Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3558 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://secunia.com/advisories/54425 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml
2013-06/msg00048.html - http://secunia.com/advisories/54425 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8638 - http://www.debian.org/security/2013/dsa-2700 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16417 - http://www.wireshark.org/security/wnpa-sec-2013-26.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=49214 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ppp.c?r1=49214&r2=49213&pathrev=49214 - http://lists.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ppp.c?r1=49214&r2=49213&pathrev=49214 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-3559 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48644 - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg
w=revision&revision=48644 - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8540 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16228 - http://rhn.redhat.com/errata/RHSA-2014-0341.html - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=48644&r2=48643&pathrev=48644 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8231 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.wireshark.org/sec
lsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.wireshark.org/security/wnpa-sec-2013-27.html - http://www.debian.org/security/2013/dsa-2700 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8541 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-3560 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?
-updates/2013-06/msg00048.html - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8481 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48332 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mpeg-dsmcc.c?r1=48332&r2=48331&pathrev=48332 - http://www.debian.org/security/2013/dsa-2700 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16751 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://www.wireshark.org/security/wnpa-sec-2013-28.html
tp://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://www.wireshark.org/security/wnpa-sec-2013-28.html - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-3561 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16755 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=4
/oval%3Aorg.mitre.oval%3Adef%3A16755 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-websocket.c?r1=48336&r2=48335&pathrev=48336 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48919 - http://secunia.com/advisories/53425 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00048.html - http://secunia.com/advisories/54425 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8448 - http://www.wireshark.org/security/wnpa-sec-2013-31.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48336 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8464 - http://www.wireshark.org/security/wnpa-sec-2013-29.html - http://www.gentoo.org/security/en/glsa/
show_bug.cgi?id=8464 - http://www.wireshark.org/security/wnpa-sec-2013-29.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.wireshark.org/security/wnpa-sec-2013-30.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-etch.c?r1=48919&r2=48918&pathrev=48919 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8458 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mysql.c?r1=48894&r2=48893&pathrev=48894 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00083.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894 - http://lists.opensuse.org/op
/2013-06/msg00083.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48894 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-3562 State: PUBLISHED Published: 2013-05-25T01:00:00 Last Updated: 2024-08-06T16:14:56.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53425 - http://anonsvn.wireshark.org/viewvc/trunk-1.8/epan/dissectors/packet-websocket.c?r1=48419&r2=48418&pathrev=48419 - http://secunia.com/advisories/54425 - http://www.wireshar
issectors/packet-websocket.c?r1=48419&r2=48418&pathrev=48419 - http://secunia.com/advisories/54425 - http://www.wireshark.org/security/wnpa-sec-2013-29.html - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8499 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16696 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00196.html - http://www.debian.org/security/2013/dsa-2700 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=48419 - http://lists.opensuse.org/opensuse-updates/2013-06/msg00194.html
CVE ID: CVE-2013-3563 State: PUBLISHED Published: 2013-07-04T10:00:00Z Last Updated: 2024-09-16T22:36:16.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted string to TCP port 8001. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/25851/
CVE ID: CVE-2013-3564 State: PUBLISHED Published: 2020-02-06T21:49:22 Last Updated: 2024-08-06T16:14:56.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating. Additional Analyst Notes: - CVE Program Container: References: - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-007.txt
CVE ID: CVE-2013-3565 State: PUBLISHED Published: 2020-01-31T21:39:19 Last Updated: 2024-08-06T16:14:56.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) command parameter to requests/vlm_cmd.xml, (2) dir parameter to requests/browse.xml, or (3) URI in a request, which is returned in an error message through share/lua/intf/http.lua. Additional Analyst Notes: - CVE Program Container: References: - http://www.videolan.org/developers/vlc-branch/NEWS - https://www3.trustwave.com/spiderlabs/advis
ontainer: References: - http://www.videolan.org/developers/vlc-branch/NEWS - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-007.txt - http://git.videolan.org/gitweb.cgi/vlc.git/?p=vlc.git%3Ba=commitdiff%3Bh=bf02b8dd211d5a52aa301a9a2ff4e73ed8195881 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00001.html
CVE ID: CVE-2013-3567 State: PUBLISHED Published: 2013-08-19T23:00:00 Last Updated: 2024-08-06T16:14:56.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54429 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00019.html - http://www.debian.org/security/2013
.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00019.html - http://www.debian.org/security/2013/dsa-2715 - http://www.ubuntu.com/usn/USN-1886-1 - https://puppetlabs.com/security/cve/cve-2013-3567/ - http://rhn.redhat.com/errata/RHSA-2013-1284.html - http://rhn.redhat.com/errata/RHSA-2013-1283.html
