Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17298 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-0997 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:19.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00003.html - http://secunia.com/advisories/54886 - http://sup
p://lists.apple.com/archives/security-announce/2013/Sep/msg00003.html - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://support.apple.com/kb/HT5921 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17466 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-0998 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17300 - http://secunia.com/advisorie
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17300 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-0999 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:19.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announc
p://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16762 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-10001 State: PUBLISHED Published: 2022-05-17T07:30:14.000Z Last Updated: 2025-04-15T14:40:22.649Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: HTC Products: One, Sense Problem Types: CWE-295 Description: A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.modzero.ch/modlog/archives/2013/05/28/htcs_e-mail_client_fails_to_verify_server_certificates/ - https://vuldb.com/?id.8900
CVE ID: CVE-2013-10002 State: PUBLISHED Published: 2022-05-24T15:30:27.000Z Last Updated: 2025-04-15T14:39:10.181Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Telecommunication Software Products: SAMwin Contact Center Suite Problem Types: CWE-798 Description: A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.
edentials. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt - https://vuldb.com/?id.12788
CVE ID: CVE-2013-10003 State: PUBLISHED Published: 2022-05-24T15:30:29.000Z Last Updated: 2025-04-15T14:38:59.503Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Telecommunication Software Products: SAMwin Contact Center Suite Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgr
sclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt - https://vuldb.com/?id.12789
CVE ID: CVE-2013-10004 State: PUBLISHED Published: 2022-05-24T15:30:31.000Z Last Updated: 2025-04-15T14:38:50.861Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Telecommunication Software Products: SAMwin Contact Center Suite Problem Types: CWE-287 Description: A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to predictable authentication possibilities. Upgrading to version 6.2 is able to address this issue. It is recomme
leads to predictable authentication possibilities. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.modzero.ch/advisories/MZ-13-07_SAMwin_Collisions.txt - https://vuldb.com/?id.12790
CVE ID: CVE-2013-10005 State: PUBLISHED Published: 2022-12-27T21:13:13.660Z Last Updated: 2025-04-11T22:55:40.173Z Vendors: github.com/btcsuite/go-socks, github.com/btcsuitereleases/go-socks Products: github.com/btcsuite/go-socks, github.com/btcsuitereleases/go-socks Problem Types: CWE 400: Uncontrolled Resource Consumption Description: The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/btcsuite/go-socks/commit/233bccbb1abe02f05750f7ace66f5bffdb13defc - https://pkg.go.dev/
References: - https://github.com/btcsuite/go-socks/commit/233bccbb1abe02f05750f7ace66f5bffdb13defc - https://pkg.go.dev/vuln/GO-2020-0024
CVE ID: CVE-2013-10006 State: PUBLISHED Published: 2023-01-01T16:30:02.883Z Last Updated: 2025-04-10T17:32:01.693Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Ziftr Products: primecoin Problem Types: CWE-208 Description: A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.8.4rc2 is able to address this issue. The patch i
high. The exploitation appears to be difficult. Upgrading to version 0.8.4rc2 is able to address this issue. The patch is named cdb3441b5cd2c1bae49fae671dc4a496f7c96322. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217171. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217171 - https://vuldb.com/?ctiid.217171 - https://github.com/Ziftr/primecoin/commit/cdb3441b5cd2c1bae49fae671dc4a496f7c96322 - https://github.com/Ziftr/primecoin/releases/tag/v0.8.4rc2
CVE ID: CVE-2013-10007 State: PUBLISHED Published: 2023-01-03T10:56:25.721Z Last Updated: 2024-08-06T18:09:17.109Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ethitter Products: WP-Print-Friendly Problem Types: CWE-200 Description: A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unknown part of the file wp-print-friendly.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. Upgrading to version 0.5.3 is able to address this issue. The identifier of the patch is 437787292670c20b4abe20160ebbe8428187f2b4. It is recommended to upgrade the affe
is issue. The identifier of the patch is 437787292670c20b4abe20160ebbe8428187f2b4. It is recommended to upgrade the affected component. The identifier VDB-217269 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217269 - https://vuldb.com/?ctiid.217269 - https://github.com/ethitter/WP-Print-Friendly/pull/4 - https://github.com/ethitter/WP-Print-Friendly/commit/437787292670c20b4abe20160ebbe8428187f2b4
