Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6202 State: PUBLISHED Published: 2014-02-24T02:00:00 Last Updated: 2024-08-06T17:29:43.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04117626 - http://www.securitytracker.com/id/1029803 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/publi
a-c04117626 - http://www.securitytracker.com/id/1029803 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04117626
CVE ID: CVE-2013-6203 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T17:29:43.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-1656. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04140965 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04140965
CVE ID: CVE-2013-6204 State: PUBLISHED Published: 2014-02-26T11:00:00 Last Updated: 2024-08-06T17:29:43.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-2004. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04140965 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04140965
CVE ID: CVE-2013-6205 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T17:29:42.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04135307 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04135307
CVE ID: CVE-2013-6206 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T17:29:42.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04135307 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04135307
CVE ID: CVE-2013-6207 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T17:29:43.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vectors, aka ZDI-CAN-2084. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435 - https://h20566.www2.hpe.com/hpsc/doc/public/d
www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435
CVE ID: CVE-2013-6208 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T17:29:42.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Smart Update Manager 5.3.5 before build 70 on Linux allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04000397 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04000397
CVE ID: CVE-2013-6209 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T17:29:43.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04174142 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04174142
CVE ID: CVE-2013-6210 State: PUBLISHED Published: 2014-03-16T10:00:00 Last Updated: 2024-08-06T17:29:43.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Unified Functional Testing before 12.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1932. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04122007 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04122007
CVE ID: CVE-2013-6211 State: PUBLISHED Published: 2014-03-29T01:00:00 Last Updated: 2024-08-06T17:29:43.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance (VSA) before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04126368 - https://h20564.www2.hp.com/portal
ps://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04126368 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04126368
CVE ID: CVE-2013-6212 State: PUBLISHED Published: 2014-04-19T21:00:00 Last Updated: 2024-08-06T17:29:43.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04201408 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04201408
CVE ID: CVE-2013-6213 State: PUBLISHED Published: 2014-04-19T01:00:00 Last Updated: 2024-08-06T17:29:42.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969437
CVE ID: CVE-2013-6214 State: PUBLISHED Published: 2014-04-19T01:00:00 Last Updated: 2024-08-06T17:29:42.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04220407 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04220407
CVE ID: CVE-2013-6215 State: PUBLISHED Published: 2014-04-19T21:00:00 Last Updated: 2024-08-06T17:29:43.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04219959 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04219959
CVE ID: CVE-2013-6216 State: PUBLISHED Published: 2014-04-12T01:00:00 Last Updated: 2024-08-06T17:29:43.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility 9.40 and earlier allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04187357 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04187357
CVE ID: CVE-2013-6217 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-6218 State: PUBLISHED Published: 2014-04-19T21:00:00 Last Updated: 2024-08-06T17:29:43.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04026039 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04026039
CVE ID: CVE-2013-6219 State: PUBLISHED Published: 2014-04-19T21:00:00 Last Updated: 2024-08-06T17:29:43.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04227671 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04227671
CVE ID: CVE-2013-6220 State: PUBLISHED Published: 2014-05-10T01:00:00 Last Updated: 2024-08-06T17:29:43.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04273695 - http://www.securitytracker.com/id/1030218 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04273695
CVE ID: CVE-2013-6221 State: PUBLISHED Published: 2014-06-18T16:00:00 Last Updated: 2024-08-06T17:29:43.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/107943 - http://www.securitytracker.com/id/1030385 - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_
/1030385 - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_traversal.rb - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04333125 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04333125 - http://www.exploit-db.com/exploits/33891 - http://packetstormsecurity.com/files/127247/HP-AutoPass-License-Server-File-Upload.html - http://zerodayinitiative.com/advisories/ZDI-14-195/
CVE ID: CVE-2013-6222 State: PUBLISHED Published: 2014-08-23T23:00:00 Last Updated: 2024-08-06T17:29:43.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95447 - http://www.securitytracker.com/id/1030756 - http://secunia.com/advisories/60028 - http://www.securityfocus.com/bid/69380 - http://secunia.com/advisories/
/1030756 - http://secunia.com/advisories/60028 - http://www.securityfocus.com/bid/69380 - http://secunia.com/advisories/60714 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127 - http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127
