Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5680 State: PUBLISHED Published: 2014-04-06T16:00:00 Last Updated: 2024-08-06T17:22:30.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://hylafax.sourceforge.net/news/5.5.4.php - http://www.securityfocus.com/archive/1/528943 - http://www.exploit-db.com/exploits/28683 - http://www.securityfocus.com/bid/62729 - http://securitytracker.com/id?1029119
CVE ID: CVE-2013-5683 State: REJECTED Published: 2022-06-30T20:23:02 Last Updated: 2022-06-30T20:23:02 Description: No description available.
CVE ID: CVE-2013-5687 State: PUBLISHED Published: 2020-02-13T23:03:34 Last Updated: 2024-08-06T17:22:29.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89118
CVE ID: CVE-2013-5688 State: PUBLISHED Published: 2013-11-05T21:00:00Z Last Updated: 2024-09-17T03:03:27.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated users to read arbitrary files via a ../%00 (dot dot backslash encoded null byte) in the file parameter in a (1) download or (2) get_content action, or (3) upload arbitrary files via a ../%00 (dot dot backslash encoded null byte) in the dir parameter in an upload action. Additional Analyst Notes: - CVE Program Container: References: - http://ajaxplorer.info/ajaxplorer-core-5-0-3/ - https://www.trustwave.com/spid
s: - CVE Program Container: References: - http://ajaxplorer.info/ajaxplorer-core-5-0-3/ - https://www.trustwave.com/spiderlabs/advisories/TWSL2013-027.txt - http://osvdb.org/97022
CVE ID: CVE-2013-5689 State: REJECTED Published: 2013-11-05T21:00:00Z Last Updated: 2024-09-17T00:01:15.385Z Description: No description available.
CVE ID: CVE-2013-5690 State: PUBLISHED Published: 2013-10-03T19:00:00Z Last Updated: 2024-09-16T22:29:53.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) content with the text/xml MIME type or (2) the Status comment field of an appointment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/528940
CVE ID: CVE-2013-5691 State: PUBLISHED Published: 2013-09-23T10:00:00 Last Updated: 2024-08-06T17:22:29.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR, and SIOCSIFNETMASK requests, which allows local users to perform link-layer actions, cause a denial of service (panic), or possibly gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54861 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:12.ifioctl.asc - http://www.debian.org/s
com/advisories/54861 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:12.ifioctl.asc - http://www.debian.org/security/2013/dsa-2769 - http://svnweb.freebsd.org/base?view=revision&revision=255442
CVE ID: CVE-2013-5692 State: PUBLISHED Published: 2013-09-30T20:00:00Z Last Updated: 2024-09-16T19:15:23.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the file parameter to index.php/admin/translationManager. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23172 - http://archives.neohapsis.com/archives/bugtraq/2013-09/0117.html - http://www.exploit-db.com/exploits/28557 - http://osvdb.org/97365
CVE ID: CVE-2013-5693 State: PUBLISHED Published: 2013-09-30T20:00:00Z Last Updated: 2024-09-16T23:51:36.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/97366 - https://www.htbridge.com/advisory/HTB23172 - http://archives.neohapsis.com/archives/bugtraq/2013-09/0117.html - http://www.exploit-db.com/exploits/28557
CVE ID: CVE-2013-5694 State: PUBLISHED Published: 2013-11-05T20:00:00Z Last Updated: 2024-09-17T01:06:32.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the service_selection parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123821/Ops-View-Pre-4.4.1-Blind-SQL-Injection.html - http://osvdb.org/ref/99/opsview-sqli.txt - http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes - http://www.exploit-db.com/exploits/29326 - http://osvdb.org/99038 - http://www.securityfocus.
