Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6020 State: PUBLISHED Published: 2013-10-28T01:00:00Z Last Updated: 2024-09-16T22:31:05.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-recovery requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests to the (1) Assessor, (2) Recorder, or (3) Treasurer application. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/911678
CVE ID: CVE-2013-6021 State: PUBLISHED Published: 2013-10-19T10:00:00 Last Updated: 2024-08-06T17:29:42.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/ - http://www.exploit-db.com/exploits/29273 - http://osvdb.org/98752 - http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/ - http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-firew
center.com/2013/10/17/xtm-11-8-secfixes/ - http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/ - http://www.securityfocus.com/bid/63227 - http://www.kb.cert.org/vuls/id/233990
CVE ID: CVE-2013-6022 State: PUBLISHED Published: 2020-02-12T21:48:43 Last Updated: 2024-08-06T17:29:42.959Z Vendors: Tiki Products: Tiki Problem Types: XSS Description: A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63463 - http://www.kb.cert.org/vuls/id/450646
CVE ID: CVE-2013-6023 State: PUBLISHED Published: 2013-11-02T21:00:00 Last Updated: 2024-08-06T17:29:42.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/785838 - http://www.exploit-db.com/exploits/29959 - http://www.securityfocus.com/bid/63360 - http://alguienenlafisi.blogspot.com/2013/10/dvr-tvt-directory-traversal.html
CVE ID: CVE-2013-6024 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-06T17:29:42.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html - http://www.kb.cert.org/vuls/id/146430 - https://support.f5.com/csp/article/K14969 - http://www.securityfocus.com/bid/65422
CVE ID: CVE-2013-6025 State: PUBLISHED Published: 2013-10-19T10:00:00 Last Updated: 2024-08-06T17:29:42.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55377 - http://www.kb.cert.org/vuls/id/303900 - http://www.securityfocus.com/bid/63193 - https://exchange.xforce.ibmcloud.com/v
http://www.kb.cert.org/vuls/id/303900 - http://www.securityfocus.com/bid/63193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/88105 - https://www.exploit-db.com/exploits/38805/ - http://www.securitytracker.com/id/1029208
CVE ID: CVE-2013-6026 State: PUBLISHED Published: 2013-10-19T10:00:00Z Last Updated: 2024-09-16T23:50:32.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013. Additional Analyst Notes: - CVE Program Container: References: - http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/ - http://www.dlink.com/uk/en/sup
r: References: - http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/ - http://www.dlink.com/uk/en/support/security - http://www.kb.cert.org/vuls/id/248083
CVE ID: CVE-2013-6027 State: PUBLISHED Published: 2013-10-19T10:00:00Z Last Updated: 2024-09-16T22:46:38.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi. Additional Analyst Notes: - CVE Program Container: References: - http://pastebin.com/raw.php?i=vbiG42VD - http://www.kb.cert.org/vuls/id/248083
CVE ID: CVE-2013-6028 State: PUBLISHED Published: 2014-01-12T15:00:00 Last Updated: 2024-08-06T17:29:42.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts, (2) modify user accounts, (3) delete user accounts, or (4) stop the product's service. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/101936 - http://www.kb.cert.org/vuls/id/204950 - http://atmail.com/changelog/
CVE ID: CVE-2013-6029 State: PUBLISHED Published: 2013-12-04T02:00:00 Last Updated: 2024-08-06T17:29:42.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/346278 - http://www.securityfocus.com/bid/64059
CVE ID: CVE-2013-6030 State: PUBLISHED Published: 2014-01-24T02:00:00 Last Updated: 2024-08-06T17:29:43.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65105 - http://www.kb.cert.org/vuls/id/168751
CVE ID: CVE-2013-6031 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T17:29:42.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/341526 - https://github.com/aczire/huawei-csrf
es: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/341526 - https://github.com/aczire/huawei-csrf-info_disclosure/blob/master/huawei_wifi_info.rb
CVE ID: CVE-2013-6032 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T17:29:42.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206,
