Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-5905 State: PUBLISHED Published: 2014-01-15T01:33:00 Last Updated: 2024-08-06T17:29:42.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5906. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90341 - http://osvdb.org/102009 - https://access.redhat.com/errata/RHSA-2014:0414 - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://secunia.com/advisories/56535 - http://r
rata/RHSA-2014:0414 - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://secunia.com/advisories/56535 - http://rhn.redhat.com/errata/RHSA-2014-0030.html - http://secunia.com/advisories/56485 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://www.securitytracker.com/id/1029608 - http://www.securityfocus.com/bid/64934 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
CVE ID: CVE-2013-5906 State: PUBLISHED Published: 2014-01-15T01:33:00 Last Updated: 2024-08-06T17:29:41.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/102010 - https://access.redhat.com/errata/RHSA-2014:0414 - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://www.securityfocus.com/bid/64903 - http://secunia.com/advisories/56535 - http://rhn.redhat.com/errata
111889&w=2 - http://www.securityfocus.com/bid/64903 - http://secunia.com/advisories/56535 - http://rhn.redhat.com/errata/RHSA-2014-0030.html - http://secunia.com/advisories/56485 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90342 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://www.securitytracker.com/id/1029608 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
CVE ID: CVE-2013-5907 State: PUBLISHED Published: 2014-01-15T01:33:00 Last Updated: 2024-08-06T17:29:42.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly exe
ookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56432 - https://access.redhat.com/errata/RHSA-2014:0414 - http://rhn.redhat.com/errata/RHSA-2014-0136.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=1052915 - http://rhn.redhat.com/errata/RHSA-2014-0135.html - http://secunia.com/advisories/56535 - http://www.ubuntu.com/usn/USN-2089-1 - http://osvdb.org/101995 - http
-0135.html - http://secunia.com/advisories/56535 - http://www.ubuntu.com/usn/USN-2089-1 - http://osvdb.org/101995 - http://rhn.redhat.com/errata/RHSA-2014-0030.html - http://www.securityfocus.com/bid/64894 - http://rhn.redhat.com/errata/RHSA-2014-0097.html - http://secunia.com/advisories/56485 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 - http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0027.html - http://secunia.com/advisories/56486 - http://lists.opensuse.org/opensuse-security-announce/2014
ta/RHSA-2014-0027.html - http://secunia.com/advisories/56486 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://www.securitytracker.com/id/1029608 - http://www.ubuntu.com/usn/USN-2124-1 - http://secunia.com/advisories/56487 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html - http://rhn.redhat.com/errata/RHSA-2014-0026.html - http://www.securityfocus.com/bid/64758 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://rhn.redhat.com/errata/RHSA-2014-0134.html - http://lists.o
/technetwork/topics/security/cpujan2014-1972949.html - http://rhn.redhat.com/errata/RHSA-2014-0134.html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html
CVE ID: CVE-2013-5908 State: PUBLISHED Published: 2014-01-15T01:33:00 Last Updated: 2024-08-06T17:29:41.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2086-1 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 - http://osvdb.org/102078 - http://www.debian.org/security/2014/dsa-2845 - http://secunia.com/advisories/56491 - http://rhn.redhat.com/erra
102078 - http://www.debian.org/security/2014/dsa-2845 - http://secunia.com/advisories/56491 - http://rhn.redhat.com/errata/RHSA-2014-0186.html - http://www.securityfocus.com/bid/64896 - http://secunia.com/advisories/56541 - http://www.debian.org/security/2014/dsa-2848 - http://secunia.com/advisories/56580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90389 - http://rhn.redhat.com/errata/RHSA-2014-0173.html - http://rhn.redhat.com/errata/RHSA-2014-0189.html - http://rhn.redhat.com/errata/RHSA-2014-0164.html - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://security.gentoo.org/glsa/glsa-201409-04.xml
CVE ID: CVE-2013-5909 State: PUBLISHED Published: 2014-01-15T01:33:00 Last Updated: 2024-08-06T17:29:41.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Org and Workforce Dev. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64855 - http://osvdb.org/102035 - http://secunia.com/advisories/56477 - http://www.securitytracker.com/id/1029623 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/top
