 - http://seclists.org/oss-sec/2013/q4/470 - http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89666 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849
CVE ID: CVE-2013-7051 State: PUBLISHED Published: 2020-02-04T13:46:03 Last Updated: 2024-08-06T17:53:46.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters Additional Analyst Notes: - CVE Program Container: References: - http://pigstarter.krebsco.de/report/2013-12-18_dir100.txt - http://www.exploit-db.com/exploits/31425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90904 - https://www.securityfocus.com/bid/65290
CVE ID: CVE-2013-7052 State: PUBLISHED Published: 2020-02-04T13:49:19 Last Updated: 2024-08-06T17:53:46.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script Additional Analyst Notes: - CVE Program Container: References: - http://pigstarter.krebsco.de/report/2013-12-18_dir100.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90902 - https://www.securityfocus.com/bid/65290
CVE ID: CVE-2013-7053 State: PUBLISHED Published: 2020-02-04T13:51:27 Last Updated: 2024-08-06T17:53:45.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-100 4.03B07: cli.cgi CSRF Additional Analyst Notes: - CVE Program Container: References: - http://pigstarter.krebsco.de/report/2013-12-18_dir100.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90905 - https://www.securityfocus.com/bid/65290/info
CVE ID: CVE-2013-7054 State: PUBLISHED Published: 2020-02-04T13:54:00 Last Updated: 2024-08-06T17:53:45.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-100 4.03B07: cli.cgi XSS Additional Analyst Notes: - CVE Program Container: References: - http://pigstarter.krebsco.de/report/2013-12-18_dir100.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90906 - https://www.securityfocus.com/bid/65290/info
CVE ID: CVE-2013-7055 State: PUBLISHED Published: 2020-02-04T13:56:49 Last Updated: 2024-08-06T17:53:45.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-100 4.03B07 has PPTP and poe information disclosure Additional Analyst Notes: - CVE Program Container: References: - http://pigstarter.krebsco.de/report/2013-12-18_dir100.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/90903 - https://www.securityfocus.com/bid/65290/info
CVE ID: CVE-2013-7057 State: PUBLISHED Published: 2014-11-04T15:00:00 Last Updated: 2024-08-06T17:53:46.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafted request to api/v1.0/files/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/113851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98320 - http://www.exploit-db.com/exploits/35046
CVE ID: CVE-2013-7060 State: PUBLISHED Published: 2014-05-02T14:00:00 Last Updated: 2024-08-06T17:53:45.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/20131210/path-leak - http://www.openwall.com/lists/oss-security/2013/12/12/3 - http://www.openwall.com/lists/oss-security/2013/12/10/15
CVE ID: CVE-2013-7061 State: PUBLISHED Published: 2014-05-02T14:00:00 Last Updated: 2024-08-06T17:53:46.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/20131210/catalogue-exposure - http://www.openwall.com/lists/oss-security/2013/12/12/3 - http://www.openwall.com/lists/oss-security/2013/12/10/15
CVE ID: CVE-2013-7062 State: PUBLISHED Published: 2020-01-02T18:18:18 Last Updated: 2024-08-06T17:53:45.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the (1) browser_id_manager or (2) OFS.Image method. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/20131210/zope-xss-in-OFS - https://plone.org/security/20131210/zope-xss-in-browseridmanager - http://seclists.org/os
ity/20131210/zope-xss-in-OFS - https://plone.org/security/20131210/zope-xss-in-browseridmanager - http://seclists.org/oss-sec/2013/q4/467 - http://seclists.org/oss-sec/2013/q4/485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89627
CVE ID: CVE-2013-7063 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T17:53:45.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2140097 - http://www.openwall.com/lists/oss-security/2013/12/12/1 - http://www.openwall.com/lists/oss-security/2013/12/06/7
CVE ID: CVE-2013-7064 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T17:53:46.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2139875 - http://www.openwall.com/lists/oss-security/2013/12/12/1 - https://drupal.org/node/2140123 - http://www.openwall.com/lists/oss-security/2013/12
m/lists/oss-security/2013/12/12/1 - https://drupal.org/node/2140123 - http://www.openwall.com/lists/oss-security/2013/12/06/7
CVE ID: CVE-2013-7065 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T17:53:46.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/12/1 - https://drupal.org/node/2140217 - https://drupal.org/node/2140209 - http://www.openwall.com/lists/oss-security/2013/12/06/7
CVE ID: CVE-2013-7066 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T17:53:45.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2140237 - https://drupal.org/node/2140229