gh LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/108062 - http://support.lexmark.com/index?page=content&id=TE586
CVE ID: CVE-2013-6033 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T17:29:42.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field. Additional Analyst Notes: - CVE Program Container: Referen
eb Server (EWS) to set the (a) Contact or (b) Location field. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/108062 - http://www.securityfocus.com/bid/65277 - http://www.osvdb.org/102752 - http://support.lexmark.com/index?page=content&id=TE585
CVE ID: CVE-2013-6034 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T17:29:42.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/250358
CVE ID: CVE-2013-6035 State: PUBLISHED Published: 2014-02-04T02:00:00 Last Updated: 2024-08-06T17:29:42.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to execute arbitrary code via unspecified protocol operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/250358
CVE ID: CVE-2013-6037 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T17:29:42.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Aker Secure Mail Gateway 2.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/687278 - http://www.securityfocus.com/bid/66024
CVE ID: CVE-2013-6038 State: PUBLISHED Published: 2013-12-17T11:00:00 Last Updated: 2024-08-06T17:29:42.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100988 - http://www.kb.cert.org/vuls/id/586958
CVE ID: CVE-2013-6039 State: PUBLISHED Published: 2013-12-09T16:00:00 Last Updated: 2024-08-06T17:29:42.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to (1) admin/hostdependencies.php, (2) admin/hosts.php, or other unspecified pages that allow search input, related to the search functionality in functions/content_class.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/268662 - http://secunia.com/advisories/55896 - http://jvn.jp/cert/JVNVU92648323/index.html - http:
w.kb.cert.org/vuls/id/268662 - http://secunia.com/advisories/55896 - http://jvn.jp/cert/JVNVU92648323/index.html - http://osvdb.org/100612 - http://archives.neohapsis.com/archives/fulldisclosure/2013-12/0031.html - http://www.nagiosql.org/forum8/solved-issues/3270-security-hotfix-for-nagiosql-3-2-sp2.html
CVE ID: CVE-2013-6040 State: PUBLISHED Published: 2014-01-21T01:00:00 Last Updated: 2024-09-05T14:25:52.484Z Vendors: MW6 Tech Products: MW6 Aztec ActiveX Controls, MW6 DataMatrix ActiveX Controls, MW6 MaxiCode ActiveX Controls Problem Types: CWE-94: Improper Control of Generation of Code Description: MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.exploit-db.com/exploits/31176 - http://www.kb.cert.org/vuls/id/2
iner: - CISA ADP Vulnrichment: References: - http://www.exploit-db.com/exploits/31176 - http://www.kb.cert.org/vuls/id/219470 - http://www.exploit-db.com/exploits/31177 - https://www.mw6tech.com
CVE ID: CVE-2013-6041 State: PUBLISHED Published: 2014-12-27T18:00:00 Last Updated: 2024-08-06T17:29:42.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29 - http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched
CVE ID: CVE-2013-6042 State: PUBLISHED Published: 2013-11-15T20:00:00 Last Updated: 2024-08-06T17:29:42.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/99203 - http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched - http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29 - http://www.securityfocus.com/bid/63464
CVE ID: CVE-2013-6043 State: PUBLISHED Published: 2014-12-27T18:00:00 Last Updated: 2024-08-06T17:29:42.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20140126212101/http://www.baesystemsdetica.com.au/Research/Advisories/Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29 - http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1
Webuzo-Multiple-Vulnerabilities-%28DS-2013-007%29 - http://www.softaculous.com/board/index.php?tid=4526&title=Webuzo_2.1.4_Launched
CVE ID: CVE-2013-6044 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T17:29:43.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting (XSS) or other vulnerabilities into Django applications that use this function, as demonstrated by "the login view in django.contrib.auth.views" and the javascript: scheme. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61777 - http://www.securitytracker.com/id