tp://www.securitytracker.com/id/1029623 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
CVE ID: CVE-2013-5910 State: PUBLISHED Published: 2014-01-15T01:33:00 Last Updated: 2024-08-06T17:29:42.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56432 - https://access.redhat.com/errata/R
t Notes: - CVE Program Container: References: - http://secunia.com/advisories/56432 - https://access.redhat.com/errata/RHSA-2014:0414 - http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0135.html - http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/07004bb53c3c - http://secunia.com/advisories/56535 - http://www.ubuntu.com/usn/USN-2089-1 - http://www.securityfocus.com/bid/64933 - http://rhn.redhat.com/errata/RHSA-2014-0030.html - https://bugzilla.redhat.com/show_bug.cgi?id=1052942 - http://rhn.redhat.com/errata/RHSA-2014-0097.html - http://secunia.com/advisories/56485 - http://osvdb.org/102
=1052942 - http://rhn.redhat.com/errata/RHSA-2014-0097.html - http://secunia.com/advisories/56485 - http://osvdb.org/102021 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777 - http://marc.info/?l=bugtraq&m=139402697611681&w=2 - http://rhn.redhat.com/errata/RHSA-2014-0027.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/90352 - http://secunia.com/advisories/56486 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html - http://marc.info/?l=bugtraq&m=139402749111889&w=2 - http://www.securitytracker.com/id/1029608 - http://www.ubuntu.com/usn/USN-2124-1 - http://lists.open
9402749111889&w=2 - http://www.securitytracker.com/id/1029608 - http://www.ubuntu.com/usn/USN-2124-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html - http://rhn.redhat.com/errata/RHSA-2014-0026.html - http://www.securityfocus.com/bid/64758 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://rhn.redhat.com/errata/RHSA-2014-0134.html - http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html
CVE ID: CVE-2013-5911 State: PUBLISHED Published: 2013-09-24T10:00:00Z Last Updated: 2024-09-17T02:06:46.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - https://discussions.nessus.org/message/22174#22174 - http://www.osvdb.org/97584
CVE ID: CVE-2013-5912 State: PUBLISHED Published: 2013-11-28T02:00:00 Last Updated: 2024-08-06T17:29:41.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/893462
CVE ID: CVE-2013-5913 State: PUBLISHED Published: 2013-10-15T15:00:00 Last Updated: 2024-08-06T17:29:41.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Community Edition 4.7.x before 4.7.8, and Enterprise Edition 5.x before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via the searchrecomm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.oxidforge.org/Security_bulletins/2013-001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87760 - http://www.securityfocus.com/bid/62901 -
letins/2013-001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87760 - http://www.securityfocus.com/bid/62901 - http://secunia.com/advisories/55193 - http://osvdb.org/98235
CVE ID: CVE-2013-5914 State: PUBLISHED Published: 2013-10-26T17:00:00Z Last Updated: 2024-09-16T16:38:29.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet. Additional Analyst Notes: - CVE Program Container: References: - https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-04 - http://www.debian.org/security/2013/dsa-2782
CVE ID: CVE-2013-5915 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T17:29:42.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55084 - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.html - http://www.securityfocus.com/bid/62771 - http://osvdb.org/98049 - http://www.debian.org/security/2013/dsa-2782 - http://lists.fedorap
curityfocus.com/bid/62771 - http://osvdb.org/98049 - http://www.debian.org/security/2013/dsa-2782 - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119018.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-October/118758.html - https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-05
CVE ID: CVE-2013-5916 State: PUBLISHED Published: 2014-05-08T15:00:00 Last Updated: 2024-08-06T17:29:42.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62617 - http://archives.neohapsis.com/archives/bugtraq/2013-09/0112.html - http://osvdb.org/97624
CVE ID: CVE-2013-5917 State: PUBLISHED Published: 2013-09-23T10:00:00Z Last Updated: 2024-09-16T20:36:45.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the comment_post_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0102.html
CVE ID: CVE-2013-5918 State: PUBLISHED Published: 2013-09-23T10:00:00Z Last Updated: 2024-09-16T17:28:47.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/97/platinum_seo.txt - http://www.osvdb.org/97263
