Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-0699 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-16T17:07:56.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Galil RIO-47100 Pocket PLC allows remote attackers to cause a denial of service via a session that includes "repeated requests." Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-116-01 - http://www.galilmc.com/support/downloads/firmware_rev/firm47xxx.html
CVE ID: CVE-2013-0700 State: PUBLISHED Published: 2013-04-22T01:00:00 Last Updated: 2024-08-06T14:33:05.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port). Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-724606.pdf
CVE ID: CVE-2013-0701 State: PUBLISHED Published: 2013-02-14T11:00:00Z Last Updated: 2024-09-17T03:43:17.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary SQL commands by leveraging a logging privilege. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20130125up02.php - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000007 - http://jvn.jp/en/jp/JVN07629635/index.html
CVE ID: CVE-2013-0702 State: PUBLISHED Published: 2013-02-14T11:00:00Z Last Updated: 2024-09-17T00:06:20.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 3.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20130125up01.php - http://jvn.jp/en/jp/JVN95863326/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000008
CVE ID: CVE-2013-0703 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-17T01:11:03.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in imgboard.com imgboard before 1.22R6.1 u and 20xx before 2010u allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN09223079/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000009 - http://www.big.or.jp/~talk/t-club/soft/mini_r6/index.cgi
CVE ID: CVE-2013-0704 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-17T04:14:29.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN78601526/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000010
CVE ID: CVE-2013-0705 State: PUBLISHED Published: 2013-02-15T11:00:00Z Last Updated: 2024-09-16T23:50:36.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in LSI 3ware Disk Manager (3DM) before 2 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000011 - http://jvn.jp/en/jp/JVN02596643/index.html - http://jvn.jp/en/jp/JVN02596643/995349/index.html
CVE ID: CVE-2013-0706 State: PUBLISHED Published: 2013-02-22T00:00:00Z Last Updated: 2024-09-16T17:22:53.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012 - http://jvn.jp/en/jp/JVN75585394/index.html - http://jpn.nec.com/security-info/secinfo/nv13-004.html
CVE ID: CVE-2013-0707 State: PUBLISHED Published: 2013-03-01T02:00:00Z Last Updated: 2024-09-16T19:35:50.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Ichitaro 2006 and 2007, Ichitaro Government 2006 and 2007, Ichitaro Portable with oreplug, Hanako 2006 through 2013, Hanako Police, Hanako Police 3, and Hanako Police 2010 allows remote attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000015 - http://jvn.jp/en/jp/JVN16817324/index.html - http://www.justsystems.com/jp/info/js13001.html
CVE ID: CVE-2013-0708 State: PUBLISHED Published: 2013-03-01T02:00:00Z Last Updated: 2024-09-16T18:23:46.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dopvCOMET* 0009b allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN64756004/index.html - http://tech.bayashi.net/dc/ - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000013
CVE ID: CVE-2013-0709 State: PUBLISHED Published: 2013-03-01T02:00:00Z Last Updated: 2024-09-16T22:36:49.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dopvSTAR* 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN36339873/index.html - http://tech.bayashi.net/ds/ - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000014
CVE ID: CVE-2013-0710 State: PUBLISHED Published: 2013-03-02T18:00:00Z Last Updated: 2024-09-16T20:12:13.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55924624/index.html - http://www.kingsoft.jp/support/office/support_news/writer2010_2723 - http://jvn.jp/en/jp/JVN55924624/22479/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000016
CVE ID: CVE-2013-0711 State: PUBLISHED Published: 2013-03-20T18:00:00 Last Updated: 2024-08-06T14:33:05.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01 - http://jvn.jp/en/jp/JVN45545972/995359/index.html - http://jvn.jp/en/jp/JVN45545972/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000018
CVE ID: CVE-2013-0712 State: PUBLISHED Published: 2013-03-20T18:00:00Z Last Updated: 2024-09-16T17:27:59.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN01611135/index.html - http://jvn.jp/en/jp/JVN01611135/995359/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000019