opsview4.4:changes#fixes - http://www.exploit-db.com/exploits/29326 - http://osvdb.org/99038 - http://www.securityfocus.com/bid/63387 - http://archives.neohapsis.com/archives/bugtraq/2013-10/0149.html
CVE ID: CVE-2013-5695 State: PUBLISHED Published: 2013-11-05T20:00:00Z Last Updated: 2024-09-16T17:15:14.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/auditlog/, (2) PATH_INFO to info/host/ or (3) viewport/, (4) back parameter to login, or (5) "from" parameter to status/service/recheck. Additional Analyst Notes: - CVE Program Container: References: - http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes - http://archives.neohapsis.com/archives/bugtraq/2013-10/0141.html
CVE ID: CVE-2013-5696 State: PUBLISHED Published: 2013-09-23T01:00:00Z Last Updated: 2024-09-16T16:17:31.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and (1) perform a SQL injection via an Etape_4 action or (2) execute arbitrary PHP code via an update_1 action. Additional Analyst Notes: - CVE Program Container: References: - https://forge.indepnet.net/projects/glpi/repository/revisions/21753/diff/branches/0.84-bugfixes/inc/central.class.php - https://forge
.indepnet.net/projects/glpi/repository/revisions/21753/diff/branches/0.84-bugfixes/inc/central.class.php - https://forge.indepnet.net/issues/4480 - https://forge.indepnet.net/projects/glpi/repository/revisions/21753 - https://www.navixia.com/blog/entry/navixia-finds-critical-vulnerabilities-in-glpi-cve-2013-5696.html - http://www.glpi-project.org/spip.php?page=annonce&id_breve=308
CVE ID: CVE-2013-5697 State: PUBLISHED Published: 2013-09-30T21:00:00Z Last Updated: 2024-09-16T16:58:47.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/97588 - http://www.baesystemsdetica.com.au/Research/Advisories/mod_accounting-Blind-SQL-Injection-%28DS-2013-006%29
CVE ID: CVE-2013-5698 State: PUBLISHED Published: 2013-09-05T10:00:00Z Last Updated: 2024-09-16T23:36:10.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view action, aka Bug ID 26373, a different vulnerability than CVE-2013-3106. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-06/0012.html
CVE ID: CVE-2013-5700 State: PUBLISHED Published: 2013-09-10T10:00:00Z Last Updated: 2024-09-16T19:55:45.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted sequence of messages. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://bitcointalk.org/index.php?topic=287351
CVE ID: CVE-2013-5701 State: PUBLISHED Published: 2013-10-03T20:00:00Z Last Updated: 2024-09-16T19:01:02.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Sep/43 - https://www.rcesecurity.com/2013/09/cve-2013-5701-watchguard-server-center-v11-7-4-wgpr-dll-local
sclosure/2013/Sep/43 - https://www.rcesecurity.com/2013/09/cve-2013-5701-watchguard-server-center-v11-7-4-wgpr-dll-local-privileges-escalation-vulnerability - http://www.securitytracker.com/id/1028992
CVE ID: CVE-2013-5702 State: PUBLISHED Published: 2013-10-19T10:00:00Z Last Updated: 2024-09-17T02:22:05.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/ - http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/
CVE ID: CVE-2013-5703 State: PUBLISHED Published: 2013-10-22T22:00:00Z Last Updated: 2024-09-17T01:57:00.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/101462
CVE ID: CVE-2013-5704 State: PUBLISHED Published: 2014-04-15T10:00:00 Last Updated: 2024-08-06T17:22:30.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://support.apple.com/HT204659 - http://svn.apache.or
acle.com/technetwork/topics/security/cpujul2015-2367936.html - https://support.apple.com/HT204659 - http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES - https://security.gentoo.org/glsa/201504-03 - http://rhn.redhat.com/errata/RHSA-2015-1249.html - http://rhn.redhat.com/errata/RHSA-2016-0061.html - http://rhn.redhat.com/errata/RHSA-2015-0325.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:174 - http://www.ubuntu.com/usn/USN-2523-1 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://rhn.redhat.com/errata/RHSA-2016-0062.html - http://marc.inf
technetwork/topics/security/cpujan2016-2367955.html - http://rhn.redhat.com/errata/RHSA-2016-0062.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 - http://rhn.redhat.com/errata/RHSA-2015-2661.html - http://marc.info/?l=bugtraq&m=144493176821532&w=2 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=1610674&r2=1610814&diff_format=h - https://access.redhat.com/errata/RHSA-2015:2659 - http://svn.apache.org/viewvc/htt
r1=1610674&r2=1610814&diff_format=h - https://access.redhat.com/errata/RHSA-2015:2659 - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - https://access.redhat.com/errata/RHSA-2015:2660 - https://httpd.apache.org/security/vulnerabilities_24.html - http://martin.swende.se/blog/HTTPChunked.html - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - https://support.apple.com/HT205219 - http://www.securityfocus.com/bid/66550 - http://marc.info/?l=apache-httpd-dev&m=139636309822854&w=2 - https://lists.apache.org/th
