Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1050 State: PUBLISHED Published: 2013-03-08T22:00:00Z Last Updated: 2024-09-16T19:25:32.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate attackers to bypass screen locking and access an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1120126 - https://bugzilla.gnome.org/show_bug.cgi?id=683060 - https://git.gnome.org/browse
source/gnome-screensaver/+bug/1120126 - https://bugzilla.gnome.org/show_bug.cgi?id=683060 - https://git.gnome.org/browse/gnome-screensaver/commit/?id=1940dc6bc8ad5ee2c029714efb1276c05ca80bd4 - http://www.ubuntu.com/usn/USN-1716-1
CVE ID: CVE-2013-1051 State: PUBLISHED Published: 2013-03-21T17:00:00Z Last Updated: 2024-09-17T02:47:34.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/91428 - http://www.ubuntu.com/usn/USN-1762-1 - http://secunia.com/advisories/52633
CVE ID: CVE-2013-1052 State: PUBLISHED Published: 2013-03-21T17:00:00 Last Updated: 2024-08-06T14:49:20.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privileges via unspecified vectors related to sudo. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/58550 - http://www.ubuntu.com/usn/USN-1766-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82918
CVE ID: CVE-2013-1053 State: PUBLISHED Published: 2021-01-13T23:00:16.583645Z Last Updated: 2024-09-16T16:23:22.885Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Canonical Products: remote-login-service Problem Types: CWE-261 Description: In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1158373
CVE ID: CVE-2013-1054 State: PUBLISHED Published: 2021-04-07T19:20:18.126383Z Last Updated: 2024-09-16T23:32:01.687Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Canonical Products: unity-firefox-extension Problem Types: CWE-404 Description: The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bu
abling the extension entirely. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1175661 - https://ubuntu.com/USN-2743-3
CVE ID: CVE-2013-1055 State: PUBLISHED Published: 2021-04-07T19:20:18.808514Z Last Updated: 2024-09-16T21:08:08.783Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Canonical Products: unity-firefox-extension, libunity-webapps Problem Types: CWE-404 Description: The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was hit. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 of unity-firefox-extension and in all versions of libu
ate limit was hit. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 of unity-firefox-extension and in all versions of libunity-webapps by shipping an empty unity-firefox-extension package, thus disabling the extension entirely and invalidating the attack against the libunity-webapps package. Additional Analyst Notes: - CVE Program Container: References: - https://ubuntu.com/USN-2743-3 - https://launchpad.net/bugs/1175691
CVE ID: CVE-2013-1056 State: PUBLISHED Published: 2013-10-28T21:00:00Z Last Updated: 2024-09-16T19:55:53.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or possibly gain privileges via vectors involving cached xkb files. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1990-1
CVE ID: CVE-2013-1057 State: PUBLISHED Published: 2013-11-15T18:16:00Z Last Updated: 2024-09-16T23:52:02.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2013-1 - https://bugs.launchpad.net/maas/+bug/1158425 - http://secunia.com/advisories/55567 - https://launchpad.net/maas/+milestone/13.10
CVE ID: CVE-2013-1058 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T14:49:20.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2013-1 - https://bugs.launchpad.net/maas/%2Bbug/1039513 - http://secunia.com/advisories/55567 - https://launchpad.net/maas/+milestone/13.10
CVE ID: CVE-2013-1059 State: PUBLISHED Published: 2013-07-08T17:00:00 Last Updated: 2024-08-06T14:49:20.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/09/7 - http://hkpco.kr/advisory/CVE-2013-1059.txt - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - https://bugzilla
