Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6429 State: PUBLISHED Published: 2014-01-26T11:00:00 Last Updated: 2024-08-06T17:39:01.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152 and CVE-2013-7315. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530770/100/0/threaded - https://h20566.www
- CVE Program Container: References: - http://www.securityfocus.com/archive/1/530770/100/0/threaded - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 - https://jira.springsource.org/browse/SPR-11078?page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel - http://www.gopivotal.com/security/cve-2013-6429 - http://rhn.redhat.com/errata/RHSA-2014-0400.html - http://www.securityfocus.com/bid/64947 - http://secunia.com/advisories/57915
CVE ID: CVE-2013-6430 State: PUBLISHED Published: 2020-01-10T13:28:11 Last Updated: 2024-08-06T17:39:01.262Z Vendors: Pivotal Products: Spring MVC Problem Types: Cross-Site Scripting Description: The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a (1) line separator or (2) paragraph separator Unicode character or (3) left or (4) right angle bracket. Additional Analyst Notes: - CVE Program Container: References: - http://www.gopivotal.com/security/cve-2013-6430 - https://github.com/spring-projects
VE Program Container: References: - http://www.gopivotal.com/security/cve-2013-6430 - https://github.com/spring-projects/spring-framework/commit/7a7df6637478607bef0277bf52a4e0a03e20a248 - https://jira.springsource.org/browse/SPR-9983
CVE ID: CVE-2013-6431 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T17:39:01.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for an IPv6 SIOCADDRT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ae7b4e1f213aa659aedf9c
hangeLog-3.11.5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2 - https://bugzilla.redhat.com/show_bug.cgi?id=1039054 - http://www.openwall.com/lists/oss-security/2013/12/06/5 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - https://github.com/torvalds/linux/commit/ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2 - http://rhn.redhat.com/errata/RHSA-2014-0100.html
CVE ID: CVE-2013-6432 State: PUBLISHED Published: 2013-12-09T18:00:00 Last Updated: 2024-08-06T17:39:01.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2113-1 - http://www.openwall.com/lists/oss-security/2013/12/06/6 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3
13-1 - http://www.openwall.com/lists/oss-security/2013/12/06/6 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - http://www.ubuntu.com/usn/USN-2117-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1039046 - https://github.com/torvalds/linux/commit/cf970c002d270c36202bd5b9c2804d3097a52da0 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cf970c002d270c36202bd5b9c2804d3097a52da0
CVE ID: CVE-2013-6433 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T17:39:01.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59533 - http://www.ubuntu.com/usn/USN-2255-1 - http://rhn.redhat.com/errata/RHSA-2014-0516.html - https://bugzilla.redhat.com/show_bug.cgi?id=1039812
CVE ID: CVE-2013-6434 State: PUBLISHED Published: 2014-01-24T18:00:00 Last Updated: 2024-08-06T17:39:01.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65077 - http://www.securitytracker.com/id/1029653 - http://rhn.redhat.com/errata/RHSA-2014-0038.html
CVE ID: CVE-2013-6435 State: PUBLISHED Published: 2014-12-16T18:00:00 Last Updated: 2024-08-06T17:39:01.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:056 - https://security.gentoo.org/glsa/201811-22
546.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:056 - https://security.gentoo.org/glsa/201811-22 - http://advisories.mageia.org/MGASA-2014-0529.html - https://securityblog.redhat.com/2014/12/10/analysis-of-the-cve-2013-6435-flaw-in-rpm/ - http://rhn.redhat.com/errata/RHSA-2014-1975.html - https://bugzilla.redhat.com/show_bug.cgi?id=1039811 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:251 - http://www.securityfocus.com/bid/71558 - http://rhn.redhat.com/errata/RHSA-2014-1974.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.debian.org/security/2015/dsa-3129 - http://rhn.redhat.com/errata/RHSA-2014-1976.html
CVE ID: CVE-2013-6436 State: PUBLISHED Published: 2014-01-07T19:00:00 Last Updated: 2024-08-06T17:39:01.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) via a guest in the shutdown status, as demonstrated by the "virsh memtune" command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2093-1 - http://osvdb.org/101485 - http://secunia.com/advisories/60895 - http://sec
ces: - http://www.ubuntu.com/usn/USN-2093-1 - http://osvdb.org/101485 - http://secunia.com/advisories/60895 - http://security.gentoo.org/glsa/glsa-201412-04.xml - http://secunia.com/advisories/56245 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00004.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=f8c1cb90213508c4f32549023b0572ed774e48aa - https://www.redhat.com/archives/libvir-list/2013-December/msg01170.html
CVE ID: CVE-2013-6437 State: PUBLISHED Published: 2014-03-06T15:00:00 Last Updated: 2024-08-06T17:39:01.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libvirt driver in OpenStack Compute (Nova) before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service (disk consumption) by creating and deleting instances with unique os_type settings, which triggers the creation of a new ephemeral disk backing file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0231.html - http://lists.openstack.org/pipermail/openstack-announce/2013-December/000179.html - https://bugs.launchpad.ne
231.html - http://lists.openstack.org/pipermail/openstack-announce/2013-December/000179.html - https://bugs.launchpad.net/nova/+bug/1253980
CVE ID: CVE-2013-6438 State: PUBLISHED Published: 2014-03-18T01:00:00 Last Updated: 2024-08-06T17:39:01.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.oracle.com/sunsecurity/entry/multiple_input_validation_vulnerabilities_in1 - https://puppet.com/security/cve/cve-2013-6438 - http://secunia.com/advisories/59315 - http://s
ion_vulnerabilities_in1 - https://puppet.com/security/cve/cve-2013-6438 - http://secunia.com/advisories/59315 - http://secunia.com/advisories/58230 - https://support.apple.com/HT204659 - http://advisories.mageia.org/MGASA-2014-0135.html - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 - http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES - http://security.gentoo.org/glsa/glsa-201408-12.xml - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c?r1=1528718&r2=1556428&diff_format=h - http://secunia.com/advisories/60536 - ht