CVE ID: CVE-2013-0713 State: PUBLISHED Published: 2013-03-20T18:00:00 Last Updated: 2024-08-06T14:33:05.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted pty request. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01 - http://jvn.jp/en/jp/JVN52492830/index.html - http://jvn.jp/en/jp/JVN52492830/995359/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000020
CVE ID: CVE-2013-0714 State: PUBLISHED Published: 2013-03-20T18:00:00 Last Updated: 2024-08-06T14:33:05.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted public-key authentication request. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN20671901/index.html - http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000021 - http://jvn.jp/en/jp/JVN20671901/995359/index.html
CVE ID: CVE-2013-0715 State: PUBLISHED Published: 2013-03-20T18:00:00 Last Updated: 2024-08-06T14:33:05.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01 - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000022 - http://jvn.jp/en/jp/JVN65923092/index.html - http://jvn.jp/en/jp/JVN65923092/995359/index.html
CVE ID: CVE-2013-0716 State: PUBLISHED Published: 2013-03-20T18:00:00 Last Updated: 2024-08-06T14:33:05.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01 - http://jvn.jp/en/jp/JVN41022517/995359/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000023 - http://jvn.jp/en/jp/JVN41022517/index.html
CVE ID: CVE-2013-0717 State: PUBLISHED Published: 2013-03-19T18:00:00Z Last Updated: 2024-09-17T02:51:50.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN59503133/6443/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024 - http://jpn.nec.com/security-in
/jvn.jp/en/jp/JVN59503133/6443/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024 - http://jpn.nec.com/security-info/secinfo/nv13-005.html - http://jvn.jp/en/jp/JVN59503133/index.html
CVE ID: CVE-2013-0718 State: PUBLISHED Published: 2013-03-27T19:00:00Z Last Updated: 2024-09-16T23:11:28.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simeji application 4.8.1 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000029 - http://jvn.jp/en/jp/JVN77360971/index.html
CVE ID: CVE-2013-0719 State: PUBLISHED Published: 2013-03-27T19:00:00Z Last Updated: 2024-09-16T23:11:58.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ArtIME Japanese Input application 1.1.2 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN80922020/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000026
CVE ID: CVE-2013-0720 State: PUBLISHED Published: 2013-03-27T19:00:00Z Last Updated: 2024-09-17T03:13:49.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The COBIME application before 0.9.4 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN11249169/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000027
CVE ID: CVE-2013-0721 State: PUBLISHED Published: 2013-01-02T11:00:00 Last Updated: 2024-08-06T14:33:05.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/80906 - http://osvdb.org/ref/88/wp-php-widget.txt - http://www.osvdb.org/88846
CVE ID: CVE-2013-0722 State: PUBLISHED Published: 2013-01-11T22:00:00 Last Updated: 2024-08-06T14:33:05.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securation.com/files/2013/01/ec.patch - http://www.exploit-db.com/exploits/23945/ - http://secunia.com/advisories/51731 - http://www.securityfocus.com/bid/57175 - https://bugs.gentoo.org/show_bug.cgi?id=451198 - https://bugzilla.redhat.com/show_bug.cgi?i
ecurityfocus.com/bid/57175 - https://bugs.gentoo.org/show_bug.cgi?id=451198 - https://bugzilla.redhat.com/show_bug.cgi?id=894092
CVE ID: CVE-2013-0723 State: PUBLISHED Published: 2013-07-29T21:00:00Z Last Updated: 2024-09-17T00:52:25.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a crafted spreadsheet file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51418/ - http://www.securitytracker.com/id/1028713
CVE ID: CVE-2013-0724 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T14:33:05.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81931 - http://wordpress.org/plugins/wp-ecommerce-shop-styling/changelog/ - http://secunia.com/advisories/51707 - http://osvdb.org/89921
CVE ID: CVE-2013-0725 State: PUBLISHED Published: 2020-01-30T13:03:59 Last Updated: 2024-08-06T14:33:05.858Z Vendors: ERDAS Products: ER Viewer Problem Types: untrusted search path Description: ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/63862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89185
