Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4988 State: PUBLISHED Published: 2013-12-13T15:00:00 Last Updated: 2024-08-06T16:59:41.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89611 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0046.html - http://osvdb.org/100826 - http://www.exploit-db.com/exploits/30208 - http://www.coresecurity.com/adv
2013-12/0046.html - http://osvdb.org/100826 - http://www.exploit-db.com/exploits/30208 - http://www.coresecurity.com/advisories/icofx-buffer-overflow-vulnerability - http://seclists.org/fulldisclosure/2013/Dec/54 - http://packetstormsecurity.com/files/124380/IcoFX-2.5.0.0-Buffer-Overflow.html - http://secunia.com/advisories/55964 - http://www.securityfocus.com/bid/64221 - http://packetstormsecurity.com/files/162995/IcoFX-2.6-Buffer-Overflow.html
CVE ID: CVE-2013-4995 State: PUBLISHED Published: 2013-07-30T18:00:00 Last Updated: 2024-08-06T16:59:41.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61510 - http://www.phpmyadmin.net/home_page/security/PMASA-2013-8.php - http://secunia.com/advisories/59832
CVE ID: CVE-2013-4996 State: PUBLISHED Published: 2013-07-30T18:00:00 Last Updated: 2024-08-06T16:59:41.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2013-11.php - http://www.p
es: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2013-11.php - http://www.phpmyadmin.net/home_page/security/PMASA-2013-9.php - http://secunia.com/advisories/59832 - http://www.securityfocus.com/bid/61921
CVE ID: CVE-2013-4997 State: PUBLISHED Published: 2013-07-30T18:00:00Z Last Updated: 2024-09-16T19:52:13.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2013-9.php
CVE ID: CVE-2013-4998 State: PUBLISHED Published: 2013-07-30T18:00:00Z Last Updated: 2024-09-16T16:33:09.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2013-12.php
CVE ID: CVE-2013-4999 State: PUBLISHED Published: 2013-07-30T18:00:00Z Last Updated: 2024-09-17T04:29:15.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2013-12.php
CVE ID: CVE-2013-5000 State: PUBLISHED Published: 2013-07-30T18:00:00Z Last Updated: 2024-09-16T19:05:30.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to config.default.php and other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2013-12.php
CVE ID: CVE-2013-5001 State: PUBLISHED Published: 2013-07-30T18:00:00Z Last Updated: 2024-09-16T22:14:41.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a TextLinkTransformationPlugin link. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2013-13.php
CVE ID: CVE-2013-5002 State: PUBLISHED Published: 2013-07-30T18:00:00 Last Updated: 2024-08-06T16:59:41.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schema_export.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59832 - http://www.securityfocus.com/bid/61516 - http://www.phpmyadmin.net/home_page/security/PMASA-2013-14.php
CVE ID: CVE-2013-5003 State: PUBLISHED Published: 2013-07-30T18:00:00 Last Updated: 2024-08-06T16:59:41.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pmd_pdf.php or (2) the pdf_page_number parameter to schema_export.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61923 - http://secunia.com/advisories/59832 - http://www.phpmyadmin.net/home_page/security/PMASA-2013-15.php
CVE ID: CVE-2013-5005 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:59:41.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ajaxRequest/methodCall.do in Tripwire Enterprise 8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) m_target_class_name, (2) m_target_method_name, or (3) m_request_context_params parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodaylab.com/zdl-advisories/2013-5005.html - http://www.securityfocus.com/bid/65242
CVE ID: CVE-2013-5006 State: PUBLISHED Published: 2013-07-31T01:00:00 Last Updated: 2024-08-06T16:59:41.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: main_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading the "var pass=" line within the HTML source code. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-07/0146.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85903 - http://www.osvdb.org/95519 - http://arc
2013-07/0146.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85903 - http://www.osvdb.org/95519 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0133.html
CVE ID: CVE-2013-5008 State: PUBLISHED Published: 2013-10-10T10:00:00Z Last Updated: 2024-09-16T20:17:05.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive information about package-server access, or cause a denial of service, by leveraging knowledge of this key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62757 - http://www.symantec.com/s
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62757 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20131008_00
CVE ID: CVE-2013-5009 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T16:59:41.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64128 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=s
yfocus.com/bid/64128 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90224
CVE ID: CVE-2013-5010 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T16:59:41.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64129 - http://www.symantec.com/security_response/secur
rogram Container: References: - http://www.securityfocus.com/bid/64129 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90225
CVE ID: CVE-2013-5011 State: PUBLISHED Published: 2014-01-10T16:00:00 Last Updated: 2024-08-06T16:59:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64130 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&s
ttp://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90226
CVE ID: CVE-2013-5012 State: PUBLISHED Published: 2014-02-11T02:00:00 Last Updated: 2024-08-06T16:59:41.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65404 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140210_00
CVE ID: CVE-2013-5013 State: PUBLISHED Published: 2014-02-11T02:00:00 Last Updated: 2024-08-06T16:59:41.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via (1) vectors involving PHP scripts and (2) unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/103145 - http://osvdb.org/103144 - http://osvdb.org/103147 - http://www.securityfocus.com/bid/65405 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit
ttp://www.securityfocus.com/bid/65405 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140210_00
CVE ID: CVE-2013-5014 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T16:59:41.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.
Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.exploit-db.com/exploits/31853 - http://www.exploit-db.com/exploits/31917 - http://www.securityfocus.com/bid/65466
CVE ID: CVE-2013-5015 State: PUBLISHED Published: 2014-02-14T02:00:00 Last Updated: 2024-08-06T16:59:41.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=2014021
ymantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt - http://www.exploit-db.com/exploits/31853 - http://www.exploit-db.com/exploits/31917 - http://www.securityfocus.com/bid/65467 - http://osvdb.org/103306
CVE ID: CVE-2013-5016 State: PUBLISHED Published: 2014-05-08T10:00:00 Last Updated: 2024-08-06T16:59:41.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67161 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140502_00
CVE ID: CVE-2013-5017 State: PUBLISHED Published: 2014-06-18T19:00:00 Last Updated: 2024-08-06T16:59:41.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67752 - http://www.securitytracker.com/id/1030443 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=sec
urity_advisory&year=2014&suid=20140616_00 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%20y_advisory&pvid=security_advisory&year=&suid=20140616_00
CVE ID: CVE-2013-5018 State: PUBLISHED Published: 2013-08-28T17:18:00 Last Updated: 2024-08-06T16:59:41.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54315 - http://www.securityfocus.com/bid/6
t Notes: - CVE Program Container: References: - http://secunia.com/advisories/54315 - http://www.securityfocus.com/bid/61564 - http://secunia.com/advisories/54524 - http://strongswan.org/blog/2013/08/01/strongswan-5.1.0-released.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00022.html - http://strongswan.org/blog/2013/08/01/strongswan-denial-of-service-vulnerability-%28cve-2013-5018%29.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00021.html - https://lists.strongswan.org/pipermail/users/2013-July/009540.html - http://lists.opensuse.org/opensuse-updates/2013-08/msg00050.html
CVE ID: CVE-2013-5019 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T16:59:41.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/95164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85599 - http://www.securityfocus.com/bid/61130 - http://www.exploit-db.com/exploits/26739 - https://www.exploit-db.com/exploits/44472/ - http://www.exploit-db.com/exploits/31736 - http://www.exploit-db.com/exploits/31814
CVE ID: CVE-2013-5020 State: PUBLISHED Published: 2013-07-31T10:00:00Z Last Updated: 2024-09-16T22:41:35.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_name, (2) forum_group, (3) forum_icon, or (4) forum_desc parameter. NOTE: the whatus vector is already covered by CVE-2008-2066. Additional Analyst Notes: - CVE Program Container: References: - http://www.minibb.com/download.php?file=minibb_update - http://www.securityfocus.com/bid/61116 - http://osvdb.org/95122 - http://seclists.org/fulldisclosure/2013/Jul/
_update - http://www.securityfocus.com/bid/61116 - http://osvdb.org/95122 - http://seclists.org/fulldisclosure/2013/Jul/102 - https://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-minibb/ - http://www.minibb.com/forums/news-9/minibb-3.0.1-released-stable-fixed-secured-dedicated-6059.html
CVE ID: CVE-2013-5021 State: PUBLISHED Published: 2013-08-06T18:00:00 Last Updated: 2024-08-06T16:59:41.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file conte
he (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value. Additional Analyst Notes: - CVE Program Container: References: - http://www05.abb.com/global/scot/scot203.nsf/veritydisplay/5975a8a86c82eec2c125798e00551522/%24file/SECURITY_BULLETIN_-_ABBVU-PACT-3BSE072617_DataManager_Vulnerability.pdf - http://zerodayinitiative.com/advisories/ZDI-13-120/ - http://digital.ni.com/public.nsf/allkb/04B876608790082C86257BD1000CC950?OpenDocument - http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
CVE ID: CVE-2013-5022 State: PUBLISHED Published: 2013-08-06T18:00:00 Last Updated: 2024-08-06T16:59:41.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value. Additional Analyst Notes: - CVE Program Container: References: - http://digital.ni.com/public.nsf/allkb/782E4F31442D83318625
tional Analyst Notes: - CVE Program Container: References: - http://digital.ni.com/public.nsf/allkb/782E4F31442D833186257BD3004AEB47?OpenDocument - http://digital.ni.com/public.nsf/websearch/C4619A438F7E78E486257B360050BD7D?OpenDocument - http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
CVE ID: CVE-2013-5023 State: PUBLISHED Published: 2013-08-06T18:00:00 Last Updated: 2024-08-06T16:59:41.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allow remote attackers to cause a denial of service by triggering the display of local .chm files. Additional Analyst Notes: - CVE Program Container: References: - http://digital.ni.com/public.nsf/allkb/E6BC4F119D49A97A86257BD3004FE019?OpenDocument - http://digital.ni.com/public.nsf/websearch/5C87A3AA7300868986257B3600501FE6?OpenDocument - http://digital.n
enDocument - http://digital.ni.com/public.nsf/websearch/5C87A3AA7300868986257B3600501FE6?OpenDocument - http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
CVE ID: CVE-2013-5024 State: PUBLISHED Published: 2013-08-06T18:00:00 Last Updated: 2024-08-06T16:59:41.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted (1) key-open or (2) key-close method calls. Additional Analyst Notes: - CVE Program Container: References: - http://digital.ni.com/public.nsf/websearch/D8E97E95D59AC17086257B3600508823?OpenDocument - http://digital.ni.com/public.nsf/allkb/548965C170D6AA258