httpd/httpd/trunk/modules/dav/main/util.c?r1=1528718&r2=1556428&diff_format=h - http://secunia.com/advisories/60536 - http://www.securityfocus.com/bid/66303 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://marc.info/?l=bugtraq&m=141390017113542&w=2 - http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html - http://secunia.com/advisories/59345 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/kb/HT6535 - http
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/kb/HT6535 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/dav/main/util.c - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - https://httpd.apache.org/security/vulnerabilities_24.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www.ubuntu.com/usn/USN-2152-1 - http://www.apache.org/dist/httpd/CHANGES_2.4.9 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apa
rg/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%4
s.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f
f826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3
tps://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2013-6439 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T17:39:01.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1042677 - http://rhn.redhat.com/errata/RHSA-2013-1863.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90134
CVE ID: CVE-2013-6440 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T17:39:01.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0170.html - http://rhn.redhat.com/errata/RHSA-2014-0195.html - http://rhn.redhat.com/errata/RHSA-2014-0172.html - http://rhn.redha
- http://rhn.redhat.com/errata/RHSA-2014-0195.html - http://rhn.redhat.com/errata/RHSA-2014-0172.html - http://rhn.redhat.com/errata/RHSA-2014-0171.html - https://www.oracle.com/security-alerts/cpujan2022.html - http://blog.sendsafely.com/post/69590974866/web-based-single-sign-on-and-the-dangers-of-saml-xml - http://shibboleth.net/community/advisories/secadv_20131213.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1043332
CVE ID: CVE-2013-6441 State: PUBLISHED Published: 2014-02-14T15:00:00 Last Updated: 2024-08-06T17:39:01.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2104-1 - https://bugs.launchpad.net/ubuntu/%2Bsource/lxc/%2Bbug/1261045 - https://github.com/lxc/lxc/commit/f4d5cc8e1f39d132b61e110674528cac727ae0e2 - https://github.com/dotcloud/lxc/pull/1
CVE ID: CVE-2013-6442 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T17:39:01.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/history/samba-4.1.6.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.samba.or
mba-4.1.6.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.samba.org/samba/security/CVE-2013-6442 - http://www.samba.org/samba/history/samba-4.0.16.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html - http://lists.opensuse.org/opensuse-updates/2014-03/msg00062.html - https://bugzilla.samba.org/show_bug.cgi?id=10327 - http://www.securityfocus.com/bid/66232
CVE ID: CVE-2013-6443 State: PUBLISHED Published: 2014-01-23T01:00:00 Last Updated: 2024-08-06T17:39:01.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029606 - http://rhn.redhat.com/errata/RHSA-2014-0025.html
CVE ID: CVE-2013-6444 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-06T17:39:01.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1044246 - http://sourceforge.net/p/pywbem/mailman/message/31757312/ - http://seclists.org/oss-sec/2013/q4/524 - http://www.oracle.com/technetwork/topics/se
pywbem/mailman/message/31757312/ - http://seclists.org/oss-sec/2013/q4/524 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.securityfocus.com/bid/64544 - http://sourceforge.net/p/pywbem/code/627/
CVE ID: CVE-2013-6445 State: PUBLISHED Published: 2014-04-30T14:00:00 Last Updated: 2024-08-06T17:39:01.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030158 - http://rhn.redhat.com/errata/RHSA-2014-0441.html - http://rhn.redhat.com/errata/RHSA-2014-0440.html
CVE ID: CVE-2013-6446 State: PUBLISHED Published: 2017-03-23T20:00:00 Last Updated: 2024-08-06T17:39:01.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job information by leveraging failure to enforce job ACLs. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html#concept_mfb_qpm_4n - http://www.securityfocus.com/bid/97068
CVE ID: CVE-2013-6447 State: PUBLISHED Published: 2014-01-23T00:00:00 Last Updated: 2024-08-06T17:39:01.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allow remote attackers to read arbitrary files and possibly have other impacts via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029652 - https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5
www.securitytracker.com/id/1029652 - https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5 - http://secunia.com/advisories/56572 - https://bugzilla.redhat.com/show_bug.cgi?id=1044784 - http://rhn.redhat.com/errata/RHSA-2014-0045.html
CVE ID: CVE-2013-6448 State: PUBLISHED Published: 2014-01-23T00:00:00 Last Updated: 2024-08-06T17:39:01.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029652 - https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5 - https://bugzilla.redhat
/1029652 - https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5 - https://bugzilla.redhat.com/show_bug.cgi?id=1044794 - http://secunia.com/advisories/56572 - http://rhn.redhat.com/errata/RHSA-2014-0045.html
CVE ID: CVE-2013-6449 State: PUBLISHED Published: 2013-12-23T22:00:00 Last Updated: 2024-08-06T17:39:01.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00006.html - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - http://lists.opensu
pensuse-updates/2014-01/msg00006.html - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00012.html - http://security.gentoo.org/glsa/glsa-201412-39.xml - http://www.debian.org/security/2014/dsa-2833 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html - http://www-01.ibm.com/support/docview.wss?uid=isg400001841 - http://www.securityfocus.com/bid/64530 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00009.html - http://lists.opensuse.org/opensuse-updat