Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6744 State: PUBLISHED Published: 2014-05-30T23:00:00 Last Updated: 2024-08-06T17:46:23.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC99481 - http://www.ibm.com/support/docview.wss?uid=swg21610582#4 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC98849 - http://www-01.ibm.com/support/docview
ss?uid=swg21610582#4 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC98849 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC99478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89860 - http://www.ibm.com/support/docview.wss?uid=swg1IC99480 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC99480 - http://www.ibm.com/support/docview.wss?uid=swg21673947
CVE ID: CVE-2013-6745 State: PUBLISHED Published: 2013-12-22T15:00:00 Last Updated: 2024-08-06T17:46:22.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64475 - http://www-01.ibm.com/support/docview.wss?uid=swg21660569 - https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_security_acce
/docview.wss?uid=swg21660569 - https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_ibm_security_access_manager_for_enterprise_single_sign_on_cross_site_scripting_vulnerability_cve_2013_6745?lang=en_us - https://exchange.xforce.ibmcloud.com/vulnerabilities/89861
CVE ID: CVE-2013-6746 State: PUBLISHED Published: 2014-01-22T02:00:00 Last Updated: 2024-08-06T17:46:23.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89862 - http://secunia.com/advi
//www.securityfocus.com/bid/65045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89862 - http://secunia.com/advisories/56500 - http://www.ibm.com/support/docview.wss?uid=swg21662360
CVE ID: CVE-2013-6747 State: PUBLISHED Published: 2014-01-27T16:00:00 Last Updated: 2024-08-06T17:46:23.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89863 - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://secunia.com/advisories/56698 - http://osvdb.org/102556 - http://secunia.com/ad
port/docview.wss?uid=swg21676092 - http://secunia.com/advisories/56698 - http://osvdb.org/102556 - http://secunia.com/advisories/56699 - http://www-01.ibm.com/support/docview.wss?uid=swg21662902 - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://www-01.ibm.com/support/docview.wss?uid=swg21669554 - http://www.securitytracker.com/id/1029687
CVE ID: CVE-2013-6748 State: PUBLISHED Published: 2014-01-29T02:00:00 Last Updated: 2024-08-06T17:46:22.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6749. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102597 - http://www.ibm.com/support/docview.wss?uid=swg21662653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89864 - http://secunia.com/advisories/56696 - http://www.securityfocus.com/bid/65191
CVE ID: CVE-2013-6749 State: PUBLISHED Published: 2014-01-29T02:00:00 Last Updated: 2024-08-06T17:46:23.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6748. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65193 - http://www.ibm.com/support/docview.wss?uid=swg21662653 - http://osvdb.org/102598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89865 - http://secunia.com/advisories/56696
CVE ID: CVE-2013-6751 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6752 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6753 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6754 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6755 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6756 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6757 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6758 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6759 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6760 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6761 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6762 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6763 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T17:46:23.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted mmap operations, a different vulnerability than CVE-2013-4511. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2065-1 - http://www.ubuntu.com/usn/USN-2073-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=73
ttp://www.ubuntu.com/usn/USN-2073-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2 - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2069-1 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.ubuntu.com/usn/USN-2066-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://www.openwall.com/lists/oss-security/2013/11/04/22 - http://www.ubuntu.com/usn/USN-2074-1 - https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1 - http://www.ubuntu.com/usn/USN-2068-1 - http://www.ubuntu.com/usn/USN-2072-1 - http://www.ubuntu.com/
74ed7973b903315d1 - http://www.ubuntu.com/usn/USN-2068-1 - http://www.ubuntu.com/usn/USN-2072-1 - http://www.ubuntu.com/usn/USN-2075-1 - http://www.ubuntu.com/usn/USN-2067-1 - http://www.ubuntu.com/usn/USN-2064-1
CVE ID: CVE-2013-6764 State: REJECTED Published: 2014-05-19T14:00:00 Last Updated: 2014-05-19T13:57:00 Description: No description available.