visory/CVE-2013-1059.txt - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - https://bugzilla.redhat.com/attachment.cgi?id=767633&action=diff - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00012.html - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - https://bugzilla.redhat.com/show_bug.cgi?id=977356 - http://www.ubuntu.com/usn/USN-1941-1 - http://www.ubuntu.com/usn/USN-1942-1
CVE ID: CVE-2013-1060 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T14:49:20.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1943-1 - http://www.ubuntu.com/usn/USN-1938-1 - http://www.ub
ram Container: References: - http://www.ubuntu.com/usn/USN-1943-1 - http://www.ubuntu.com/usn/USN-1938-1 - http://www.ubuntu.com/usn/USN-1944-1 - http://www.ubuntu.com/usn/USN-1945-1 - https://launchpad.net/bugs/1206200 - https://lists.ubuntu.com/archives/kernel-team/2013-July/031248.html - http://www.ubuntu.com/usn/USN-1939-1 - https://lists.ubuntu.com/archives/kernel-team/2013-July/031249.html - http://www.ubuntu.com/usn/USN-1947-1 - http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-1060.html - http://www.ubuntu.com/usn/USN-1941-1 - http://www.ubuntu.com/usn/USN-1942-1 - http://www.ubuntu.com/usn/USN-1946-1
CVE ID: CVE-2013-1061 State: PUBLISHED Published: 2013-10-03T21:00:00 Last Updated: 2024-08-06T14:49:20.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/ubuntu/+source/software-properties
dditional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/ubuntu/+source/software-properties/0.82.7.5 - http://launchpadlibrarian.net/150156695/software-properties_0.92.17.2_0.92.17.3.diff.gz - https://launchpad.net/ubuntu/+source/software-properties/0.92.17.3 - https://launchpad.net/ubuntu/+source/software-properties/0.92.9.3 - http://secunia.com/advisories/54909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87381 - http://www.ubuntu.com/usn/USN-1960-1
CVE ID: CVE-2013-1062 State: PUBLISHED Published: 2013-10-03T21:00:00Z Last Updated: 2024-09-16T18:49:03.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1962-1 - http://secunia.com/advisories/54907
CVE ID: CVE-2013-1063 State: PUBLISHED Published: 2013-10-03T21:00:00Z Last Updated: 2024-09-16T19:25:57.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1963-1 - http://secunia.com/advisories/54901 - https://launchpad
Container: References: - http://www.ubuntu.com/usn/USN-1963-1 - http://secunia.com/advisories/54901 - https://launchpad.net/ubuntu/+source/usb-creator/0.2.40ubuntu2 - https://launchpad.net/ubuntu/+source/usb-creator/0.2.47.1 - https://launchpad.net/ubuntu/+source/usb-creator/0.2.38.2
CVE ID: CVE-2013-1064 State: PUBLISHED Published: 2013-10-03T21:00:00Z Last Updated: 2024-09-16T20:46:51.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/ubuntu/+source/apt-xapian-index/0.44ubuntu5.1 - https://launchpad.net/ubuntu/+source/apt-xap
es: - https://launchpad.net/ubuntu/+source/apt-xapian-index/0.44ubuntu5.1 - https://launchpad.net/ubuntu/+source/apt-xapian-index/0.44ubuntu7.1 - https://launchpad.net/ubuntu/+source/apt-xapian-index/0.45ubuntu2.1 - http://www.ubuntu.com/usn/USN-1955-1 - http://secunia.com/advisories/54914
CVE ID: CVE-2013-1065 State: PUBLISHED Published: 2013-10-03T21:00:00Z Last Updated: 2024-09-16T17:24:05.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54912 - http://www.ubuntu.com/usn/USN-1957-1 - https://launchpad.net/ubuntu/+source/jockey/0.9.7-0ubuntu7.11
CVE ID: CVE-2013-1066 State: PUBLISHED Published: 2013-10-03T21:00:00 Last Updated: 2024-08-06T14:49:20.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/ubuntu/+source/language-selector/0.90.1 - https://exchange.xforce.ibmcloud.c
tainer: References: - https://launchpad.net/ubuntu/+source/language-selector/0.90.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87379 - https://launchpad.net/ubuntu/+source/language-selector/0.110.1 - http://www.ubuntu.com/usn/USN-1958-1 - https://launchpad.net/ubuntu/+source/language-selector/0.79.4 - http://secunia.com/advisories/54911
CVE ID: CVE-2013-1067 State: PUBLISHED Published: 2013-10-25T23:00:00Z Last Updated: 2024-09-16T20:27:43.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2007-1
