deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0200
Published: 2013-03-06
Description: HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722.
CVSS Score: 1.9 (LOW)
CWE: CWE-59
References: ftp://ftp.scientificlinux.org/linux/scientific/6x/SRPMS/vendor/hplip-3.12.4-4.el6.src.rpm; http://hplipopensource.com/hplip-web/release_notes.html; http://secunia.com/advisories/55083
CVE: CVE-2013-1819
Published: 2013-03-06
Description: The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eb178619f930fa2ba2348de332a1ff1c66a31424; http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html
CVE: CVE-2012-5053
Published: 2013-03-07
Description: Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-01/0063.html; http://trl.trimble.com/docushare/dsweb/Get/Document-636664/NetRS_1%203-2_RelNotes.pdf; http://trl.trimble.com/docushare/dsweb/Get/Document-644791/Infrastructure_GNSS-SeriesReceivers_4.70_RelNotes.pdf
CVE: CVE-2011-4318
Published: 2013-03-07
Description: Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate for a different hostname.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://hg.dovecot.org/dovecot-2.0/rev/5e9eaf63a6b1; http://rhn.redhat.com/errata/RHSA-2013-0520.html; http://secunia.com/advisories/46886
CVE: CVE-2013-0151
Published: 2013-03-07
Description: The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://openwall.com/lists/oss-security/2013/01/22/10; http://secunia.com/advisories/55082; http://security.gentoo.org/glsa/glsa-201309-24.xml
CVE: CVE-2013-0215
Published: 2013-03-07
Description: oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://openwall.com/lists/oss-security/2013/02/05/10; http://secunia.com/advisories/55082; http://security.gentoo.org/glsa/glsa-201309-24.xml
CVE: CVE-2013-2475
Published: 2013-03-07
Description: The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 3.3 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html; http://secunia.com/advisories/52471
CVE: CVE-2013-2476
Published: 2013-03-07
Description: The dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a packet with a header that is too short.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc/trunk-1.8/epan/dissectors/packet-hartip.c?r1=47778&r2=47777&pathrev=47778; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47778; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
CVE: CVE-2013-2477
Published: 2013-03-07
Description: The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=47888; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html
CVE: CVE-2013-2478
Published: 2013-03-07
Description: The dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service (application crash) via a malformed packet that (1) triggers an integer overflow or (2) has embedded '\0' characters in a string.
CVSS Score: 3.3 (LOW)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk-1.8/epan/dissectors/packet-ms-mms.c?r1=47981&r2=47980&pathrev=47981; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47981; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
CVE: CVE-2013-2479
Published: 2013-03-07
Description: The dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via invalid Sub-tlv data.
CVSS Score: 3.3 (LOW)
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mpls-echo.c?r1=46391&r2=46390&pathrev=46391; http://anonsvn.wireshark.org/viewvc?view=revision&revision=46391; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
CVE: CVE-2013-2480
Published: 2013-03-07
Description: The RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 3.3 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html; http://secunia.com/advisories/52471
CVE: CVE-2013-2481
Published: 2013-03-07
Description: Integer signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfs_file_name_snooping is enabled, allows remote attackers to cause a denial of service (application crash) via a negative length value.
CVSS Score: 2.9 (LOW)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mount.c?r1=47672&r2=47671&pathrev=47672; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47672; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
CVE: CVE-2013-2482
Published: 2013-03-07
Description: The AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 6.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html; http://secunia.com/advisories/52471
CVE: CVE-2013-2483
Published: 2013-03-07
Description: The acn_add_dmp_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via an invalid count value in ACN_DMP_ADT_D_RE DMP data.
CVSS Score: 3.3 (LOW)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-acn.c?r1=47692&r2=47691&pathrev=47692; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47692; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
CVE: CVE-2013-2484
Published: 2013-03-07
Description: The CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 3.3 (LOW)
References: http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html; http://secunia.com/advisories/52471
CVE: CVE-2013-2485
Published: 2013-03-07
Description: The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
CVSS Score: 6.1 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html; http://secunia.com/advisories/52471
CVE: CVE-2013-2486
Published: 2013-03-07
Description: The dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-reload.c?r1=47805&r2=47804&pathrev=47805; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47805; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
CVE: CVE-2013-2487
Published: 2013-03-07
Description: epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via crafted integer values in a packet, related to the (1) dissect_icecandidates, (2) dissect_kinddata, (3) dissect_nodeid_list, (4) dissect_storeans, (5) dissect_storereq, (6) dissect_storeddataspecifier, (7) dissect_fetchreq, (8) dissect_findans, (9) dissect_diagnosticinfo, (10) dissect_diagnosticresponse, (11) dissect_reload_messagecontents, and (12) dissect_reload_message functions, a different vulnerability than CVE-2013-2486.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-reload.c?r1=47808&r2=47807&pathrev=47808; http://anonsvn.wireshark.org/viewvc?view=revision&revision=47808; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html
CVE: CVE-2013-2488
Published: 2013-03-07
Description: The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a denial of service (application crash) via a large offset value that triggers write access to an invalid memory location.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=48011; http://lists.opensuse.org/opensuse-updates/2013-03/msg00065.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00077.html