CVE ID: CVE-2013-10008 State: PUBLISHED Published: 2023-01-06T21:11:02.739Z Last Updated: 2025-05-28T13:35:15.235Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: sheilazpy Products: eShop Problem Types: CWE-89 Description: A vulnerability was found in sheilazpy eShop. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. The name of the patch is e096c5849c4dc09e1074104531014a62a5413884. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217572. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
17572. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217572 - https://vuldb.com/?ctiid.217572 - https://github.com/sheilazpy/eShop/commit/e096c5849c4dc09e1074104531014a62a5413884
CVE ID: CVE-2013-10009 State: PUBLISHED Published: 2023-01-07T19:44:44.713Z Last Updated: 2024-08-06T18:09:16.984Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: DrAzraelTod Products: pyChao Problem Types: CWE-89 Description: A vulnerability was found in DrAzraelTod pyChao and classified as critical. Affected by this issue is the function klauen/lesen of the file mod_fun/__init__.py. The manipulation leads to sql injection. The patch is identified as 9d8adbc07c384ba51c2583ce0819c9abb77dc648. It is recommended to apply a patch to fix this issue. VDB-217634 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Re
ssue. VDB-217634 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217634 - https://vuldb.com/?ctiid.217634 - https://github.com/DrAzraelTod/pyChao/pull/1 - https://github.com/DrAzraelTod/pyChao/commit/9d8adbc07c384ba51c2583ce0819c9abb77dc648
CVE ID: CVE-2013-10010 State: PUBLISHED Published: 2023-01-11T14:58:52.893Z Last Updated: 2024-08-06T18:09:16.992Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: zerochplus Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in zerochplus. This affects the function PrintResList of the file test/mordor/thread.res.pl. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 9ddf9ecca8565341d8d26a3b2f64540bde4fa273. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218007. Additional Analyst Notes: - CVE Program Co
ix this issue. The associated identifier of this vulnerability is VDB-218007. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218007 - https://vuldb.com/?ctiid.218007 - https://github.com/zerochplus/zerochplus/commit/9ddf9ecca8565341d8d26a3b2f64540bde4fa273
CVE ID: CVE-2013-10011 State: PUBLISHED Published: 2023-01-12T15:13:12.925Z Last Updated: 2024-08-06T18:09:17.070Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: aeharding Products: classroom-engagement-system Problem Types: CWE-89 Description: A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. The attack may be launched remotely. The name of the patch is 096de5815c7b414e7339f3439522a446098fb73a. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218156. Additional Analyst Notes: - CISA ADP Vuln
a patch to fix this issue. The identifier of this vulnerability is VDB-218156. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.218156 - https://vuldb.com/?ctiid.218156 - https://github.com/aeharding/classroom-engagement-system/commit/096de5815c7b414e7339f3439522a446098fb73a
CVE ID: CVE-2013-10012 State: PUBLISHED Published: 2023-01-16T10:58:04.013Z Last Updated: 2024-08-06T18:09:17.188Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: antonbolling Products: clan7ups Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in antonbolling clan7ups. Affected is an unknown function of the component Login/Session. The manipulation leads to sql injection. The name of the patch is 25afad571c488291033958d845830ba0a1710764. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218388. Additional Analyst Notes: - CVE Program Container: References: - https:
identifier of this vulnerability is VDB-218388. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218388 - https://vuldb.com/?ctiid.218388 - https://github.com/antonbolling/clan7ups/commit/25afad571c488291033958d845830ba0a1710764
CVE ID: CVE-2013-10013 State: PUBLISHED Published: 2023-01-17T14:58:02.915Z Last Updated: 2024-08-06T18:09:17.251Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Bricco Products: Authenticator Plugin Problem Types: CWE-89 Description: A vulnerability was found in Bricco Authenticator Plugin. It has been declared as critical. This vulnerability affects the function authenticate/compare of the file src/java/talentum/escenic/plugins/authenticator/authenticators/DBAuthenticator.java. The manipulation leads to sql injection. Upgrading to version 1.39 is able to address this issue. The name of the patch is a5456633ff75e8f13705974c7ed1ce77f3f142d5. It is recommend
n 1.39 is able to address this issue. The name of the patch is a5456633ff75e8f13705974c7ed1ce77f3f142d5. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218428. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218428 - https://vuldb.com/?ctiid.218428 - https://github.com/Bricco/authenticator-plugin/commit/a5456633ff75e8f13705974c7ed1ce77f3f142d5 - https://github.com/Bricco/authenticator-plugin/releases/tag/1.39
CVE ID: CVE-2013-10014 State: PUBLISHED Published: 2023-01-19T09:22:30.429Z Last Updated: 2024-11-25T16:32:10.961Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: oktora24 Products: 2moons Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulation leads to sql injection. The patch is identified as 1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7. It is recommended to apply a patch to fix this issue. VDB-218898 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