CVE ID: CVE-2013-6765 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:46:23.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wald.intevation.org/pipermail/openvas-announce/2013-November/000157.html - http://www.openwall.com/lists/oss-security/2013/11/10/2
tion.org/pipermail/openvas-announce/2013-November/000157.html - http://www.openwall.com/lists/oss-security/2013/11/10/2 - http://www.openvas.org/OVSA20131108.html
CVE ID: CVE-2013-6766 State: PUBLISHED Published: 2014-05-19T14:00:00 Last Updated: 2024-08-06T17:46:23.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wald.intevation.org/pipermail/openvas-announce/2013-November/000157.html - http://www.openwall.com/lists/oss-security/2013/11/10/2 - http://www.openvas.org/OVSA20131108.html
CVE ID: CVE-2013-6767 State: PUBLISHED Published: 2013-12-20T22:00:00 Last Updated: 2024-08-06T17:46:22.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary code or cause a denial of service (process crash) via a long *.text value in a PE file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124477/QuickHeal-AntiVirus-7.0.0.1-Stack-Buffer-Overflow.html - http://www.exploit-db.com/exploits/30374 - http://osvdb.org/101130 - http://www.vulnerability-lab.com/get_content.php?id=1171 - http://seclists.org/bugtraq/2013
- http://osvdb.org/101130 - http://www.vulnerability-lab.com/get_content.php?id=1171 - http://seclists.org/bugtraq/2013/Dec/90 - http://www.securityfocus.com/bid/64402
CVE ID: CVE-2013-6768 State: PUBLISHED Published: 2014-03-30T10:00:00 Last Updated: 2024-08-06T17:46:23.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse app_process program via a crafted PATH environment variable for a /system/xbin/su process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/529796
CVE ID: CVE-2013-6769 State: PUBLISHED Published: 2014-03-30T10:00:00 Last Updated: 2024-08-06T17:46:23.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/529797
CVE ID: CVE-2013-6770 State: PUBLISHED Published: 2014-03-30T10:00:00 Last Updated: 2024-08-06T17:46:23.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon option, which allows attackers to gain privileges by leveraging ADB shell access and a certain Linux UID, and then creating a Trojan horse script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/529795
CVE ID: CVE-2013-6771 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T17:46:23.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAH76 - http://zerodayinitiative.com/advisories/ZDI-14-052/
CVE ID: CVE-2013-6772 State: PUBLISHED Published: 2020-01-23T14:34:54 Last Updated: 2024-08-06T17:46:23.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAH32
CVE ID: CVE-2013-6773 State: PUBLISHED Published: 2020-01-23T14:37:36 Last Updated: 2024-08-06T17:46:23.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate privileges Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAHXG
CVE ID: CVE-2013-6774 State: PUBLISHED Published: 2014-03-30T10:00:00 Last Updated: 2024-08-06T17:46:23.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an arbitrary .jar file and gain privileges via a crafted BOOTCLASSPATH environment variable for a /system/xbin/su process. NOTE: another researcher was unable to reproduce this with ChainsDD Superuser. Additional Analyst Notes: - CVE Progra
s. NOTE: another researcher was unable to reproduce this with ChainsDD Superuser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/529796 - http://www.securityfocus.com/archive/1/529822
CVE ID: CVE-2013-6775 State: PUBLISHED Published: 2014-03-30T10:00:00 Last Updated: 2024-08-06T17:46:23.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell metacharacters in the -c option to /system/xbin/su. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/529797
CVE ID: CVE-2013-6780 State: PUBLISHED Published: 2013-11-13T15:00:00 Last Updated: 2024-08-06T17:46:23.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130527/Cisco-Ironport-AsyncOS-Cross-Site-Scripting.html - http://www.securitytracker.com/id/1029528 - http://openwall.com/lists/oss-security/2013/11/25/1 - https://yuilibrary.com/support/20131111-vulnerability/
CVE ID: CVE-2013-6785 State: PUBLISHED Published: 2020-01-23T14:16:52 Last Updated: 2024-08-06T17:46:23.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2013/11/06/supermicro-ipmi-firmware-vulnerabilities/
CVE ID: CVE-2013-6786 State: PUBLISHED Published: 2014-01-16T19:00:00 Last Updated: 2024-08-06T17:46:23.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitrary web script or HTML by requesting a nonexistent URI in conjunction with a crafted HTTP Referer header that is not properly handled in a 404 page. NOTE: there is no CVE for a "URL redirection" issue that some sources list separately
