Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.data/CVE-2013-2160.txt.asc - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://jira.codehaus.org/browse/WSTX-287 - http://jira.codehaus.org/browse/WSTX-285 - http://rhn.redhat.com/errata/RHSA-2013-1028.html - https://bugzilla.redhat.com/show_bug.cgi?id=929197 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd
CVE ID: CVE-2013-2161 State: PUBLISHED Published: 2013-08-20T22:00:00Z Last Updated: 2024-08-06T15:27:40.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2737 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00021.html - https://bugs.launchpad.net/swift/+bug/1183884 - http://rhn.redhat.com/errata/RHSA-2013-0993.html - http://www.openwall.com/lists/oss-security/2013/06/13/4
CVE ID: CVE-2013-2162 State: PUBLISHED Published: 2013-08-19T00:00:00 Last Updated: 2024-08-06T15:27:40.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as credentials. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54300 - http://www.debian.org/security/2013/dsa-2818 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=711600
dvisories/54300 - http://www.debian.org/security/2013/dsa-2818 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=711600 - http://seclists.org/oss-sec/2013/q2/528 - http://www.securityfocus.com/bid/60424 - http://ubuntu.com/usn/usn-1909-1
CVE ID: CVE-2013-2163 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T15:27:40.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monkey HTTP Daemon (monkeyd) before 1.2.2 allows remote attackers to cause a denial of service (infinite loop) via an offset equal to the file size in the Range HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monkey/monkey/issues/90 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85125 - http://www.securityfocus.com/bid/60425 - http://www.openwall.com/lists/oss-security/2013/06/10/8
CVE ID: CVE-2013-2164 State: PUBLISHED Published: 2013-07-04T21:00:00 Last Updated: 2024-08-06T15:27:41.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1166.html - http://www.ubuntu.com/usn/USN-1913-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://www.debian.org/secur
security-announce/2013-09/msg00003.html - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://www.debian.org/security/2013/dsa-2766 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/drivers/cdrom/cdrom.c?id=050e4b8fb7cdd7096c987a9cd556029c622c7fe2 - http://www.openwall.com/lists/oss-security/2013/06/10/9 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - https://bugzilla.redhat.com/show_bug.cgi?id=973100 - http://www.ubuntu.com/usn/USN-1941-1 - http://www.ubuntu.com/usn/USN-1942-1 - http://www.ubuntu.com/usn/USN-1912-1
CVE ID: CVE-2013-2165 State: PUBLISHED Published: 2013-07-22T19:00:00 Last Updated: 2024-08-06T15:27:41.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which des
.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN38787103/index.html - https://access.redhat.com/security/cve/CVE-2013-2165 - https://bugzilla.redhat.com/show_bug.cgi?id=973570 - http://rhn.redhat.com/errata/RHSA-2013-1045.html - http://rhn.redhat.com/errata/RHSA-2013-1041.html - http://rhn.redhat.com/errata/RHSA-2013-1043.html - http://rhn.redhat.com/errata/RHSA-2013-1044.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-
om/errata/RHSA-2013-1043.html - http://rhn.redhat.com/errata/RHSA-2013-1044.html - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000072 - http://rhn.redhat.com/errata/RHSA-2013-1042.html - http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html - http://seclists.org/fulldisclosure/2020/Mar/21
CVE ID: CVE-2013-2166 State: PUBLISHED Published: 2019-12-10T14:19:56 Last Updated: 2024-08-06T15:27:40.991Z Vendors: python-keystoneclient Products: python-keystoneclient Problem Types: memcache encryption bypass Description: python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2166 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2166 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2166 - https://access.redhat.com/security/cve/cve-2013-2166 - http://www.securityfocus.com/bid/60684 - http://lists.fedoraproject.org/pipermail/packag
om/security/cve/cve-2013-2166 - http://www.securityfocus.com/bid/60684 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113944.html - http://rhn.redhat.com/errata/RHSA-2013-0992.html - http://www.openwall.com/lists/oss-security/2013/06/19/5
CVE ID: CVE-2013-2167 State: PUBLISHED Published: 2019-12-10T14:22:03 Last Updated: 2024-08-06T15:27:40.872Z Vendors: python-keystoneclient Products: python-keystoneclient Problem Types: memcache signing bypass Description: python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2167 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2167 - https://access.redhat.com/security/cve/cve-2013-2167 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2167 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113944.html - http://rhn.r
.cgi?id=CVE-2013-2167 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113944.html - http://rhn.redhat.com/errata/RHSA-2013-0992.html - http://www.openwall.com/lists/oss-security/2013/06/19/5 - http://www.securityfocus.com/bid/60680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85492
CVE ID: CVE-2013-2168 State: PUBLISHED Published: 2013-07-03T18:00:00 Last Updated: 2024-08-06T15:27:41.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service (service crash) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2707 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/110114.html - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://www.mandriva.com/se
ce/2013-June/110114.html - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:177 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00003.html - http://secunia.com/advisories/53317 - http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109896.html - https://bugzilla.redhat.com/show_bug.cgi?id=974109 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16881 - http://www.securitytracker.com/id/1028667 - http://cgit.freedesktop.org/dbus/dbus/commit/?id=954d75b2b64e4799f360d2a6bf9cff6d9fee37e7 - http://www.ubuntu.com/usn/USN-1874-1 - http://www.openwall.com/lists/
mit/?id=954d75b2b64e4799f360d2a6bf9cff6d9fee37e7 - http://www.ubuntu.com/usn/USN-1874-1 - http://www.openwall.com/lists/oss-security/2013/06/13/2 - http://secunia.com/advisories/53832 - http://lists.freedesktop.org/archives/dbus/2013-June/015696.html - http://www.securityfocus.com/bid/60546
CVE ID: CVE-2013-2169 State: REJECTED Published: 2014-01-20T02:00:00 Last Updated: 2014-01-20T02:57:00 Description: No description available.
