Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4656 State: PUBLISHED Published: 2019-11-13T14:44:05 Last Updated: 2024-08-06T16:52:26.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
CVE ID: CVE-2013-4657 State: PUBLISHED Published: 2019-11-13T17:33:39 Last Updated: 2024-08-06T16:52:26.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/soho_service_hacks/
CVE ID: CVE-2013-4658 State: PUBLISHED Published: 2019-10-25T16:10:15 Last Updated: 2024-08-06T16:52:27.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf
CVE ID: CVE-2013-4659 State: PUBLISHED Published: 2017-03-14T09:02:00 Last Updated: 2024-08-06T16:52:26.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/122562/ASUS-RT-AC66U-ACSD-Remote-Root-Buffer-Overflow.html - http://www.linux-magazine.com/Issues/2014/161/Security-and-SOHO-Routers
CVE ID: CVE-2013-4660 State: PUBLISHED Published: 2013-06-28T14:00:00Z Last Updated: 2024-09-17T02:11:39.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation. Additional Analyst Notes: - CVE Program Container: References: - https://nealpoole.com/blog/2013/06/code-execution-via-yaml-in-js-yaml-nodejs-module/ - http://portal.nodesecurity.io/advisories/js-yaml
CVE ID: CVE-2013-4661 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:52:26.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: CiviCRM 2.0.0 through 4.2.9 and 4.3.0 through 4.3.3 does not properly enforce role-based access control (RBAC) restrictions for default custom searches, which allows remote authenticated users with the "access CiviCRM" permission to bypass intended access restrictions, as demonstrated by accessing custom contribution data without having the "access CiviContribute" permission. Additional Analyst Notes: - CVE Program Container: References: - http://issues.civicrm.org/jira/browse/CRM-12747 - http://civicrm.org/advisory/civi-sa-20
rogram Container: References: - http://issues.civicrm.org/jira/browse/CRM-12747 - http://civicrm.org/advisory/civi-sa-2013-003 - http://civicrm.org/advisory/civi-sa-2013-003-custom-search-permissions
CVE ID: CVE-2013-4662 State: PUBLISHED Published: 2014-01-29T18:00:00 Last Updated: 2024-08-06T16:52:26.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick. Additional Analyst Notes: - CVE Program Container: References: - https://civicrm.org/advisory/civi-sa-2013-004-limited-sql-injection-quick-search-api - http://issues.civicrm.org/jira/browse/CRM-12765
CVE ID: CVE-2013-4663 State: PUBLISHED Published: 2014-12-28T00:00:00 Last Updated: 2024-08-06T16:52:27.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-1.com/blog/2013/redmine-git-hosting-plugin-remote-command-execution
CVE ID: CVE-2013-4664 State: PUBLISHED Published: 2019-12-27T15:44:00 Last Updated: 2024-08-06T16:52:27.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPBAS Business Automation Software 2012 has XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.offcon.org/research.html - https://www.exploit-db.com/exploits/26244 - https://www.exploit-database.net/?id=48229
CVE ID: CVE-2013-4665 State: PUBLISHED Published: 2019-12-27T15:46:18 Last Updated: 2024-08-06T16:52:26.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPBAS Business Automation Software 2012 has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/26244 - https://www.exploit-database.net/?id=48229
CVE ID: CVE-2013-4668 State: PUBLISHED Published: 2013-07-18T14:00:00 Last Updated: 2024-08-06T16:52:26.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1906-1 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00095.html - http://www.ocert.org/advisorie
u.com/usn/USN-1906-1 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00095.html - http://www.ocert.org/advisories/ocert-2013-001.html - https://git.gnome.org/browse/file-roller/commit/?id=b147281293a8307808475e102a14857055f81631 - http://secunia.com/advisories/54351 - http://www.securityfocus.com/bid/61008 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0039.html
CVE ID: CVE-2013-4669 State: PUBLISHED Published: 2013-06-25T14:00:00Z Last Updated: 2024-09-17T00:31:09.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and FortiClient SSL VPN before 4.0.2258 on Linux proceed with an SSL session after determining that the server's X.509 certificate is invalid, which allows man-in-the-middle attackers to obtain sensitive information by leveraging a password transmission that occurs before the user warning about the certificate problem. Additional Analy
y leveraging a password transmission that occurs before the user warning about the certificate problem. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortiguard.com/advisory/Potential-Man-In-The-Middle-Vulnerability-in-FortiClient-VPN/ - http://objectif-securite.ch/forticlient_bulletin.php - http://www.securityfocus.com/bid/59604 - http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0001.html
CVE ID: CVE-2013-4670 State: PUBLISHED Published: 2013-07-31T15:00:00 Last Updated: 2024-08-06T16:52:27.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95690 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 - http://osvdb.org/95692 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/
rity_advisory&year=&suid=20130725_00 - http://osvdb.org/95692 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt - http://www.securityfocus.com/bid/61103 - http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html
CVE ID: CVE-2013-4671 State: PUBLISHED Published: 2013-07-31T15:00:00 Last Updated: 2024-08-06T16:52:27.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec
sory&year=&suid=20130725_00 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt - http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html - http://www.securityfocus.com/bid/61102 - http://osvdb.org/95699
CVE ID: CVE-2013-4672 State: PUBLISHED Published: 2013-07-31T15:00:00 Last Updated: 2024-08-06T16:52:27.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 - http://www.securityfocus.com/bid/61104 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Ga
yfocus.com/bid/61104 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt - http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html - http://osvdb.org/95695
CVE ID: CVE-2013-4673 State: PUBLISHED Published: 2013-07-31T15:00:00 Last Updated: 2024-08-06T16:52:27.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95702 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 - http://www.securityfocus.com/bid/61105 - https://exchange.xforce.ibmcloud.
