Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-10065 State: PUBLISHED Published: 2025-08-05T20:05:06.769Z Last Updated: 2025-11-21T00:20:54.941Z Vendors: Sysax Software Products: Multi-Server Problem Types: CWE-248 Description: A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a non-standard byte (\x28) in place of the expected SSH protocol delimiter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mattandreko.com/2013/04/08/sysax-multi-server-6.10-ssh
Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mattandreko.com/2013/04/08/sysax-multi-server-6.10-ssh-dos/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/ssh/sysax_sshd_kexchange.rb - https://www.sysax.com/ - https://www.vulncheck.com/advisories/sysax-multi-server-sshd-key-exchange-dos
CVE ID: CVE-2013-10066 State: PUBLISHED Published: 2025-08-05T20:02:54.434Z Last Updated: 2025-11-21T00:22:10.438Z Vendors: Kordil Products: EDMS Problem Types: CWE-434 Description: An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint (users_add.php) that allows attackers to upload files to the /userpictures/ directory without authentication. This flaw enables remote code execution by uploading a PHP payload and invoking it via a direct HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/kord
ent: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/kordil_edms_upload_exec.rb - https://www.exploit-db.com/exploits/24547 - https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.APP:MSF-KORDIL-EDMS-AFU.html - https://sourceforge.net/projects/kordiledms/ - https://www.vulncheck.com/advisories/kordil-edms-unauth-arbitrary-file-upload
CVE ID: CVE-2013-10067 State: PUBLISHED Published: 2025-08-05T20:02:33.203Z Last Updated: 2025-08-06T17:57:27.779Z Vendors: Glossword Team Products: Glossword Problem Types: CWE-434 Description: Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a standalone application, the administrative interface (gw_admin.php) allows users with administrator privileges to upload files to the gw_temp/a/ directory. Due to insufficient validation of file type and path, attackers can upload and execute PHP payloads, resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercont
ng in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/glossword_upload_exec.rb - https://www.exploit-db.com/exploits/24456 - https://www.exploit-db.com/exploits/24548 - https://github.com/glosswordteam/Glossword - https://sourceforge.net/projects/glossword/ - https://www.vulncheck.com/advisories/glossword-arbitrary-file-upload-rce
CVE ID: CVE-2013-10068 State: PUBLISHED Published: 2025-08-05T20:01:26.073Z Last Updated: 2025-11-21T00:23:06.433Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-121 Description: Foxit Reader Plugin version 2.2.1.530, bundled with Foxit Reader 5.4.4.11281, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer, allowing remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/foxit_reader_
s: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/foxit_reader_plugin_url_bof.rb - https://www.exploit-db.com/exploits/23944 - https://www.exploit-db.com/exploits/24502 - https://www.tenable.com/plugins/nessus/64094 - https://www.vulncheck.com/advisories/foxit-reader-plugin-url-processing-buffer-overflow
CVE ID: CVE-2013-10069 State: PUBLISHED Published: 2025-08-05T20:01:04.000Z Last Updated: 2025-11-21T00:27:01.594Z Vendors: D-Link Products: DIR-600 rev B, DIR-300 rev B Problem Types: CWE-78 Description: The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.
ve shell access as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/dlink_dir_300_600_exec_noauth.rb - https://www.exploit-db.com/exploits/24453 - https://web.archive.org/web/20150428184723/http://www.s3cur1ty.de/m1adv2013-003 - https://www.vulncheck.com/advisories/dlink-devices-unauth-rce
CVE ID: CVE-2013-10070 State: PUBLISHED Published: 2025-08-05T20:04:44.526Z Last Updated: 2025-08-07T15:16:16.947Z Vendors: PHP-Charts Products: PHP-Charts Problem Types: CWE-95 Description: PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval() without sanitization. A remote attacker can exploit this flaw by crafting a request that injects arbitrary PHP code, resulting in command execution under the web server's context. The vulnerability allows unauthenticated attackers to execute system-level commands via base64-encoded payloads embedded in parameter names, leading to full compromise of the host
e system-level commands via base64-encoded payloads embedded in parameter names, leading to full compromise of the host system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/php_charts_exec.rb - https://www.exploit-db.com/exploits/24201 - https://www.exploit-db.com/exploits/24273 - https://web.archive.org/web/20130120234844/http://php-charts.com/ - https://www.vulncheck.com/advisories/php-charts-php-code-execution
CVE ID: CVE-2013-10071 State: PUBLISHED Published: 2025-10-30T21:43:34.559Z Last Updated: 2025-11-17T18:21:37.382Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting (XSS) vulnerability in the dashboard dashlet AJAX load functionality. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-reflected-xss-via-dashlet-ajax-load-functionality
CVE ID: CVE-2013-10072 State: PUBLISHED Published: 2025-10-30T21:32:02.900Z Last Updated: 2025-11-17T18:21:37.552Z Vendors: Nagios Products: XI Problem Types: CWE-862 Description: Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly reach Auto-Discovery endpoints and pages that should require elevated permissions, exposing discovery results and allowing unintended access to discovery operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-auto-discovery-missing-authorization
CVE ID: CVE-2013-10073 State: PUBLISHED Published: 2025-10-30T21:32:22.811Z Last Updated: 2025-11-17T18:21:37.775Z Vendors: Nagios Products: XI Problem Types: CWE-78 Description: Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary commands with the privileges of the application service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-auto-disco
t: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-auto-discovery-shell-command-injection
CVE ID: CVE-2013-10074 State: PUBLISHED Published: 2025-10-30T21:56:22.290Z Last Updated: 2025-11-17T18:21:37.954Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 2012R2.6 are vulnerable to cross-site scripting (XSS) via the Tools Menu of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-tools-menu
CVE ID: CVE-2013-1000 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17396 - http://secunia.com/advisorie
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17396 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1001 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:19.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - https://oval.cisecurity.org/repository/search/de
p://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17572 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1002 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17187 - http://secunia.com/advisorie
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17187 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1003 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17252 - http://secunia.com/advisorie
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17252 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1004 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announc
p://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17604 - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1005 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - https://oval.cisecurity.org/repository/search/de
p://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17601 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1006 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17143 - http://secunia.com/advisorie
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17143 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1007 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announc
p://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17441 - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1008 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announc
p://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17359 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1009 State: PUBLISHED Published: 2013-06-05T10:00:00Z Last Updated: 2024-09-16T23:40:29.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1023. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
CVE ID: CVE-2013-1010 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announc
p://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17123 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1011 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17407 - http://lists.apple.com/archi
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17407 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html
CVE ID: CVE-2013-1012 State: PUBLISHED Published: 2013-06-05T10:00:00 Last Updated: 2024-08-06T14:49:20.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://secunia.com/advisories/54886 - http://support.apple.com/kb/HT5934 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE ID: CVE-2013-1013 State: PUBLISHED Published: 2013-06-05T10:00:00Z Last Updated: 2024-09-17T03:48:16.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5785 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
CVE ID: CVE-2013-1014 State: PUBLISHED Published: 2013-05-19T10:00:00 Last Updated: 2024-08-06T14:49:20.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17605 - http://support.apple.com/kb/HT5766 - http://lists.apple.com/archives/security-announce/2013/May/msg00000.html