CVE ID: CVE-2013-3568 State: PUBLISHED Published: 2020-02-06T21:54:52 Last Updated: 2024-08-06T16:14:56.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61151 - http://www.exploit-db.com/exploits/28484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85642
CVE ID: CVE-2013-3571 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T16:14:56.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.dest-unreach.org/socat/contrib/socat-secadv4.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:169 - http://w
nreach.org/socat/contrib/socat-secadv4.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:169 - http://www.openwall.com/lists/oss-security/2013/05/26/1
CVE ID: CVE-2013-3572 State: PUBLISHED Published: 2013-12-31T20:00:00 Last Updated: 2024-08-06T16:14:56.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname. Additional Analyst Notes: - CVE Program Container: References: - https://community.ubnt.com/t5/UniFi/Security-Advisory-CVE-2013-3572/m-p/601047#U601047 - http://dl.ubnt.com/unifi/static/cve-2013-3572.html - http://www.securityfocus.com/bid/64601 - http://spaceblogs.org/shackspace/2013/10/shackspace-
tatic/cve-2013-3572.html - http://www.securityfocus.com/bid/64601 - http://spaceblogs.org/shackspace/2013/10/shackspace-hacker-finds-flaw-in-ubiquiti-networks-unifi-products/
CVE ID: CVE-2013-3573 State: PUBLISHED Published: 2013-06-14T10:00:00Z Last Updated: 2024-09-17T01:55:34.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/324668
CVE ID: CVE-2013-3574 State: PUBLISHED Published: 2013-06-14T10:00:00Z Last Updated: 2024-09-17T02:32:20.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/324668
CVE ID: CVE-2013-3575 State: PUBLISHED Published: 2013-06-14T10:00:00Z Last Updated: 2024-09-16T20:28:08.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/324668
CVE ID: CVE-2013-3576 State: PUBLISHED Published: 2013-06-14T18:00:00 Last Updated: 2024-08-06T16:14:56.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=137952496405683&w=2 - http://www.kb.cert.org/vuls/id/735364
CVE ID: CVE-2013-3577 State: PUBLISHED Published: 2013-07-15T20:00:00Z Last Updated: 2024-09-16T18:33:28.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field). Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/217836
CVE ID: CVE-2013-3578 State: PUBLISHED Published: 2013-07-15T20:00:00Z Last Updated: 2024-09-17T01:16:36.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/217836
CVE ID: CVE-2013-3579 State: PUBLISHED Published: 2013-07-10T21:00:00Z Last Updated: 2024-09-17T03:33:11.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.lookout.security.ScanTell with zero arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/704828
CVE ID: CVE-2013-3580 State: PUBLISHED Published: 2013-07-28T14:00:00Z Last Updated: 2024-09-16T23:21:59.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TrustGo Antivirus & Mobile Security application before 1.3.6 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.trustgo.mobile.security.USSDScannerActivity with zero arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/709806 - https://play.google.com/store/apps/details?id=com.trustgo.mobile.security
CVE ID: CVE-2013-3581 State: PUBLISHED Published: 2013-06-29T20:00:00Z Last Updated: 2024-09-16T23:16:57.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax (1) wmxState or (2) netState request. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/932044
CVE ID: CVE-2013-3582 State: PUBLISHED Published: 2013-08-28T10:00:00Z Last Updated: 2024-09-17T03:43:31.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/912156 - https://www.blackhat.com/us-13/archives.html#Butterworth - https://m
ferences: - http://www.kb.cert.org/vuls/id/912156 - https://www.blackhat.com/us-13/archives.html#Butterworth - https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf - https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf - http://www.kb.cert.org/vuls/id/BLUU-99HSLA
CVE ID: CVE-2013-3583 State: PUBLISHED Published: 2013-08-28T01:00:00Z Last Updated: 2024-09-16T18:08:17.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/595142
CVE ID: CVE-2013-3584 State: PUBLISHED Published: 2013-08-28T01:00:00Z Last Updated: 2024-09-17T04:08:50.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Corporater EPM Suite allows remote attackers to inject arbitrary web script or HTML via the customerId parameter to an unspecified component. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/595142
CVE ID: CVE-2013-3585 State: PUBLISHED Published: 2013-08-28T01:00:00Z Last Updated: 2024-09-16T23:42:16.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) direct access to a file or (2) the user-setup web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/882286
CVE ID: CVE-2013-3586 State: PUBLISHED Published: 2013-08-28T01:00:00Z Last Updated: 2024-09-17T04:25:45.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/882286
CVE ID: CVE-2013-3587 State: PUBLISHED Published: 2020-02-21T17:11:47 Last Updated: 2024-08-06T16:14:56.365Z Vendors: n/a Products: HTTPS protocol Problem Types: Other Description: The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack, a different issue than CVE-2012-4929. Additional Analyst Notes: - CVE Program Container: R
body, aka a "BREACH" attack, a different issue than CVE-2012-4929. Additional Analyst Notes: - CVE Program Container: References: - http://breachattack.com/ - http://security.stackexchange.com/questions/20406/is-http-compression-safe#20407 - http://slashdot.org/story/13/08/05/233216 - http://www.iacr.org/cryptodb/archive/2002/FSE/3091/3091.pdf - https://www.blackhat.com/us-13/briefings.html#Prado - http://github.com/meldium/breach-mitigation-rails - https://www.djangoproject.com/weblog/2013/aug/06/breach-and-django/ - http://www.kb.cert.org/vuls/id/987798 - https://hackerone.com/reports/254895 - https://bugzilla.redhat.com/show_bug.cgi?id=995168 - https://support.f5.com/csp/article/K14634 -
ne.com/reports/254895 - https://bugzilla.redhat.com/show_bug.cgi?id=995168 - https://support.f5.com/csp/article/K14634 - https://lists.apache.org/thread.html/r7f0e9cfd166934172d43ca4c272b8bdda4a343036229d9937affd1e1%40%3Cdev.httpd.apache.org%3E
CVE ID: CVE-2013-3588 State: PUBLISHED Published: 2014-04-02T01:00:00 Last Updated: 2024-08-06T16:14:56.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/893726
CVE ID: CVE-2013-3589 State: PUBLISHED Published: 2013-09-24T10:00:00Z Last Updated: 2024-09-16T18:23:58.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/BLUU-997QVW - http://www.kb.cert.org/vuls/id/920038