Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1813 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T15:13:32.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.t-mobile.com/docs/DOC-21994 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701965 - http://rhn.redhat.com/errata/RHSA-2013-1732.html - http://lists.busybox.net/pipermail/busybox/2013-January/078864.html - http://git.busybox.net/busybox/commit/?i
32.html - http://lists.busybox.net/pipermail/busybox/2013-January/078864.html - http://git.busybox.net/busybox/commit/?id=4609f477c7e043a4f6147dfe6e86b775da2ef784 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2020/Mar/15 - http://seclists.org/fulldisclosure/2020/Aug/20
CVE ID: CVE-2013-1814 State: PUBLISHED Published: 2013-03-14T00:00:00Z Last Updated: 2024-09-17T02:05:51.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24744/ - http://archives.neohapsis.com/archives/bugtraq/2013-03/0078.html
CVE ID: CVE-2013-1815 State: PUBLISHED Published: 2013-04-10T15:00:00 Last Updated: 2024-08-06T15:13:33.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/83017 - https://bugzilla.redhat.com/show_bug.cgi?id=917904 - http://rhn.redhat.com/errata/RHSA-2013-0671.html
CVE ID: CVE-2013-1816 State: PUBLISHED Published: 2019-11-20T19:22:30 Last Updated: 2024-08-06T15:13:33.186Z Vendors: mediawiki Products: mediawiki Problem Types: Other Description: MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58306 - https://security-tracker.debian.org/tracker/CVE-2013-1816 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88360 - http://security.gentoo.org/glsa/glsa-201310-21.xml - http://www.openw
change.xforce.ibmcloud.com/vulnerabilities/88360 - http://security.gentoo.org/glsa/glsa-201310-21.xml - http://www.openwall.com/lists/oss-security/2013/03/05/4
CVE ID: CVE-2013-1817 State: PUBLISHED Published: 2019-11-20T19:32:38 Last Updated: 2024-08-06T15:13:32.994Z Vendors: mediawiki Products: mediawiki Problem Types: Other Description: MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1817 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1817 - http://www.securityfocus.com/bid/58305 - http://security.gentoo.org/glsa/glsa-201310-21.xml - http://www.openwall.com/lists/oss-security/2013/03/05/4 - https://exchange.xforce.ibmcl
oo.org/glsa/glsa-201310-21.xml - http://www.openwall.com/lists/oss-security/2013/03/05/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88359
CVE ID: CVE-2013-1818 State: PUBLISHED Published: 2014-06-02T15:00:00 Last Updated: 2024-08-06T15:13:33.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mediawiki.org/wiki/Release_notes/1.20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88363 - https://bugzilla.wikimedia.org/show_bug.cgi?id=45355 - http://www.securityfocus.com/bid/58304
CVE ID: CVE-2013-1819 State: PUBLISHED Published: 2013-03-06T22:00:00 Last Updated: 2024-08-06T15:13:33.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1970-1 - https://bugzilla.redhat.com/show_bug.cgi?id=918009 - http://www.ke
References: - http://www.ubuntu.com/usn/USN-1970-1 - https://bugzilla.redhat.com/show_bug.cgi?id=918009 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6 - http://www.ubuntu.com/usn/USN-1975-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://www.openwall.com/lists/oss-security/2013/03/05/10 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eb178619f930fa2ba2348de332a1ff1c66a31424 - http://www.ubuntu.com/usn/USN-1968-1 - http://www.ubuntu.com/usn/USN-1969-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.