CVE ID: CVE-2013-2170 State: REJECTED Published: 2014-01-20T02:00:00 Last Updated: 2014-01-20T02:57:00 Description: No description available.
CVE ID: CVE-2013-2171 State: PUBLISHED Published: 2013-07-02T01:00:00 Last Updated: 2024-08-06T15:27:41.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.freebsd.org/security/advisories/FreeBSD-SA-13
dditional Analyst Notes: - CVE Program Container: References: - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:06.mmap.asc - http://www.debian.org/security/2013/dsa-2714 - http://svnweb.freebsd.org/base?view=revision&revision=251901
CVE ID: CVE-2013-2172 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T15:27:41.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1219.html - http://secunia.com/advisories/54019 - http://www.vmware.com/
ences: - http://rhn.redhat.com/errata/RHSA-2013-1219.html - http://secunia.com/advisories/54019 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://rhn.redhat.com/errata/RHSA-2013-1218.html - http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc - http://rhn.redhat.com/errata/RHSA-2013-1209.html - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.ubuntu.com/usn/USN-2028-1 - http://rhn.redhat.com/errata/RHSA-2013-1217.html - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java?r1=13538
ity-java/branches/1.5.x-fixes/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java?r1=1353876&r2=1493772&pathrev=1493772&diff_format=h - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://rhn.redhat.com/errata/RHSA-2013-1375.html - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://rhn.redhat.com/errata/RHSA-2014-0212.html - http://rhn.redhat.com/errata/RHSA-2013-1853.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://rhn.redhat.com/errata/RHSA-2013-1208.html - http://rhn.redhat.com/errata/RHSA-2013-1220.html - http://www.securityfocus.com/bid/60846 - http://www.osvdb.org/94651 - http://www.debian.org/security/20
2013-1220.html - http://www.securityfocus.com/bid/60846 - http://www.osvdb.org/94651 - http://www.debian.org/security/2014/dsa-3065 - https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E - https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E
CVE ID: CVE-2013-2173 State: PUBLISHED Published: 2013-06-21T10:00:00 Last Updated: 2024-08-06T15:27:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie. Additional Analyst Notes: - CVE Program Container: References: - https://vndh.net/note:wordpress-351-denial-service - http://wordpress.org/news/2013/06/wordpress-3-5-2/ - http://www.debian.org/security/2013/dsa-2718 - http://openwall.com/lists/oss-security/2013/06/12/2 - http://archives.neohapsis.com/archives/bugtraq/2
y/2013/dsa-2718 - http://openwall.com/lists/oss-security/2013/06/12/2 - http://archives.neohapsis.com/archives/bugtraq/2013-06/0052.html - http://codex.wordpress.org/Version_3.5.2 - https://github.com/wpscanteam/wpscan/issues/219
CVE ID: CVE-2013-2174 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T15:27:41.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.or
2016-3090546.html - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-updates/2013-07/msg00013.html - http://rhn.redhat.com/errata/RHSA-2013-0983.html - https://github.com/bagder/curl/commit/192c4f788d48f82c03e9cef40013f34370e90737 - http://www.securityfocus.com/bid/60737 - http://www.ubuntu.com/usn/USN-1894-1 - http://www.debian.org/security/2013/dsa-2713 - http://curl.haxx.se/docs/adv_20130622.html
CVE ID: CVE-2013-2175 State: PUBLISHED Published: 2013-08-19T00:00:00 Last Updated: 2024-08-06T15:27:41.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (negative array index usage and crash) via an HTTP header with a certain number of values, related to the MAX_HDR_HISTORY variable. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1204.html - http://marc.info/?l=haproxy&m=137147915029705&w=2 - http://secunia.com/advisories/54344
om/errata/RHSA-2013-1204.html - http://marc.info/?l=haproxy&m=137147915029705&w=2 - http://secunia.com/advisories/54344 - https://bugzilla.redhat.com/show_bug.cgi?id=974259 - http://www.debian.org/security/2013/dsa-2711 - http://rhn.redhat.com/errata/RHSA-2013-1120.html - http://www.ubuntu.com/usn/USN-1889-1
CVE ID: CVE-2013-2176 State: PUBLISHED Published: 2013-08-28T17:00:00Z Last Updated: 2024-09-16T23:10:41.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application Provisioning Tool (RHEV-APT) in the rhev-guest-tools-iso package 3.2 allows local users to gain privileges via a Trojan horse application. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1122.html
