Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-6930 State: PUBLISHED Published: 2014-01-29T02:00:00 Last Updated: 2024-08-06T17:53:44.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000010 - http://cs.cybozu.co.jp/information/20140127up02.php - http://jvn.jp/en/
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000010 - http://cs.cybozu.co.jp/information/20140127up02.php - http://jvn.jp/en/jp/JVN91153528/index.html - http://jvn.jp/en/jp/JVN91153528/374951/index.html - https://support.cybozu.com/ja-jp/article/7886
CVE ID: CVE-2013-6931 State: PUBLISHED Published: 2014-01-29T02:00:00 Last Updated: 2024-08-06T17:53:45.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929. Additional Analyst Notes: - CVE Program Container: References: - http://cs.cybozu.co.jp/information/20140127up03.php - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000010 - http://jvn.jp/en/jp/JVN91153528/index.html - http://jvn.jp/en/jp/JVN91153528/374951/index.html - https://support.cybozu.com/ja-jp/article/7888
CVE ID: CVE-2013-6932 State: PUBLISHED Published: 2013-12-28T02:00:00 Last Updated: 2024-08-06T17:53:45.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN63194482/index.html - http://www.irfanview.com/main_history.htm - http://jvndb.jvn.jp/jvndb/JVNDB-2013-000120
CVE ID: CVE-2013-6933 State: PUBLISHED Published: 2014-01-23T21:00:00 Last Updated: 2024-08-06T17:53:45.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.live555.com/liveMedia/public/changelog.txt - http://isecpartners.g
es: - CVE Program Container: References: - http://www.live555.com/liveMedia/public/changelog.txt - http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html
CVE ID: CVE-2013-6934 State: PUBLISHED Published: 2014-01-23T21:00:00 Last Updated: 2024-08-06T17:53:45.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
fix for CVE-2013-6933. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65139 - http://www.live555.com/liveMedia/public/changelog.txt - http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html
CVE ID: CVE-2013-6935 State: PUBLISHED Published: 2013-12-04T15:00:00 Last Updated: 2024-08-06T17:53:45.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/29327 - http://packetstormsecurity.com/files/133899/Watermark-Master-Buffer-Overflow-SEH.html
CVE ID: CVE-2013-6936 State: PUBLISHED Published: 2013-12-04T15:00:00 Last Updated: 2024-08-06T17:53:45.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100030 - http://www.exploit-db.com/exploits/29797 - http://packetstormsecurity.com/files/124091/MyBB-Ajaxfs-SQL-Injection.html - http://www.iedb.ir/exploits-889.html - https://exchange.xforce.ibmcloud.com/vulnerabili
MyBB-Ajaxfs-SQL-Injection.html - http://www.iedb.ir/exploits-889.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/89084 - http://seclists.org/bugtraq/2013/Nov/102
CVE ID: CVE-2013-6937 State: PUBLISHED Published: 2013-12-04T15:00:00 Last Updated: 2024-08-06T17:53:45.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/29594
CVE ID: CVE-2013-6938 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T17:53:45.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Service VM in Citrix NetScaler SDX 9.3 before 9.3-64.4 and 10.0 before 10.0-77.5 and Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to the "Virtual Machine Daemon." Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX140113 - http://support.citrix.com/article/CTX139049
CVE ID: CVE-2013-6939 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T17:53:45.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows attackers to cause a denial of service via unknown vectors, related to "RADIUS authentication." Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX139049
CVE ID: CVE-2013-6940 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T17:53:45.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 logs user credentials, which allows attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX139049
CVE ID: CVE-2013-6941 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T17:53:45.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows users to "breakout" of the shell via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX139049
CVE ID: CVE-2013-6942 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T17:53:45.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX139049
CVE ID: CVE-2013-6943 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T17:53:45.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to conduct an LDAP injection attack via vectors related to SSH and Web management usernames. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX139049
CVE ID: CVE-2013-6944 State: PUBLISHED Published: 2014-03-10T14:00:00 Last Updated: 2024-08-06T17:53:45.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller (ADC) 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX139049
CVE ID: CVE-2013-6945 State: PUBLISHED Published: 2013-12-04T22:00:00Z Last Updated: 2024-09-17T00:16:07.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records via unspecified vectors related to a "logic flaw." Additional Analyst Notes: - CVE Program Container: References: - http://www.osehra.org/blog/vista-patch-available-osehra - http://www.darkreading.com/vulnerability/anatomy-of-an-electronic-health-record-e/240164441/ - http://www.osehra.org/blog/m2m-broker-security-patch
CVE ID: CVE-2013-6948 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T17:53:45.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf - http://www.kb.cert.org/vuls/id/656302
CVE ID: CVE-2013-6949 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T17:53:45.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact by leveraging access to a single WeMo device. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf - http://www.kb.cert.org/vuls/id/656302
CVE ID: CVE-2013-6950 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T17:53:45.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf - http://www.kb.cert.org/vuls/id/656302