CVE ID: CVE-2013-7067 State: PUBLISHED Published: 2013-12-19T02:00:00 Last Updated: 2024-08-06T17:53:45.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OG Features module 6.x-1.x before 6.x-1.4 for Drupal does not properly override pages that have an access callback set to false, which allows remote attackers to bypass intended access restrictions via a request. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2149743 - https://drupal.org/node/2149791 - http://osvdb.org/100611 - http://www.securityfocus.com/bid/64134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89458
CVE ID: CVE-2013-7068 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T17:53:46.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/12/1 - https://drupal.org/node/2140217 - https://drupal.org/node/2140209 - http://www.openwall.com/lists/oss-security/2013/12/06/7
CVE ID: CVE-2013-7069 State: PUBLISHED Published: 2013-12-14T17:00:00 Last Updated: 2024-08-06T17:53:46.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55982 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00094.html - http://www.securityfocus.com/bid/64196 - https://github.com/petdance/ack2/issues/399 - http://seclists.org/oss-sec/2013/q4/484
CVE ID: CVE-2013-7070 State: PUBLISHED Published: 2019-12-31T19:57:19 Last Updated: 2024-08-06T17:53:46.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikaku/Monitorix/issues/30 - http://openwall.com/lists/oss-security/2013/12/12/8 - https://github.com/mikaku/Monitorix/commit/ff80441be7089f774448dfe4b49e6fced70e71cb
CVE ID: CVE-2013-7071 State: PUBLISHED Published: 2019-12-31T19:57:27 Last Updated: 2024-08-06T17:53:45.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the handle_request function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikaku/Monitorix/issues/30 - http://openwall.com/lists/oss-security/2013/12/12/8 - https://github.com/mikaku/Monitorix/commit/e86c11593238be6956a67a04d640c65810d50b59
CVE ID: CVE-2013-7072 State: REJECTED Published: 2014-06-16T21:00:00 Last Updated: 2014-06-16T20:57:00 Description: No description available.
CVE ID: CVE-2013-7073 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T17:53:46.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated editors to read arbitrary TYPO3 table columns via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/487 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html - http://s
se-updates/2016-08/msg00106.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00028.html - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ - http://lists.opensuse.org/opensuse-updates/2016-08/msg00083.html - http://www.debian.org/security/2014/dsa-2834
CVE ID: CVE-2013-7074 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T17:53:46.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/487 - http://www.securityfocus.com/bid/64245 - http://seclists.org/oss-sec/2013/q4/473 - https://exchange.xforce.ibmcloud.co
- http://www.securityfocus.com/bid/64245 - http://seclists.org/oss-sec/2013/q4/473 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89620 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004 - http://www.debian.org/security/2014/dsa-2834 - http://osvdb.org/100881
CVE ID: CVE-2013-7075 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T17:53:45.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated backend users to unserialize arbitrary PHP objects, delete arbitrary files, and possibly have other unspecified impacts via an unspecified parameter, related to a "missing signature." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-
- http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ - http://www.debian.org/security/2014/dsa-2834
CVE ID: CVE-2013-7076 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T17:53:46.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/487 - http://osvdb.org/100883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89624 - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004 - http:/
.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004 - http://www.securityfocus.com/bid/64247 - http://www.debian.org/security/2014/dsa-2834
CVE ID: CVE-2013-7077 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T17:53:45.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89626 - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004 - http://osvdb
ss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004 - http://osvdb.org/100884
CVE ID: CVE-2013-7078 State: PUBLISHED Published: 2014-01-19T18:00:00 Last Updated: 2024-08-06T17:53:45.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in the Extbase Framework in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6, when the Rewritten Property Mapper is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message. NOTE: this might be the same vulnerability as CVE-2013-7072. Additional Analyst Notes: - CVE Program Container: References: - http://