CVE ID: CVE-2013-2177 State: PUBLISHED Published: 2013-06-25T18:00:00Z Last Updated: 2024-09-17T02:06:26.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via an entity bundle label. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/94234 - https://drupal.org/node/2017641 - http://seclists.org/fulldisclosure/2013/Jun/94 - https://drupal.org/node/2017639 - https://drupal.org/node/2017933
CVE ID: CVE-2013-2178 State: PUBLISHED Published: 2013-08-28T17:18:00 Last Updated: 2024-08-06T15:27:41.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17338 - http://www.openwall.com/lists/oss-security/2013/06/13/7 - http://www.debian.org/security/2013/dsa-2708 - http://li
338 - http://www.openwall.com/lists/oss-security/2013/06/13/7 - http://www.debian.org/security/2013/dsa-2708 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00021.html - https://raw.github.com/fail2ban/fail2ban/master/ChangeLog - https://vndh.net/note:fail2ban-089-denial-service
CVE ID: CVE-2013-2179 State: PUBLISHED Published: 2013-12-27T01:00:00 Last Updated: 2024-08-06T15:27:41.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by attempting to log into an account whose password field contains invalid characters, as demonstrated using the crypt function from glibc 2.17 and later with (1) the "!" character in the salt portion of a password field or (2) a password that has been encrypted using DES or MD
(1) the "!" character in the salt portion of a password field or (2) a password that has been encrypted using DES or MD5 in FIPS-140 mode. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-07/msg00002.html - http://www.openwall.com/lists/oss-security/2013/06/13/8 - https://bugs.mageia.org/show_bug.cgi?id=10682 - http://cgit.freedesktop.org/xorg/app/xdm/commit/?id=8d1eb5c74413e4c9a21f689fc106949b121c0117
CVE ID: CVE-2013-2180 State: REJECTED Published: 2022-06-27T16:00:06 Last Updated: 2022-06-27T16:06:30 Description: No description available.
CVE ID: CVE-2013-2181 State: PUBLISHED Published: 2013-07-29T21:00:00Z Last Updated: 2024-09-16T20:02:36.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.monkey-project.com/ticket/185 - http://www.securitytracker.com/id/1028670
CVE ID: CVE-2013-2182 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-06T15:27:41.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60569 - http://bugs.monkey-project.com/ticket/186 - http://osvdb.org/94287 - https://github.com/monkey/monkey/commit/15f72c1ee5e0afad20232bdf0fcecab8d62a5d89 - http://secunia.com/advisories/53638 - http://www.openwall.com/lists/oss-security/20
1ee5e0afad20232bdf0fcecab8d62a5d89 - http://secunia.com/advisories/53638 - http://www.openwall.com/lists/oss-security/2013/06/14/11 - https://github.com/monkey/monkey/issues/92
CVE ID: CVE-2013-2183 State: PUBLISHED Published: 2019-12-10T14:29:44 Last Updated: 2024-08-06T15:27:41.077Z Vendors: monkey Products: monkey Problem Types: UNKNOWN_TYPE Description: Monkey HTTP Daemon has local security bypass Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2183 - http://www.openwall.com/lists/oss-security/2013/06/14/13 - http://www.openwall.com/lists/oss-security/2013/06/14/12 - https://www.securityfocus.com/bid/60589
CVE ID: CVE-2013-2184 State: PUBLISHED Published: 2015-03-27T14:00:00 Last Updated: 2024-08-06T15:27:41.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q2/568 - https://movabletype.org/documentation/appendices/release-notes/movable-type-526-release-notes.html - http://seclists.org/oss-sec/2013/q2/560 - http://www.debian.org/security/2015/dsa-3183
CVE ID: CVE-2013-2185 State: PUBLISHED Published: 2014-01-19T16:00:00 Last Updated: 2024-08-06T15:27:41.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar issue to CVE-2013-2186. NOTE: this issue is reportedly disputed by the Apache Tomcat team, although Red Hat considers it a vulnerability. The dispute appears to regard whether it is the responsibility of applications to avoid providing un
it a vulnerability. The dispute appears to regard whether it is the responsibility of applications to avoid providing untrusted data to be deserialized, or whether this class should inherently protect against this issue Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/05/4 - http://rhn.redhat.com/errata/RHSA-2013-1193.html - http://rhn.redhat.com/errata/RHSA-2013-1265.html - http://openwall.com/lists/oss-security/2014/10/24/12 - http://rhn.redhat.com/errata/RHSA-2013-1194.html