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61777 - http://www.securitytracker.com/id/1028915 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00015.html - https://github.com/django/django/commit/ec67af0bd609c412b76eaa4cc89968a2a8e5ad6a - http://secunia.com/advisories/54476 - http://rhn.redhat.com/errata/RHSA-2013-1521.html - http://seclists.org/oss-sec/2013/q3/369 - https://www.djangoproject.com/weblog/2013/aug/13/security-releases-issued - https://exchange.xforce.ibmcloud.com/vulnerabilities/86437 - https://github.com/django/django/commit/ae3535169af804352517b7fea94a42a1c9c4b762 - https://github.com/django/django/commit/1a274ccd6bc1afbdac80344c9b6e
o/commit/ae3535169af804352517b7fea94a42a1c9c4b762 - https://github.com/django/django/commit/1a274ccd6bc1afbdac80344c9b6e5810c1162b5f - http://seclists.org/oss-sec/2013/q3/411 - http://www.debian.org/security/2013/dsa-2740
CVE ID: CVE-2013-6045 State: PUBLISHED Published: 2013-12-12T18:00:00 Last Updated: 2024-08-06T17:29:42.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64109 - http://rhn.redhat.com/errata/RHSA-2013-1850.html - http://osvdb.org/100638 - http://osvdb.org/100637 - http://osvdb.org/100636 - http://osvdb.org/100646 - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://osvdb.org/100641 - http://seclists.org/oss-sec/2013/q4/412
/openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://osvdb.org/100641 - http://seclists.org/oss-sec/2013/q4/412 - http://www.debian.org/security/2013/dsa-2808
CVE ID: CVE-2013-6047 State: PUBLISHED Published: 2014-02-25T15:00:00 Last Updated: 2024-08-06T17:29:42.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q4/180 - http://packages.qa.debian.org/i/ikiwiki-hosting/news/20131025T224825Z.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/88334 - http://osvdb.org/99012
CVE ID: CVE-2013-6048 State: PUBLISHED Published: 2013-12-13T17:00:00 Last Updated: 2024-08-06T17:29:42.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) via crafted multigraph data. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2815 - http://www.ubuntu.com/usn/USN-2090-1 - https://github.com/munin-monitoring/munin/blob/2.0.18/ChangeLog - https://github.com/munin-monitoring/munin/commit/284d7402718d98fcf10cee565415939882abab
ng/munin/blob/2.0.18/ChangeLog - https://github.com/munin-monitoring/munin/commit/284d7402718d98fcf10cee565415939882abab99
CVE ID: CVE-2013-6049 State: PUBLISHED Published: 2017-10-20T18:00:00 Last Updated: 2024-08-06T17:29:42.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/08/5 - https://security-tracker.debian.org/tracker/CVE-2013-6049/
CVE ID: CVE-2013-6050 State: PUBLISHED Published: 2013-12-07T20:00:00 Last Updated: 2024-08-06T17:29:42.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2807 - http://links.twibright.com/download/ChangeLog
CVE ID: CVE-2013-6051 State: PUBLISHED Published: 2013-12-14T17:00:00 Last Updated: 2024-08-06T17:29:42.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd crash) via a crafted BGP update. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2803 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730513 - http://git.savannah.gnu.org/gitweb/?p=quagga.git%3Ba=commitdiff%3Bh=8794e8d229dc9fe29ea31424883433d4880ef408
CVE ID: CVE-2013-6052 State: PUBLISHED Published: 2013-12-12T18:00:00 Last Updated: 2024-08-06T17:29:43.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1850.html - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://seclists.org/oss-sec/2013/q4/412 - http://www.debian.org/security/2013/dsa-2808
CVE ID: CVE-2013-6053 State: PUBLISHED Published: 2014-04-27T22:00:00 Last Updated: 2024-08-06T17:29:42.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64121 - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - https://code.google.com/p/openjpeg/issues/detail?id=297 - http://seclists.org/oss-sec/2013/q4/412 - https://bugzilla.redhat.com/show_bug.cgi?id=1036493
CVE ID: CVE-2013-6054 State: PUBLISHED Published: 2013-12-12T18:00:00 Last Updated: 2024-08-06T17:29:42.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1850.html - http://osvdb.org/100639 - http://openjpeg.googlecode.com/svn/tags/version.1.5.2/NEWS - http://www.securityfocus.com/bid/64113 - http://seclists.org/oss-sec/2013/q4/412 - http://www.debian.org/security/2013/dsa-2808
CVE ID: CVE-2013-6055 State: REJECTED Published: 2017-11-08T18:00:00 Last Updated: 2017-11-08T17:57:02 Description: No description available.