www.ubuntu.com/usn/USN-1969-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.ubuntu.com/usn/USN-1973-1 - https://github.com/torvalds/linux/commit/eb178619f930fa2ba2348de332a1ff1c66a31424 - http://www.ubuntu.com/usn/USN-1972-1
CVE ID: CVE-2013-1820 State: PUBLISHED Published: 2019-11-08T14:25:11 Last Updated: 2024-08-06T15:13:33.024Z Vendors: tuned Products: tuned Problem Types: Insecure Permissions Description: tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1820 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1820 - https://bugzilla.redhat.com/show_bug.cgi?id=918233
CVE ID: CVE-2013-1821 State: PUBLISHED Published: 2013-04-09T21:00:00 Last Updated: 2024-08-06T15:13:33.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0612.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:124 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00034.html - http://www.slackware.com/security/viewer.php?l=sla
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00034.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.426862 - http://secunia.com/advisories/52783 - http://www.debian.org/security/2013/dsa-2738 - http://lists.opensuse.org/opensuse-updates/2013-04/msg00036.html - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=39384 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702525 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0092 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://www.ubuntu.com/usn/USN-1780-1 - http://www.securityfocus.com/bid/58141 - http://secunia.co
jul2015-2511963.html - http://www.ubuntu.com/usn/USN-1780-1 - http://www.securityfocus.com/bid/58141 - http://secunia.com/advisories/52902 - http://www.openwall.com/lists/oss-security/2013/03/06/5 - https://bugzilla.redhat.com/show_bug.cgi?id=914716 - http://www.ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22/ - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00001.html - http://www.debian.org/security/2013/dsa-2809 - http://rhn.redhat.com/errata/RHSA-2013-1028.html - http://rhn.redhat.com/errata/RHSA-2013-0611.html - http://rhn.redhat.com/errata/RHSA-2013-1147.html - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html
CVE ID: CVE-2013-1822 State: PUBLISHED Published: 2014-03-14T16:00:00 Last Updated: 2024-08-06T15:13:33.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the (1) quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin privileges to inject arbitrary web script or HTML via the (2) group field to settings.php or (3) "share with" field. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2
. Additional Analyst Notes: - CVE Program Container: References: - http://owncloud.org/about/security/advisories/oC-SA-2013-008/
CVE ID: CVE-2013-1823 State: PUBLISHED Published: 2013-04-02T22:00:00Z Last Updated: 2024-08-06T15:13:33.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52774 - http://www.osvdb.org/91718 - https://bugzilla.redhat.com/show_bug.cgi?id=918784 - http://rhn.redhat.com/errata/RHSA-2013-0686.html
CVE ID: CVE-2013-1824 State: PUBLISHED Published: 2013-09-16T01:00:00Z Last Updated: 2024-08-06T15:13:33.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. Additional Analyst Notes: - CVE Program Container: References: - http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-1824.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=188c196d4da60bdde91
.com/~ubuntu-security/cve/2013/CVE-2013-1824.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=188c196d4da60bdde9190d2fc532650d17f7af2d - https://bugzilla.redhat.com/show_bug.cgi?id=918187 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=afe98b7829d50806559acac9b530acb8283c3bf4 - http://support.apple.com/kb/HT5880
CVE ID: CVE-2013-1825 State: REJECTED Published: 2013-03-14T20:00:00Z Last Updated: 2024-09-16T19:42:02.655Z Description: No description available.
CVE ID: CVE-2013-1826 State: PUBLISHED Published: 2013-03-22T10:00:00 Last Updated: 2024-08-06T15:13:33.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.7 - http://www.ubuntu.com/usn/USN-1829-1 - https://github.com/torvalds/linux/commit
/pub/linux/kernel/v3.x/ChangeLog-3.5.7 - http://www.ubuntu.com/usn/USN-1829-1 - https://github.com/torvalds/linux/commit/864745d291b5ba80ea0bd0edcbe67273de368836 - https://bugzilla.redhat.com/show_bug.cgi?id=919384 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://www.openwall.com/lists/oss-security/2013/03/07/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=864745d291b5ba80ea0bd0edcbe67273de368836
CVE ID: CVE-2013-1827 State: PUBLISHED Published: 2013-03-22T10:00:00 Last Updated: 2024-08-06T15:13:33.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for a certain (1) sender or (2) receiver getsockopt call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/276bdb82dedb290511467a5a4fdbe9f0b52dce6f - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.4 - https://bugzilla.redhat.com/show_bug.cgi?id=919164 - http://
tp://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.4 - https://bugzilla.redhat.com/show_bug.cgi?id=919164 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=276bdb82dedb290511467a5a4fdbe9f0b52dce6f - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://www.openwall.com/lists/oss-security/2013/03/07/2
