Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ght be the same vulnerability as CVE-2013-7072. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/487 - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004 - http://www.securityfocus.com/bid/64239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89629 - http://osvdb.org/100885
CVE ID: CVE-2013-7079 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T17:53:46.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ - http://www.securityfocus.com/bid/64252 - http://www.debian.org/secu
urity-bulletins/typo3-core/typo3-core-sa-2013-004/ - http://www.securityfocus.com/bid/64252 - http://www.debian.org/security/2014/dsa-2834
CVE ID: CVE-2013-7080 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T17:53:46.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers to write to arbitrary fields in the configuration database table via crafted links, aka "Mass Assignment." Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ - http://www.debian.org/security
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ - http://www.debian.org/security/2014/dsa-2834
CVE ID: CVE-2013-7081 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T17:53:46.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/473 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/ - http://www.debian.org/security/2014/dsa-2834
CVE ID: CVE-2013-7082 State: PUBLISHED Published: 2013-12-21T00:00:00 Last Updated: 2024-08-06T17:53:46.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in TYPO3 Flow (formerly FLOW3) 1.1.x before 1.1.1 and 2.0.x before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55996 - http://typo3.org/teams/security/security-bulletins/typo3-flow/typo3-flow-sa-2013-001 - http://osvdb.org/100825 - https://exchange
po3.org/teams/security/security-bulletins/typo3-flow/typo3-flow-sa-2013-001 - http://osvdb.org/100825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89614
CVE ID: CVE-2013-7085 State: PUBLISHED Published: 2013-12-14T17:00:00 Last Updated: 2024-08-06T17:53:46.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/13/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89669 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732006 - http://www.securityfocus.com/bid/64258 - http://www.openwall.com/lists/oss-security/2013/12/12/9 - http://osvdb.org/100917
CVE ID: CVE-2013-7086 State: PUBLISHED Published: 2013-12-19T02:00:00 Last Updated: 2024-08-06T17:53:46.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/webbynode-command-inj.html - http://seclists.org/oss-sec/2013/q4/493 - https://github.com/webbynode/webbynode/pull/85 - http://packetstormsecurity.com/files/124421 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
de/webbynode/pull/85 - http://packetstormsecurity.com/files/124421 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89705 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0079.html - http://osvdb.org/100920 - http://www.securityfocus.com/bid/64289 - http://seclists.org/oss-sec/2013/q4/497
CVE ID: CVE-2013-7087 State: PUBLISHED Published: 2019-11-15T14:11:00 Last Updated: 2024-08-06T17:53:46.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.97.7 has WWPack corrupt heap memory Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-7087 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7087 - http://security.gentoo.org/glsa/glsa-201405-08.xml - http://www.openwall.com/lists/oss-security/2013/12/13/1 - http://www.securityfocus.com/bid/58546
CVE ID: CVE-2013-7088 State: PUBLISHED Published: 2019-11-15T14:19:48 Last Updated: 2024-08-06T17:53:46.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.97.7 has buffer overflow in the libclamav component Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201405-08.xml - https://security-tracker.debian.org/tracker/CVE-2013-7088 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7088 - http://www.openwall.com/lists/oss-security/2013/12/13/1 - http://www.securityfocus.com/bid/58546
CVE ID: CVE-2013-7089 State: PUBLISHED Published: 2019-11-15T14:23:32 Last Updated: 2024-08-06T17:53:45.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.97.7: dbg_printhex possible information leak Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201405-08.xml - https://security-tracker.debian.org/tracker/CVE-2013-7089 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7089 - http://www.openwall.com/lists/oss-security/2013/12/13/1
CVE ID: CVE-2013-7091 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T17:53:46.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter. NOTE: this can be leveraged to execute arbitrary code by obtaining LDAP credentials and accessing the service/admin/soap API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64149 - http://packetstormsecurity.com/files/124321 - http://www.exploit-db.co
ences: - http://www.securityfocus.com/bid/64149 - http://packetstormsecurity.com/files/124321 - http://www.exploit-db.com/exploits/30472 - http://osvdb.org/100747 - http://www.exploit-db.com/exploits/30085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89527