id=security_advisory&year=&suid=20130725_00 - http://www.securityfocus.com/bid/61105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85990
CVE ID: CVE-2013-4674 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T16:52:26.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Universal Server) before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85902 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fi
ange.xforce.ibmcloud.com/vulnerabilities/85902 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130722_00 - http://secunia.com/advisories/54214 - http://osvdb.org/95581 - http://www.securitytracker.com/id/1028820
CVE ID: CVE-2013-4676 State: PUBLISHED Published: 2013-08-04T20:00:00 Last Updated: 2024-08-06T16:52:27.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a (1) custom-reports generation page, (2) Storage Devices creation page, or (3) jobs creation page in the management console; or (4) a Backup Exec server-management page in the beutility console. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95942 - http://www.symantec.com/security_respon
l Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95942 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 - http://www.securityfocus.com/bid/61486 - http://osvdb.org/95941
CVE ID: CVE-2013-4677 State: PUBLISHED Published: 2013-08-04T20:00:00 Last Updated: 2024-08-06T16:52:26.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 - http://osvdb.org/95939 - http://www.securityfocus.c
id=security_advisory&pvid=security_advisory&year=&suid=20130801_00 - http://osvdb.org/95939 - http://www.securityfocus.com/bid/61487
CVE ID: CVE-2013-4678 State: PUBLISHED Published: 2013-08-04T20:00:00Z Last Updated: 2024-09-17T03:54:55.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 - http://www.securityfocus.com/bid/61488
CVE ID: CVE-2013-4679 State: PUBLISHED Published: 2013-08-04T20:00:00Z Last Updated: 2024-09-17T02:31:56.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges via an application that performs crafted interaction with the operating system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61349 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_02
CVE ID: CVE-2013-4680 State: PUBLISHED Published: 2013-06-25T18:00:00 Last Updated: 2024-08-06T16:52:26.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84670 - http://osvdb.org/93818 - http://www.securityfocus.com/bid/60298 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-007/
CVE ID: CVE-2013-4681 State: PUBLISHED Published: 2013-06-25T18:00:00 Last Updated: 2024-08-06T16:52:26.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/sofortueberweisung2commerce - http://secunia.com/advisories/53280 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/81585
CVE ID: CVE-2013-4682 State: PUBLISHED Published: 2013-06-25T18:00:00Z Last Updated: 2024-09-17T01:11:27.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/53441 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009-1/ - http://www.securityfocus.com/bid/60271 - http://typo3.org/extensions/repository/view/multishop
CVE ID: CVE-2013-4683 State: PUBLISHED Published: 2013-06-25T18:00:00 Last Updated: 2024-08-06T16:52:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the meta_feedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84661 - http://osvdb.org/93806 - http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-007/
CVE ID: CVE-2013-4684 State: PUBLISHED Published: 2013-07-11T14:00:00 Last Updated: 2024-08-06T16:52:26.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted PIM packets, aka PR 842253. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61127 - http://secunia.com/advisories/54157 - http://kb.juniper.net/JSA10573 - http://osvdb.org/95107
CVE ID: CVE-2013-4685 State: PUBLISHED Published: 2013-07-11T14:00:00 Last Updated: 2024-08-06T16:52:27.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/JSA10574 - http://www.securityfocus.com/bid/61125 - http://osvdb.org/95108
CVE ID: CVE-2013-4686 State: PUBLISHED Published: 2013-07-11T14:00:00 Last Updated: 2024-08-06T16:52:26.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to cause a denial of service (device crash) via a crafted ARP request, aka PR 842091. Additional Analyst Notes: - CVE Program Container: References: - http://kb.juniper.net/JSA10576 - http://www.securityfocus.com/bid/61126 - http://secuni
Program Container: References: - http://kb.juniper.net/JSA10576 - http://www.securityfocus.com/bid/61126 - http://secunia.com/advisories/54119
CVE ID: CVE-2013-4687 State: PUBLISHED Published: 2013-07-11T14:00:00 Last Updated: 2024-08-06T16:52:26.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways (ALGs) are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets, aka PRs 727980, 806269, and 835593. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61122 - http://kb.juniper.net/JSA10577
CVE ID: CVE-2013-4688 State: PUBLISHED Published: 2013-07-11T14:00:00 Last Updated: 2024-08-06T16:52:26.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61124 - http://kb.juniper.net/JSA10578
CVE ID: CVE-2013-4689 State: PUBLISHED Published: 2013-10-17T23:00:00Z Last Updated: 2024-09-16T17:23:36.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators for requests that (1) create new administrator accounts or (2) have other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
r unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62940 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10597 - http://secunia.com/advisories/55166 - http://osvdb.org/98325
CVE ID: CVE-2013-4690 State: PUBLISHED Published: 2013-07-11T14:00:00 Last Updated: 2024-08-06T16:52:26.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data, aka PR 829536, a related issue to CVE-2003-0001. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61123 - http://osvdb.org/95112 - ht
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61123 - http://osvdb.org/95112 - http://kb.juniper.net/JSA10579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85627
CVE ID: CVE-2013-4691 State: PUBLISHED Published: 2019-12-27T15:39:03 Last Updated: 2024-08-06T16:52:26.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sencha Labs Connect has XSS with connect.methodOverride() Additional Analyst Notes: - CVE Program Container: References: - http://github.com/senchalabs/connect/issues/831
CVE ID: CVE-2013-4692 State: PUBLISHED Published: 2019-12-27T16:03:29 Last Updated: 2024-08-06T16:52:27.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/122224/Xorbin-Analog-Flash-Clock-1.0-For-Joomla-XSS.html - http://www.securityfocus.com/bid/60860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85418