CVE ID: CVE-2013-6223 State: PUBLISHED Published: 2014-06-09T19:00:00 Last Updated: 2024-08-06T17:29:43.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://forums.livezilla.net/index.php?/topic/163-livezilla-changelog/ - http://blog.curesec.com/article/blog/27.html - http://osvdb.org/100400 - http://seclists.org/fulldisclosure/2013/Nov/210
CVE ID: CVE-2013-6224 State: PUBLISHED Published: 2013-12-10T16:00:00 Last Updated: 2024-08-06T17:29:43.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) unspecified vectors to the admins visitor information panel, or (3) a text message in a chat session, which is saved in the archive section. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100399 - http://www.livezilla.net/board/index.php?/topic/163-livezilla-changelog/ - https://cureblog.de/2013/12/c
db.org/100399 - http://www.livezilla.net/board/index.php?/topic/163-livezilla-changelog/ - https://cureblog.de/2013/12/cve-2013-6224-cross-site-scripting-in-livezilla - http://osvdb.org/100401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89315 - http://seclists.org/fulldisclosure/2013/Nov/208 - http://osvdb.org/100402 - http://packetstormsecurity.com/files/124222
CVE ID: CVE-2013-6225 State: PUBLISHED Published: 2020-01-13T13:22:38 Last Updated: 2024-08-06T17:29:42.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/29672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89051 - https://curesec.com/de/veroeffentlichungen/advisories.html
CVE ID: CVE-2013-6226 State: PUBLISHED Published: 2013-11-14T20:00:00 Last Updated: 2024-08-06T17:38:58.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redfsec.com/CVE-2013-6226 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0043.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/88667 - http://www.securityfocus.com/bid/63647 - http://pyd.io/pydio-core-5-0-4
CVE ID: CVE-2013-6227 State: PUBLISHED Published: 2014-12-27T18:00:00 Last Updated: 2024-08-06T17:38:58.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format parameter of a move operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46206/ - http://pyd.io/pydio-core-5-0-4/ - http://www.redfsec.com/CVE-2013-6227
CVE ID: CVE-2013-6229 State: PUBLISHED Published: 2014-02-12T15:00:00 Last Updated: 2024-08-06T17:38:58.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) filter parameter to index.php/mail/mail/listfoldermessages/searching/true/selectFolder/INBOX/resultContext/searchResultsTab5 or (2) mailId[] parameter to index.php/mail/mail/movetofolder/fromFolder/INBOX/toFolder/INBOX.Trash. NOTE: the view attachment message process vector is already covered by CVE-2013-2585. Additional Analyst Notes: - CVE Program Container: References:
sage process vector is already covered by CVE-2013-2585. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/530934/100/0/threaded - http://www.isecauditors.com/advisories-2013#2013-014
CVE ID: CVE-2013-6230 State: PUBLISHED Published: 2013-11-08T02:00:00 Last Updated: 2024-08-06T17:38:58.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST command for netmask 255.255.255.255, which allows remote attackers to bypass intended IP address restrictions by leveraging misinterpretation of this netmask as a 0.0.0.0 netmask. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-01063 - http
0.0 netmask. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-01063 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.518391 - https://kb.isc.org/article/AA-01062
CVE ID: CVE-2013-6231 State: PUBLISHED Published: 2020-01-10T13:11:27 Last Updated: 2024-08-06T17:38:58.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65925 - http://www.exploit-db.com/exploits/31990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91495
CVE ID: CVE-2013-6232 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T17:38:59.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via a document note in the execution page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91503 - http://www.securityfocus.com/bid/65911 - http://packetstormsecurity.com/files/125495 - http://www.exploit-db.com/exploits/32038 - http://www.securityfocus.com/archive/1/531321/100/0/threaded
CVE ID: CVE-2013-6233 State: PUBLISHED Published: 2014-03-07T20:00:00 Last Updated: 2024-08-06T17:38:58.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short document metadata." Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32039 - http://packetstormsecurity.com/files/125496 - http://www.securityfocus.com/archive/1/531322/100/0/threaded - http://www.securityfocus.com/bid/65915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91506
CVE ID: CVE-2013-6234 State: PUBLISHED Published: 2019-11-22T18:46:25 Last Updated: 2024-08-06T17:38:59.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload." Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/125497 - http://www.exploit-db.com/exploits/32040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91504
CVE ID: CVE-2013-6235 State: PUBLISHED Published: 2014-01-31T15:00:00 Last Updated: 2024-08-06T17:38:59.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102571 - http://osvdb.org/102572 - http://seclists.org/fulldisclosure/2014/Jan/164 - http://osvdb.org/102573
/osvdb.org/102571 - http://osvdb.org/102572 - http://seclists.org/fulldisclosure/2014/Jan/164 - http://osvdb.org/102573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90699 - http://www.securityfocus.com/archive/1/530877/100/0/threaded - http://packetstormsecurity.com/files/124933 - http://osvdb.org/102570
CVE ID: CVE-2013-6236 State: PUBLISHED Published: 2020-02-12T15:46:51 Last Updated: 2024-08-06T17:38:58.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: IZON IP 2.0.2: hard-coded password vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/88337 - https://packetstormsecurity.com/files/cve/CVE-2013-6236 - https://seclists.org/bugtraq/2013/Oct/149
CVE ID: CVE-2013-6237 State: PUBLISHED Published: 2013-12-10T15:00:00 Last Updated: 2024-08-06T17:38:58.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/89399 - http://seclists.org/fulldisclosure/2013/Dec/14 - http://www.securityfocus.