CVE ID: CVE-2013-1828 State: PUBLISHED Published: 2013-03-22T10:00:00 Last Updated: 2024-08-06T15:13:33.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size value before proceeding to a copy_from_user operation, which allows local users to gain privileges via a crafted application that contains an SCTP_GET_ASSOC_STATS getsockopt system call. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/grsecurity/statuses/309805924749541376 - http://www.exploit-db.com/exploits/24747 - https://bugzilla.redhat.com/show_bug.cgi?id=919315 - http
09805924749541376 - http://www.exploit-db.com/exploits/24747 - https://bugzilla.redhat.com/show_bug.cgi?id=919315 - http://www.openwall.com/lists/oss-security/2013/03/08/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=726bc6b092da4c093eb74d13c07184b18c1af0f1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 - http://grsecurity.net/~spender/sctp.c - https://github.com/torvalds/linux/commit/726bc6b092da4c093eb74d13c07184b18c1af0f1
CVE ID: CVE-2013-1829 State: PUBLISHED Published: 2013-03-25T21:00:00Z Last Updated: 2024-09-16T23:21:36.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain potentially sensitive information by leveraging the student role. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=225339 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37338 - http://openwall.com/lists/oss-security/2013/03/25/2
CVE ID: CVE-2013-1830 State: PUBLISHED Published: 2013-03-25T21:00:00 Last Updated: 2024-08-06T15:13:33.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - htt
announce/2013-April/101358.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37481 - https://moodle.org/mod/forum/discuss.php?d=225341
CVE ID: CVE-2013-1831 State: PUBLISHED Published: 2013-03-25T21:00:00 Last Updated: 2024-08-06T15:13:33.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2 - http
oject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36901 - https://moodle.org/mod/forum/discuss.php?d=225342
CVE ID: CVE-2013-1832 State: PUBLISHED Published: 2013-03-25T21:00:00 Last Updated: 2024-08-06T15:13:33.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 includes the WebDAV password in the configuration form, which allows remote authenticated administrators to obtain sensitive information by configuring an instance. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=225343 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - http://git.moodle.org/gw?p=moodle.git&a=search&h
s.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37681 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2
CVE ID: CVE-2013-1833 State: PUBLISHED Published: 2013-03-25T21:00:00 Last Updated: 2024-08-06T15:13:33.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - https://moodle.org/mod/forum/discuss.php?d=225344 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s
- https://moodle.org/mod/forum/discuss.php?d=225344 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37507 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2
CVE ID: CVE-2013-1834 State: PUBLISHED Published: 2013-03-25T21:00:00 Last Updated: 2024-08-06T15:13:33.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified (1) userid or (2) courseid field. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - https://moodle.org/mod/forum/discuss.php?d=225346 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.co
uss.php?d=225346 - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37411
CVE ID: CVE-2013-1835 State: PUBLISHED Published: 2013-03-25T21:00:00 Last Updated: 2024-08-06T15:13:33.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/
fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36426 - https://moodle.org/mod/forum/discuss.php?d=225347
CVE ID: CVE-2013-1836 State: PUBLISHED Published: 2013-03-25T21:00:00 Last Updated: 2024-08-06T15:13:33.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall
3-April/101358.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html - http://openwall.com/lists/oss-security/2013/03/25/2 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37852 - https://moodle.org/mod/forum/discuss.php?d=225348
CVE ID: CVE-2013-1837 State: REJECTED Published: 2021-08-19T15:34:57 Last Updated: 2021-08-19T15:34:57 Description: No description available.
CVE ID: CVE-2013-1838 State: PUBLISHED Published: 2013-03-22T21:00:00 Last Updated: 2024-08-06T15:13:33.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource exhaustion and failure to spawn new instances) via a large number of calls to the addFixedIp function. Additional Analyst Notes: - CVE Program Container: References: - https://lists.launchpad.net/openstack/msg21892.html - http://www.securityfocus.com/bid/58492 - https://bugs.launchpad.net/nova/+bug/1125468 - http://ubuntu.com/usn/
92.html - http://www.securityfocus.com/bid/58492 - https://bugs.launchpad.net/nova/+bug/1125468 - http://ubuntu.com/usn/usn-1771-1 - https://review.openstack.org/#/c/24453/ - http://secunia.com/advisories/52728 - https://bugzilla.redhat.com/show_bug.cgi?id=919648 - http://secunia.com/advisories/52580 - http://osvdb.org/91303 - https://review.openstack.org/#/c/24452/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/82877 - http://rhn.redhat.com/errata/RHSA-2013-0709.html - https://review.openstack.org/#/c/24451/ - http://www.openwall.com/lists/oss-security/2013/03/14/18