w.securityfocus.com/bid/66550 - http://marc.info/?l=apache-httpd-dev&m=139636309822854&w=2 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.htt
che.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf8269
361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https:/
.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2013-5705 State: PUBLISHED Published: 2014-04-15T10:00:00 Last Updated: 2024-08-06T17:22:30.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/ModSecurity/commit/f8d441cd25172fdfe5b613442fedfc0da3cc333d - http://www.debian.org/security/2014/dsa-2991 - http://martin.swende.se/blog/HTTPChunked.html
CVE ID: CVE-2013-5706 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-17T00:00:54.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to error messages and (1) crafted event attributes or (2) > (greater than) characters that are optional within a browser's HTML implementation, a different issue than CVE-2013-3603. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/960908
CVE ID: CVE-2013-5707 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-17T02:27:06.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or HTML via crafted input containing a %22 sequence, a different issue than CVE-2013-3604. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/960908
CVE ID: CVE-2013-5708 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-16T18:24:02.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/960908
CVE ID: CVE-2013-5709 State: PUBLISHED Published: 2013-09-17T10:00:00 Last Updated: 2024-08-06T17:22:31.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-850708.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-13-254-01 - https://cert-po
elder/siemens_security_advisory_ssa-850708.pdf - http://ics-cert.us-cert.gov/advisories/ICSA-13-254-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-850708.pdf
CVE ID: CVE-2013-5710 State: PUBLISHED Published: 2013-09-23T20:00:00 Last Updated: 2024-08-06T17:22:30.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users with certain permissions to bypass access restrictions via a hardlink in a nullfs instance to a file in a different instance. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54861 - http://www.securitytracker.com/id/1029015 - http://www.debian.org/security/2013/dsa-2769 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:13.nullfs.asc - http://svnweb.freebsd.o
ecurity/2013/dsa-2769 - http://www.freebsd.org/security/advisories/FreeBSD-SA-13:13.nullfs.asc - http://svnweb.freebsd.org/base?view=revision&revision=255442
CVE ID: CVE-2013-5711 State: PUBLISHED Published: 2013-09-17T01:00:00Z Last Updated: 2024-09-16T16:48:05.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0055.html - http://wordpress.org/plugins/design-approval-system/other_notes/
CVE ID: CVE-2013-5714 State: PUBLISHED Published: 2013-09-09T17:00:00Z Last Updated: 2024-09-17T01:41:10.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iedb.ir/exploits-402.html - http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html - http://secunia.co
p://www.iedb.ir/exploits-402.html - http://archives.neohapsis.com/archives/bugtraq/2013-08/0153.html - http://secunia.com/advisories/54619 - http://www.securityfocus.com/bid/61977 - http://osvdb.org/96593
CVE ID: CVE-2013-5715 State: PUBLISHED Published: 2013-09-09T17:00:00Z Last Updated: 2024-09-17T03:52:55.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://player.gomlab.com/eng/notice/view.gom?intseq=239 - http://player.gomlab.com/eng/download/
CVE ID: CVE-2013-5716 State: PUBLISHED Published: 2013-09-09T17:00:00Z Last Updated: 2024-09-16T16:38:26.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (application crash) via a crafted WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62173 - http://www.exploit-db.com/exploits/28080
CVE ID: CVE-2013-5717 State: PUBLISHED Published: 2013-09-13T18:00:00 Last Updated: 2024-08-06T17:22:31.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service (application crash) via a crafted packet that is not properly handled by the wmem_block_alloc function in epan/wmem/wmem_allocator_block.c. Additional Analyst Notes: - CVE Program Container: References: - http://anonsvn.wireshark.org/viewvc?view=revision&revision=51130 - https://www.wireshark.org/security/wnpa-sec-2013-54.html - https://oval.cisecurity.org/
c?view=revision&revision=51130 - https://www.wireshark.org/security/wnpa-sec-2013-54.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19030 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8827