rability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218898 - https://vuldb.com/?ctiid.218898 - https://github.com/oktora24/2moons/commit/1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7
CVE ID: CVE-2013-10015 State: PUBLISHED Published: 2023-02-03T19:57:03.134Z Last Updated: 2024-08-06T18:09:17.050Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: fanzila Products: WebFinance Problem Types: CWE-89 Description: A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown code of the file htdocs/admin/save_Contract_Signer_Role.php. The manipulation of the argument n/v leads to sql injection. The patch is identified as abad81af614a9ceef3f29ab22ca6bae517619e06. It is recommended to apply a patch to fix this issue. VDB-220054 is the identifier assigned to this vulnerability. Additional An
commended to apply a patch to fix this issue. VDB-220054 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220054 - https://vuldb.com/?ctiid.220054 - https://github.com/fanzila/WebFinance/commit/abad81af614a9ceef3f29ab22ca6bae517619e06
CVE ID: CVE-2013-10016 State: PUBLISHED Published: 2023-02-03T19:57:04.086Z Last Updated: 2024-08-06T18:09:17.083Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: fanzila Products: WebFinance Problem Types: CWE-89 Description: A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdocs/admin/save_taxes.php. The manipulation of the argument id leads to sql injection. The patch is named 306f170ca2a8203ae3d8f51fb219ba9e05b945e1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-220055. Additional Analyst Notes: - CVE Progr
to fix this issue. The associated identifier of this vulnerability is VDB-220055. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220055 - https://vuldb.com/?ctiid.220055 - https://github.com/fanzila/WebFinance/commit/306f170ca2a8203ae3d8f51fb219ba9e05b945e1
CVE ID: CVE-2013-10017 State: PUBLISHED Published: 2023-02-03T23:57:03.539Z Last Updated: 2024-08-06T18:09:16.956Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: fanzila Products: WebFinance Problem Types: CWE-89 Description: A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function of the file htdocs/admin/save_roles.php. The manipulation of the argument id leads to sql injection. The name of the patch is 6cfeb2f6b35c1b3a7320add07cd0493e4f752af3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220056. Additional Analyst Notes: - CISA ADP Vulnric
atch to fix this issue. The identifier of this vulnerability is VDB-220056. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.220056 - https://vuldb.com/?ctiid.220056 - https://github.com/fanzila/WebFinance/commit/6cfeb2f6b35c1b3a7320add07cd0493e4f752af3
CVE ID: CVE-2013-10018 State: PUBLISHED Published: 2023-02-03T23:57:04.472Z Last Updated: 2025-03-25T20:20:41.008Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: fanzila Products: WebFinance Problem Types: CWE-89 Description: A vulnerability was found in fanzila WebFinance 0.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file htdocs/prospection/save_contact.php. The manipulation of the argument nom/prenom/email/tel/mobile/client/fonction/note leads to sql injection. The identifier of the patch is 165dfcaa0520ee0179b7c1282efb84f5a03df114. It is recommended to apply a patch to fix this issue. The identif
the patch is 165dfcaa0520ee0179b7c1282efb84f5a03df114. It is recommended to apply a patch to fix this issue. The identifier VDB-220057 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220057 - https://vuldb.com/?ctiid.220057 - https://github.com/fanzila/WebFinance/commit/165dfcaa0520ee0179b7c1282efb84f5a03df114
CVE ID: CVE-2013-10019 State: PUBLISHED Published: 2023-02-20T06:31:04.697Z Last Updated: 2025-03-12T19:27:45.597Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OCLC-Research Products: OAICat Problem Types: CWE-89 Description: A vulnerability was found in OCLC-Research OAICat 1.5.61. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The attack may be initiated remotely. Upgrading to version 1.5.62 is able to address this issue. The identifier of the patch is 6cc65501869fa663bcd24a70b63f41f5cfe6b3e1. It is recommended to upgrade the affected component. The identifier VDB-221489 was assigned to this vulnerability.
b3e1. It is recommended to upgrade the affected component. The identifier VDB-221489 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221489 - https://vuldb.com/?ctiid.221489 - https://code.google.com/archive/p/oaicat/issues/7 - https://github.com/OCLC-Research/oaicat/commit/6cc65501869fa663bcd24a70b63f41f5cfe6b3e1 - https://oaicat.googlecode.com/files/oaicat-1.5.62.tar.gz
CVE ID: CVE-2013-10020 State: PUBLISHED Published: 2023-03-10T01:00:04.313Z Last Updated: 2024-08-06T18:09:16.991Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: MMDeveloper Products: A Forms Plugin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2 on WordPress. This affects an unknown part of the file a-forms.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.3 is able to address this issue. The identifier of the patch is 3e693197bd69b7173cc16d8d2e0a7d501a2a0b06. It is recommended to upgrade the affected component.