CVE: CVE-2013-2493
Published: 2013-03-07
Description: The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allows user-assisted remote attackers to cause a denial of service (application crash) via an _blank value for the target attribute of an A element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/03/beta-channel-update.html; http://src.chromium.org/viewvc/chrome/trunk/src/chrome_frame/protocol_sink_wrap.cc?r1=185956&r2=185955&pathrev=185956; http://src.chromium.org/viewvc/chrome?view=rev&revision=185956
CVE: CVE-2010-5107
Published: 2013-03-07
Description: The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1375&w=2; http://rhn.redhat.com/errata/RHSA-2013-1591.html; http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c?r1=1.234#rev1.234
CVE: CVE-2013-1153
Published: 2013-03-07
Description: Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCue84676.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1153; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1153
CVE: CVE-2013-1154
Published: 2013-03-07
Description: The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://jvn.jp/en/jp/JVN05132866/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017; http://tools.cisco.com/security/center/viewAlert.x?alertId=27502
CVE: CVE-2012-4066
Published: 2013-03-08
Description: The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08; http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08
CVE: CVE-2013-0401
Published: 2013-03-08
Description: The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/; http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
CVE: CVE-2013-0402
Published: 2013-03-08
Description: Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors related to JavaFX, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157; http://rhn.redhat.com/errata/RHSA-2013-0757.html; http://www.oracle.com/technetwork/topics/security/javacpuapr2[PII_REDACTED].html
CVE: CVE-2013-1488
Published: 2013-03-08
Description: The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/; http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/; http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
CVE: CVE-2013-1491
Published: 2013-03-08
Description: The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880; http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157; http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html
CVE: CVE-2013-1656
Published: 2013-03-08
Description: Spree Commerce 1.0.x through 1.3.2 allows remote authenticated administrators to instantiate arbitrary Ruby objects and execute arbitrary commands via the (1) payment_method parameter to core/app/controllers/spree/admin/payment_methods_controller.rb; and the (2) promotion_action parameter to promotion_actions_controller.rb, (3) promotion_rule parameter to promotion_rules_controller.rb, and (4) calculator_type parameter to promotions_controller.rb in promo/app/controllers/spree/admin/, related to unsafe use of the constantize function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://blog.conviso.com.br/2013/03/spree-commerce-multiple-unsafe.html; http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed; https://www.conviso.com.br/advisories/CVE-2013-1656.txt
CVE: CVE-2013-1762
Published: 2013-03-08
Description: stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-94
References: http://rhn.redhat.com/errata/RHSA-2013-0714.html; http://www.debian.org/security/2013/dsa-2664; http://www.mandriva.com/security/advisories?name=MDVSA-2013:130
CVE: CVE-2013-2506
Published: 2013-03-08
Description: app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed; https://github.com/spree/spree_auth_devise/commit/038d74771d3b5c13d13b738b73dfda1033a99f65; http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
CVE: CVE-2011-3201
Published: 2013-03-08
Description: GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2013-0516.html; http://www.oracle.com/technetwork/topics/security/bulletinjan2[PII_REDACTED].html; https://bugzilla.gnome.org/show_bug.cgi?id=657374
CVE: CVE-2013-0261
Published: 2013-03-08
Description: A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system compromise or data corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59, CWE-264
References: http://rhn.redhat.com/errata/RHSA-2013-0595.html; https://access.redhat.com/security/cve/CVE-2013-0261; https://bugzilla.redhat.com/show_bug.cgi?id=908101
CVE: CVE-2013-0266
Published: 2013-03-08
Description: A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world-readable permissions, on the `cinder.conf` and `api-paste.ini` configuration files. A local user can exploit this by reading these files, which leads to the disclosure of OpenStack administrative passwords. This information disclosure could allow unauthorized access to sensitive OpenStack resources.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-362
References: http://rhn.redhat.com/errata/RHSA-2013-0595.html; https://access.redhat.com/security/cve/CVE-2013-0266; https://bugzilla.redhat.com/show_bug.cgi?id=908581
CVE: CVE-2013-0308
Published: 2013-03-08
Description: The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586; http://lists.apple.com/archives/security-announce/2013/Sep/msg00007.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00005.html
CVE: CVE-2011-2504
Published: 2013-03-08
Description: Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://lists.freedesktop.org/archives/xorg-announce/2011-July/001715.html; http://rhn.redhat.com/errata/RHSA-2013-0502.html; http://www.securityfocus.com/bid/58082
CVE: CVE-2011-4969
Published: 2013-03-08
Description: Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.jquery.com/2011/09/01/jquery-1-6-3-released/; http://blog.mindedsecurity.com/2011/07/jquery-is-sink.html; http://bugs.jquery.com/ticket/9521
CVE: CVE-2013-0249
Published: 2013-03-08
Description: Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://blog.volema.com/curl-rce.html; http://curl.haxx.se/docs/adv_20130206.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-1050
Published: 2013-03-08
Description: The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate attackers to bypass screen locking and access an unattended workstation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.ubuntu.com/usn/USN-1716-1; https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1120126; https://bugzilla.gnome.org/show_bug.cgi?id=683060