CVE ID: CVE-2013-7092 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T17:53:45.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) events_col, (2) event_id, (3) reason, (4) events_order, (5) emailstatus_order, or (6) emailstatus_col JSON keys. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html - http://www.securityfocus.com/bid/64150 - https://exchange.xforce.i
il-Gateway-7.6-Command-Execution-SQL-Injection.html - http://www.securityfocus.com/bid/64150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90161 - http://seclists.org/fulldisclosure/2013/Dec/18 - http://osvdb.org/100582
CVE ID: CVE-2013-7093 State: PUBLISHED Published: 2013-12-13T19:00:00 Last Updated: 2024-08-06T17:53:45.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP Network Interface Router (SAProuter) 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89604 - https://erpscan.io/advisories/erpscan-13-023-saprouter-authentication-bypass/ - https://service.sap.com/sap/support/notes/1853140 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2013-7094 State: PUBLISHED Published: 2013-12-13T19:00:00 Last Updated: 2024-08-06T17:53:45.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://erpscan.io/advisories/erpscan-13-022-sap-netweaver-rsddcver_count_tab_cols-potential-sql-injection/ - https://service.sap.com/sap/support/notes/1836718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89603 - http://secunia.com/advisories/56061 - http://www.securityfocus.com/bid/
ange.xforce.ibmcloud.com/vulnerabilities/89603 - http://secunia.com/advisories/56061 - http://www.securityfocus.com/bid/64232 - http://scn.sap.com/docs/DOC-8218
CVE ID: CVE-2013-7095 State: PUBLISHED Published: 2013-12-13T19:00:00 Last Updated: 2024-08-06T17:53:46.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89703 - http://www.securitytracker.com/id/1029488 - http://scn.sap.com/docs/DOC-8218 - http://secunia.com/advisories/56064 - http://www.securityfocus.com/bid/64265 - https://service.sap.com/sap/support/notes/1909665 - https://erpscan.io/advi
4 - http://www.securityfocus.com/bid/64265 - https://service.sap.com/sap/support/notes/1909665 - https://erpscan.io/advisories/erpscan-13-025-sap-crm-crm_flex_data-xxe/
CVE ID: CVE-2013-7096 State: PUBLISHED Published: 2013-12-13T19:00:00 Last Updated: 2024-08-06T17:53:45.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89723 - https://erpscan.io/advisories/erpscan-13-024-sap-emr-unwired-multiple-sql-injections/ - http://scn.sap.com/docs/DOC-8218 - http://www.securityfocus.com/bid/64314 - https://service.sap.com/sap/support/notes/1864518
CVE ID: CVE-2013-7097 State: PUBLISHED Published: 2014-01-08T15:00:00 Last Updated: 2024-08-06T17:53:46.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the showmask parameter to installer/overview.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64255 - https://www.htbridge.com/advisory/HTB23190
CVE ID: CVE-2013-7098 State: PUBLISHED Published: 2020-02-13T22:32:01 Last Updated: 2024-08-06T17:53:45.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection. Additional Analyst Notes: - CVE Program Container: References: - http://www.infradead.org/openconnect/changelog.html
CVE ID: CVE-2013-7100 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T17:53:45.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before 11.2-cert3 allows remote attackers to cause a denial of service (daemon crash) via a 16-bit SMS message with an odd number of bytes, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://w
ber of bytes, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:300 - http://archives.neohapsis.com/archives/bugtraq/2013-12/0089.html - https://issues.asterisk.org/jira/browse/ASTERISK-22590 - http://secunia.com/advisories/56294 - http://downloads.asterisk.org/pub/security/AST-2013-006.html - http://www.securitytracker.com/id/1029499 - http://osvdb.org/101100 - http://www.debian.org/security/2014/dsa-2835 - http://www.securityfocus.com/bid/64364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89825
CVE ID: CVE-2013-7102 State: PUBLISHED Published: 2013-12-23T23:00:00 Last Updated: 2024-08-06T17:53:45.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload-lncthumb.php, and (3) media-upload-sq_button.php in lib/admin/ in the OptimizePress theme before 1.61 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images_comingsoon, images_lncthumbs, or images_optbuttons in wp-content/uploads/optpress/, as exploited in the wild in November 2013. Additional Analyst Notes: - CVE Progr
uttons in wp-content/uploads/optpress/, as exploited in the wild in November 2013. Additional Analyst Notes: - CVE Program Container: References: - http://help.optimizepress.com/customer/portal/articles/1381790-important-optimizepress-1-0-security-update - http://www.osirt.com/2013/11/wordpress-optimizepress-hack-file-upload-vulnerability/ - http://blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html - http://seclists.org/fulldisclosure/2013/Dec/127
CVE ID: CVE-2013-7103 State: PUBLISHED Published: 2013-12-14T17:00:00 Last Updated: 2024-08-06T17:53:46.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html - http://osvdb.org/100581 - http://www.securityfocus.com/bid/6415