CVE ID: CVE-2013-0726 State: PUBLISHED Published: 2013-05-05T10:00:00Z Last Updated: 2024-09-16T20:31:59.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51725
CVE ID: CVE-2013-0727 State: PUBLISHED Published: 2013-04-26T10:00:00Z Last Updated: 2024-09-17T04:04:11.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .gmc, .gmg, .gmp, .gms, .gmw, or .opt file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51510
CVE ID: CVE-2013-0728 State: PUBLISHED Published: 2013-04-25T01:00:00Z Last Updated: 2024-09-16T19:15:08.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51647
CVE ID: CVE-2013-0729 State: PUBLISHED Published: 2014-04-02T15:00:00 Last Updated: 2024-08-06T14:33:05.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/57491 - http://secunia.com/advisories/51855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/81427 - http://osvdb.org/89442 - http://www.tracker-software.com/company/news_press_events/view/123
CVE ID: CVE-2013-0730 State: PUBLISHED Published: 2013-02-22T00:00:00Z Last Updated: 2024-09-17T02:47:25.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) language parameter to application/modules/admin/controllers/LanguagesController.php or (2) user parameter to application/modules/admin/controllers/UserController.php. Additional Analyst Notes: - CVE Program Container: References: - http://forum.sourcefabric.org/discussion/15052/security-patch-released-for-newscoop-4-1 - http://secunia.com/advisories/51921
//forum.sourcefabric.org/discussion/15052/security-patch-released-for-newscoop-4-1 - http://secunia.com/advisories/51921 - https://github.com/sourcefabric/Newscoop/commit/4f948ba3afaaeb616006cbabc85906ef3254169d
CVE ID: CVE-2013-0731 State: PUBLISHED Published: 2013-03-22T15:00:00 Last Updated: 2024-08-06T14:33:05.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks by setting the wordpress_logged_in cookie. NOTE: this is due to an incomplete fix for a similar issue that was fixed in 1.3.2. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset?new=682420 - http://www.securityfocus.com/bid/58467 - http://
References: - http://plugins.trac.wordpress.org/changeset?new=682420 - http://www.securityfocus.com/bid/58467 - http://secunia.com/advisories/51917 - http://wordpress.org/extend/plugins/wp-mailup/changelog/ - http://osvdb.org/91274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82847
CVE ID: CVE-2013-0732 State: PUBLISHED Published: 2014-03-27T16:00:00 Last Updated: 2024-08-06T14:33:05.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51943 - http://www.securityfocus.com/bid/60315 - http://osvdb.org/93870
CVE ID: CVE-2013-0733 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T14:33:05.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/98163 - http://secunia.com/advisories/53618 - http://www.securityfocus.com/bid/62836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87763
CVE ID: CVE-2013-0734 State: PUBLISHED Published: 2014-03-28T15:00:00 Last Updated: 2024-08-06T14:33:05.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) search_words parameter in a search action to wpf.class.php or (2) togroupusers parameter in an add_user_togroup action to fs-admin/fs-admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2013-3 - http://secunia.com/advisories/52167 - http://osvdb.org/90433 - https://exchange.xforce.ibmcloud.
cunia_research/2013-3 - http://secunia.com/advisories/52167 - http://osvdb.org/90433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82187 - http://osvdb.org/90432 - http://www.securityfocus.com/bid/58059
CVE ID: CVE-2013-0735 State: PUBLISHED Published: 2014-04-02T18:00:00 Last Updated: 2024-08-06T14:33:05.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewtopic (1) remove_post, (2) sticky, or (3) closed action or (4) thread parameter in a postreply action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52167 - http://osvdb.org/90434 - http://secunia.com/secunia_research/2013-4 - https://exchange.xforce.ibmcloud.com/vulnerab
67 - http://osvdb.org/90434 - http://secunia.com/secunia_research/2013-4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82188 - http://www.securityfocus.com/bid/58059
CVE ID: CVE-2013-0736 State: PUBLISHED Published: 2013-10-09T22:00:00Z Last Updated: 2024-09-16T20:16:36.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62133 - http://osvdb.org/96905 - http://secunia.com/secunia_research/2013-6 - http://secunia.com/advisories/47687
CVE ID: CVE-2013-0737 State: PUBLISHED Published: 2020-01-02T20:13:58 Last Updated: 2024-08-06T14:33:05.492Z Vendors: BoltWire Products: BoltWire Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84698