Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0063 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0064 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0065 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0066 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0067 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0068 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0069 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0070 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0071 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0072 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0073 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:10:56.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
otes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16475 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-015
CVE ID: CVE-2013-0074 State: PUBLISHED Published: 2013-03-13T00:00:00.000Z Last Updated: 2025-10-22T00:05:43.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565 - https://oval.cisecurity.org/repository/search/definition/ova
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022
CVE ID: CVE-2013-0075 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-10-17T18:18:12.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-018 - http://www.us-cert.gov/cas/techalerts
ttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-018 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16373
CVE ID: CVE-2013-0076 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:10:56.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-019 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html - https://oval.cisecurity.org/repository/search/definition/
3-019 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16478
CVE ID: CVE-2013-0077 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:10:56.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15873 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A15873 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-011 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html
CVE ID: CVE-2013-0078 State: PUBLISHED Published: 2013-04-09T22:00:00 Last Updated: 2024-08-06T14:10:56.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-034 - http://www.us-cert.gov/ncas/alerts/TA13-100A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%
/www.us-cert.gov/ncas/alerts/TA13-100A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16293
CVE ID: CVE-2013-0079 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:10:56.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/851777 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-023 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
s-cert.gov/ncas/alerts/TA13-071A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16300 - http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1024
CVE ID: CVE-2013-0080 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:10:56.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16596
CVE ID: CVE-2013-0081 State: PUBLISHED Published: 2013-09-11T10:00:00 Last Updated: 2024-08-06T14:10:56.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
securitybulletins/2013/ms13-067 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19036 - http://www.us-cert.gov/ncas/alerts/TA13-253A
CVE ID: CVE-2013-0082 State: PUBLISHED Published: 2013-11-13T00:00:00 Last Updated: 2024-08-06T14:18:07.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "WPD File Format Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-317A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19178 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-091
CVE ID: CVE-2013-0083 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:07.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024 - http://www.us-cert.gov/ncas/alerts/TA13-071A
CVE ID: CVE-2013-0084 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:07.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://oval.cisecurity.org/repository/search/definition
/2013/ms13-024 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16445
CVE ID: CVE-2013-0085 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:07.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka "Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16414 - http://www.us-cert.gov/ncas/alerts/TA13-071A
CVE ID: CVE-2013-0086 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:07.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-025 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16539
CVE ID: CVE-2013-0087 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:07.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer OnResize Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16583 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/m
ttp://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021
CVE ID: CVE-2013-0088 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:07.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer saveHistory Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16386 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/201
- http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021
CVE ID: CVE-2013-0089 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:08.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CMarkupBehaviorContext Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16587 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybu
ef%3A16587 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021
CVE ID: CVE-2013-0090 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2025-01-16T20:37:41.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CCaret Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40935/ - http://packetstormsecurity.com/files/140186/Microsoft-Internet-Explorer-9-IEFRAME-CView-EnsureSize-Use-After-Free.html - https://oval.cisecurity.org
om/files/140186/Microsoft-Internet-Explorer-9-IEFRAME-CView-EnsureSize-Use-After-Free.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16049 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021 - http://blog.skylined.nl/20161216001.html
CVE ID: CVE-2013-0091 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:08.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CElement Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16526
CVE ID: CVE-2013-0092 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:08.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer GetMarkupPtr Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16324 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/20
CVE ID: CVE-2013-0093 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:08.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer onBeforeCopy Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
ates/securitybulletins/2013/ms13-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16239
CVE ID: CVE-2013-0094 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:09.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer removeChild Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
tes/securitybulletins/2013/ms13-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16634
CVE ID: CVE-2013-0095 State: PUBLISHED Published: 2013-03-13T00:00:00 Last Updated: 2024-08-06T14:18:08.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebKit browser on the victim's machine, aka "Unintended Content Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16082 - http://www.us-cert.gov/ncas/alerts/TA13-071A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-026
CVE ID: CVE-2013-0096 State: PUBLISHED Published: 2013-05-15T01:00:00 Last Updated: 2024-08-06T14:18:08.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/ncas/alerts/TA13-134A - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-045 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16204
CVE ID: CVE-2013-0097 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0098 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0099 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0100 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-0107 State: PUBLISHED Published: 2013-01-26T21:00:00Z Last Updated: 2024-09-17T00:05:54.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote attackers to execute arbitrary code via a crafted document containing instructions that reconstruct a certain security cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/275219
CVE ID: CVE-2013-0108 State: PUBLISHED Published: 2013-02-24T11:00:00Z Last Updated: 2024-09-16T18:39:15.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf
CVE ID: CVE-2013-0109 State: PUBLISHED Published: 2013-04-08T16:00:00Z Last Updated: 2024-09-17T02:56:42.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service (memory overwrite) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/957036 - http://www.nvidia.com/object/product-security.html
CVE ID: CVE-2013-0110 State: PUBLISHED Published: 2013-04-08T16:00:00Z Last Updated: 2024-09-16T23:30:32.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/957036 - http://www.nvidia.com/object/product-security.html