Email-Gateway-7.6-Command-Execution-SQL-Injection.html - http://osvdb.org/100581 - http://www.securityfocus.com/bid/64150 - http://seclists.org/fulldisclosure/2013/Dec/18 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90162
CVE ID: CVE-2013-7104 State: PUBLISHED Published: 2013-12-14T17:00:00 Last Updated: 2024-08-06T17:53:46.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124277/McAfee-Email-Gateway-7.6-Command-Execution-SQL-Injection.html - http://osvdb.org/100581 - http://www.securityfocus.com/bid/64150 - http://se
-7.6-Command-Execution-SQL-Injection.html - http://osvdb.org/100581 - http://www.securityfocus.com/bid/64150 - http://seclists.org/fulldisclosure/2013/Dec/18 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90163
CVE ID: CVE-2013-7105 State: PUBLISHED Published: 2013-12-14T20:00:00 Last Updated: 2024-08-06T17:53:46.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63929 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-201302e.html - http://www.securitytracker.com/id/1029398
CVE ID: CVE-2013-7106 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T18:01:19.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the (1) display_nav_table, (2) page_limit_selector, (3) print_export_link, or (4) page_num_selector function in cgi/cgiutils.c; (5) status_page_num_selector function in cgi/status.c; or (6) display_command_expansion function in cgi/config.c. NOTE: this can be exploited without authentication by levera
or (6) display_command_expansion function in cgi/config.c. NOTE: this can be exploited without authentication by leveraging CVE-2013-7107. Additional Analyst Notes: - CVE Program Container: References: - https://dev.icinga.org/issues/5250 - https://www.icinga.org/2013/12/17/icinga-security-releases-1-10-2-1-9-4-1-8-5/ - http://www.openwall.com/lists/oss-security/2013/12/16/4
CVE ID: CVE-2013-7107 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T18:01:18.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106. Additional Analyst Notes: - CVE Program Container: References: - https://dev.icinga.org/issues/5346 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00061.html - https://dev.icinga.org/issues/5250 - https://www.icinga.org/2013/12/17/i
se.org/opensuse-updates/2014-02/msg00061.html - https://dev.icinga.org/issues/5250 - https://www.icinga.org/2013/12/17/icinga-security-releases-1-10-2-1-9-4-1-8-5/ - http://www.openwall.com/lists/oss-security/2013/12/16/4
CVE ID: CVE-2013-7108 State: PUBLISHED Published: 2014-01-14T18:00:00 Last Updated: 2024-08-06T18:01:19.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information from process memory or cause a denial of service (crash) via a long string in the last key value in the variable list to the process_cgivars function in (1) avail.c, (2) cmd.c, (3) config.c, (4) extinfo.c, (5) histogram.c, (6) notifications.c, (7) outages.c, (8) status.c, (9) statusmap.c, (10) summary.c, and (11) trends.c in cgi/,
stogram.c, (6) notifications.c, (7) outages.c, (8) status.c, (9) statusmap.c, (10) summary.c, and (11) trends.c in cgi/, which triggers a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:004 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00046.html - http://sourceforge.net/p/nagios/nagioscore/ci/d97e03f32741a7d851826b03ed73ff4c9612a866/ - http://secunia.com/advisories/56316 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00068.html - https://dev.icinga.org/issues/5251 - https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html - https://www.icinga.org/2013/12/17/
rg/issues/5251 - https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html - https://www.icinga.org/2013/12/17/icinga-security-releases-1-10-2-1-9-4-1-8-5/ - http://www.openwall.com/lists/oss-security/2013/12/24/1 - http://secunia.com/advisories/55976 - http://www.securityfocus.com/bid/64363 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00010.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00028.html
CVE ID: CVE-2013-7109 State: REJECTED Published: 2020-02-20T16:30:58 Last Updated: 2021-11-15T20:26:10 Description: No description available.
CVE ID: CVE-2013-7110 State: PUBLISHED Published: 2014-05-02T01:00:00 Last Updated: 2024-08-06T18:01:18.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/13/5 - https://github.com/transifex/transifex-client/issues/42 - http://www.openwall.com/lists/oss-security/2013/12/15/3
CVE ID: CVE-2013-7111 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:18.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapid.dhs.org/advisories/bio-basespace-sdk.html - http://www.openwall.com/lists/oss-security/2013/12/14/2 - http://www.openwall.com/lists/oss-security/2013/12/15/5
CVE ID: CVE-2013-7112 State: PUBLISHED Published: 2013-12-19T22:00:00 Last Updated: 2024-08-06T18:01:18.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does not check for empty lines, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=51738&r2=51737&pathrev=51738 - http://lists.opensuse.org/opensuse-upda