ot properly handled in a 404 page. NOTE: there is no CVE for a "URL redirection" issue that some sources list separately. Additional Analyst Notes: - CVE Program Container: References: - http://antoniovazquezblanco.github.io/docs/advisories/Advisory_RomPagerXSS.pdf - http://osvdb.org/99694 - http://osvdb.org/ref/99/rompager407.pdf
CVE ID: CVE-2013-6787 State: PUBLISHED Published: 2013-12-05T18:00:00 Last Updated: 2024-08-06T17:46:23.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated users to execute arbitrary SQL commands via the "password0" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/30012 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0141.html - https://www.htbridge.com/advisory/HTB23182 - https://support.chamilo.o
eohapsis.com/archives/bugtraq/2013-11/0141.html - https://www.htbridge.com/advisory/HTB23182 - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-10-2013-11-06-Moderate-risk-SQL-Injection-in-specific-unrecommended-case
CVE ID: CVE-2013-6788 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T17:46:23.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and bypass authentication via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23183 - http://www.securityfocus.com/bid/63606 - http://www.bitrixsoft.com/products/cms/versions.php?module=sale - http://secunia.com/advisories/56033
CVE ID: CVE-2013-6789 State: PUBLISHED Published: 2013-11-13T00:00:00Z Last Updated: 2024-09-17T01:20:49.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: security/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which allows remote or local attackers to obtain sensitive information by reading web-server access logs, web-server Referer logs, or the browser history, a similar vulnerability to CVE-2013-2653. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chillu/silverstripe-framework/commit/3e88c98ca513880e2b43ed7f27ade17fef5d9170 - http://seclists.org/bugtraq/2013/Aug/12
CVE ID: CVE-2013-6791 State: PUBLISHED Published: 2013-11-29T15:00:00 Last Updated: 2024-08-06T17:46:23.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming (ROP) attack. Additional Analyst Notes: - CVE Program Container: References: - http://en.nsfocus.com/advisories/1301.html - http://blogs.technet.com/b/srd/archive/2013/06/17/emet-4-0-now-available-for-download.aspx - http://www.securitytracker.com/id/1029411
CVE ID: CVE-2013-6792 State: PUBLISHED Published: 2020-01-23T14:32:13 Last Updated: 2024-08-06T17:46:23.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64529
CVE ID: CVE-2013-6793 State: PUBLISHED Published: 2013-11-14T20:00:00Z Last Updated: 2024-09-17T00:40:32.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote attackers to inject arbitrary web script or HTML via the (1) event name or (2) date field. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/29279 - http://osvdb.org/99075 - http://packetstormsecurity.com/files/123825/Olat-CMS-7.8.0.1-Cross-Site-Scripting.html - http://seclists.org/bugtraq/2013/Oct/154 - http://www.vulnerability-lab.com/get_content.php?id=1125
CVE ID: CVE-2013-6794 State: PUBLISHED Published: 2013-11-14T20:00:00Z Last Updated: 2024-09-17T02:10:39.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allows remote attackers to inject arbitrary web script or HTML via the Location field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55423
CVE ID: CVE-2013-6795 State: PUBLISHED Published: 2013-12-24T18:00:00 Last Updated: 2024-08-06T17:46:23.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary. Additional Analyst Notes: - CVE Program Container: References: - http://blog.cloudpassage.com/2013/11/18/cve-2013-6795-vulnerability-rackspace-windows-agent-updater/ - http://packetstormsecurity.com/files/124153/Rackspace-Windows-Agent-Updater-
rability-rackspace-windows-agent-updater/ - http://packetstormsecurity.com/files/124153/Rackspace-Windows-Agent-Updater-Arbitrary-Code-Execution.html - http://archives.neohapsis.com/archives/bugtraq/2013-11/0122.html - http://osvdb.org/100191 - https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/commit/ef16f88f20254b8083e361f11707da25f8482401 - http://secunia.com/advisories/55775 - https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/releases/tag/1.2.6.0
CVE ID: CVE-2013-6796 State: PUBLISHED Published: 2014-10-26T20:00:00 Last Updated: 2024-08-06T17:46:23.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89077 - http://www.exploit-db.com/exploits/29706 - http://packetstormsecurity.com/files/124054 - http://www.securityfocus.com/bid/63793 - http://www.osvdb.org/100007