CVE ID: CVE-2013-1068 State: PUBLISHED Published: 2014-06-19T15:00:00 Last Updated: 2024-08-06T14:49:20.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder (python-cinder) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properly set the sudo configuration, which makes it easier for attackers to gain privileges by leveraging another vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2248-1 - http://ww
erability. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2248-1 - http://www.ubuntu.com/usn/USN-2247-1
CVE ID: CVE-2013-1069 State: PUBLISHED Published: 2014-02-17T16:00:00 Last Updated: 2024-08-06T14:49:20.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2105-1 - https://bugs.launchpad.net/ubuntu/%2Bsource/maas/%2Bbug/1254034
CVE ID: CVE-2013-1070 State: PUBLISHED Published: 2014-02-17T16:00:00 Last Updated: 2024-08-06T14:49:20.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65575 - http://www.ubuntu.com/usn/USN-2105-1 - https://bugs.launchpad.net/maas/%2Bbug/1251336
CVE ID: CVE-2013-1071 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1072 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1073 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1074 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1075 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1076 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1077 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1079 State: PUBLISHED Published: 2013-03-29T10:00:00Z Last Updated: 2024-09-16T16:52:44.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-13-048/ - http://www.novell.com/support/kb/doc.php?id=7011811
CVE ID: CVE-2013-1080 State: PUBLISHED Published: 2013-03-29T10:00:00 Last Updated: 2024-08-06T14:49:20.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to conduct directory traversal attacks, and consequently upload and execute arbitrary programs, via a request to TCP port 443. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7011812 - http://www.novell.com/support/kb/doc.php?id=7012027 - http://www.zerodayinitiative.com/advisor
t/kb/doc.php?id=7011812 - http://www.novell.com/support/kb/doc.php?id=7012027 - http://www.zerodayinitiative.com/advisories/ZDI-13-049/ - http://www.exploit-db.com/exploits/24938
CVE ID: CVE-2013-1081 State: PUBLISHED Published: 2013-03-11T21:00:00Z Last Updated: 2024-09-16T16:28:22.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7011895
CVE ID: CVE-2013-1082 State: PUBLISHED Published: 2013-03-29T10:00:00Z Last Updated: 2024-09-17T00:51:44.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7011896
CVE ID: CVE-2013-1083 State: PUBLISHED Published: 2013-03-29T10:00:00Z Last Updated: 2024-09-16T19:00:58.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager (aka IDM) Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=nbGXg-msbmw~ - https://bugzilla.novell.com/show_bug.cgi?id=807193
CVE ID: CVE-2013-1084 State: PUBLISHED Published: 2013-11-02T19:00:00Z Last Updated: 2024-09-17T01:10:43.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename parameter in a GetFile action to zenworks-unmaninv/. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012760 - http://www.novell.com/support/kb/doc.php?id=7012027 - http://secunia.com/advisories/55450
CVE ID: CVE-2013-1085 State: PUBLISHED Published: 2013-03-29T10:00:00Z Last Updated: 2024-09-17T01:11:10.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-13-036/ - http://www.novell.com/support/kb/doc.php?id=7011935 - https://bugzilla.novell.com/show_bug.cgi?id=777352
CVE ID: CVE-2013-1086 State: PUBLISHED Published: 2013-04-19T10:00:00 Last Updated: 2024-08-06T14:49:20.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012064 - https://bugzilla.novell.com/show_bug.cgi?id=802906 - http://secunia.com/advisories/53098
CVE ID: CVE-2013-1087 State: PUBLISHED Published: 2013-07-15T20:00:00Z Last Updated: 2024-09-16T22:55:44.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=799673 - http://www.novell.com/support/kb/doc.php?id=7012063
CVE ID: CVE-2013-1088 State: PUBLISHED Published: 2013-04-24T10:00:00 Last Updated: 2024-08-06T14:49:20.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7010166 - https://bugzilla.novell.com/show_bug.cgi?id=726260