CVE ID: CVE-2013-5919 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T17:29:41.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record. Additional Analyst Notes: - CVE Program Container: References: - http://suricata-ids.org/2013/09/24/suricata-1-4-6-released/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/87492 - http://secunia.com/advisories/54968
CVE ID: CVE-2013-5930 State: PUBLISHED Published: 2013-09-23T20:00:00 Last Updated: 2024-08-06T17:29:42.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_residential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123138/realestatephpscript-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/86986
CVE ID: CVE-2013-5931 State: PUBLISHED Published: 2013-09-23T20:00:00Z Last Updated: 2024-09-17T00:05:47.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in property_listings_detail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL commands via the listingid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/123138/realestatephpscript-xss.txt
CVE ID: CVE-2013-5932 State: PUBLISHED Published: 2013-09-23T20:00:00 Last Updated: 2024-08-06T17:29:41.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54881 - http://blogs.sophos.com/2013/08/21/utm-up2date-9-105-released/ - http://www.securitytracker.com/id/1029039
CVE ID: CVE-2013-5933 State: PUBLISHED Published: 2013-09-25T10:00:00Z Last Updated: 2024-09-17T01:11:26.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket. Additional Analyst Notes: - CVE Program Container: References: - https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J - h
nalyst Notes: - CVE Program Container: References: - https://plus.google.com/110348415484169880343/posts/5ofgPNrSu3J - http://twitter.com/djrbliss/statuses/382632926946402304
CVE ID: CVE-2013-5934 State: PUBLISHED Published: 2013-09-25T10:00:00Z Last Updated: 2024-09-16T18:54:18.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this password in the source code and then sending the password in a Hazelcast cluster API call, a different vulnerability than CVE-2013-5200. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0032.html
CVE ID: CVE-2013-5935 State: PUBLISHED Published: 2013-09-25T10:00:00Z Last Updated: 2024-09-16T19:10:12.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive API calls, which makes it easier for remote attackers to obtain access by sending network traffic from an unintended location, a different vulnerability than CVE-2013-5200. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0032.html
CVE ID: CVE-2013-5936 State: PUBLISHED Published: 2013-09-25T10:00:00Z Last Updated: 2024-09-17T01:31:55.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about (1) runtime activity, (2) network configuration, (3) user sessions, (4) the memcache interface, and (5) the REST interface via API calls such as a hazelcast/rest/cluster/ call, a different vulnerability than CVE-2013-5200. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-09/0032.html
CVE ID: CVE-2013-5937 State: PUBLISHED Published: 2013-09-25T14:00:00 Last Updated: 2024-08-06T17:29:42.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/97203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87052 - http://www.openwall.com/lists/oss-security/2013/10/21/5 - http://seclists.org/fulldisclosure/2013/Sep/64 - https://drupal.o
p://www.openwall.com/lists/oss-security/2013/10/21/5 - http://seclists.org/fulldisclosure/2013/Sep/64 - https://drupal.org/node/2087055
CVE ID: CVE-2013-5938 State: PUBLISHED Published: 2013-09-25T14:00:00 Last Updated: 2024-08-06T17:29:41.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/87050 - http://www.openwall.com/lists/oss-security/2013/10/21/5 - http://seclists.org/fulldisclosure/2013/Sep/64 - http://osvdb.org/97204 - https://drupal.org/node/2087055
CVE ID: CVE-2013-5939 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T17:29:41.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the (1) list or (2) introduce parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/98886 - http://packetstormsecurity.com/files/123746/PHPCMS-Guestbook-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2013/Oct/187
CVE ID: CVE-2013-5942 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-17T02:26:53.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/datalib.py, and (4) whitelist/views.py, a different vulnerability than CVE-2013-5093. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/graphite-project/graphite-web/blob/master/docs/releases/0_9_11.rst - http://secunia.com/advisories/54556
CVE ID: CVE-2013-5943 State: PUBLISHED Published: 2013-09-27T10:00:00Z Last Updated: 2024-09-16T20:42:38.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/graphite-project/graphite-web/blob/master/docs/releases/0_9_11.rst - http://secunia.com/advisories/54556