CVE ID: CVE-2013-6951 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T17:53:45.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf - http://www.kb.cert.org/vuls/id/656302
CVE ID: CVE-2013-6952 State: PUBLISHED Published: 2014-02-22T21:00:00 Last Updated: 2024-08-06T17:53:45.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and execute arbitrary code via crafted signed data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/IOActive_Belkin-advisory-lite.pdf - http://www.kb.cert.org/vuls/id/656302
CVE ID: CVE-2013-6953 State: PUBLISHED Published: 2014-01-02T17:00:00 Last Updated: 2024-08-06T17:53:45.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/553166
CVE ID: CVE-2013-6954 State: PUBLISHED Published: 2014-01-12T15:00:00.000Z Last Updated: 2025-06-10T13:18:13.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/docview.wss?uid=swg21675973 - https://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://advisories.mage
://access.redhat.com/errata/RHSA-2014:0414 - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://advisories.mageia.org/MGASA-2014-0075.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128098.html - http://lists.opensuse.org/opensuse-updates/2014-01/msg00071.html - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21672080 - http://sourceforge.net/p/libpng/code/ci/1faa6ff32c648acfe3cf30a58d31d7aebc24968c - http://www.kb.cert.org/vuls/id/650142 - https://access.redhat.com/errata/RHSA-2014:0413 - http://secunia.com/advisories/59058 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://marc.info/?l=bu
:0413 - http://secunia.com/advisories/59058 - http://marc.info/?l=bugtraq&m=140852886808946&w=2 - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://www.securityfocus.com/bid/64493 - http://secunia.com/advisories/58974 - http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html - https://bugzilla.redhat.com/show_bug.cgi?id=1045561 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:035 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127947.html - http://marc.info/?l=bugtraq&m=140852974709252&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21676746 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/12809
.com/support/docview.wss?uid=swg21676746 - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128099.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127952.html - http://www.libpng.org/pub/png/libpng.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128114.html - http://sourceforge.net/projects/libpng/files/libpng16/1.6.8/
CVE ID: CVE-2013-6955 State: PUBLISHED Published: 2014-01-09T11:00:00 Last Updated: 2024-08-06T17:53:45.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD X-TMP-FILE HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/615910
CVE ID: CVE-2013-6956 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T17:53:45.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10602 - http://osvdb.org/100862 - http://www.
: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10602 - http://osvdb.org/100862 - http://www.securitytracker.com/id/1029489
CVE ID: CVE-2013-6957 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T17:53:45.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10603 - http://www.securitytracker.com/id/1029491 - http://osvdb.org/100860
CVE ID: CVE-2013-6958 State: PUBLISHED Published: 2013-12-13T18:00:00 Last Updated: 2024-08-06T17:53:45.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allows remote attackers to cause a denial of service via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000119.html - http://osvdb.org/100861 - http://www.securitytracker.com/id/1029490 - https://kb.juniper.net/JSA10604 - http://jvn.jp/en/jp/JVN28436508/index.html
CVE ID: CVE-2013-6959 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6959 - http://osvdb.org/100901 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89698 - http://www.securitytracker.com/i
iewAlert.x?alertId=32155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89698 - http://www.securitytracker.com/id/1029493
CVE ID: CVE-2013-6960 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100904 - http://www.securityfocus.com/bid/64273 - http://www.securitytracker.com/id/1029494 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89693 - http://tools.cisco.com/sec
coSecurityNotice/CVE-2013-6960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89693 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32152
CVE ID: CVE-2013-6961 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36237. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89696 - http://www.securityfocus.com/bid/64288 - http://www.securitytracker.com/id/1029494 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6961 - http://osvd
ytracker.com/id/1029494 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6961 - http://osvdb.org/100905
CVE ID: CVE-2013-6962 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36228. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029494 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89694 - http://osvdb.org/100906 - http://www.securityfocus.com/bid/64275
CVE ID: CVE-2013-6963 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64277 - http://www.securitytracker.com/id/1029492 - http://osvdb.org/100907 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89695
CVE ID: CVE-2013-6964 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/100908 - http://www.securitytracker.com/id/1029494 - http://tools.cisco.com/security/center/viewAlert.x?alertId=32158 - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89690 - http:
ty/center/content/CiscoSecurityNotice/CVE-2013-6964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89690 - http://www.securityfocus.com/bid/64280
CVE ID: CVE-2013-6965 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T17:53:45.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictions and join an audio conference by entering credential fields from this URL, aka Bug ID CSCul36183. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=32157 - http://www.securitytracker.com/id/1029492 - http://osvdb.org/100911 - http://www.securityfocus.com/bi