deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0639
Published: 2013-02-12
Description: Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-0642
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-0644
Published: 2013-02-12
Description: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0649 and CVE-2013-1374.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-0645
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-0647
Published: 2013-02-12
Description: Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-0649
Published: 2013-02-12
Description: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-1374.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1365
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1366
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1367
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1368
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1369
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1370
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1372, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1372
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1373.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1373
Published: 2013-02-12
Description: Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1372.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2013-1374
Published: 2013-02-12
Description: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-0649.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html
CVE: CVE-2012-6075
Published: 2013-02-13
Description: Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.
CVSS Score: 9.3 (HIGH)
CWE: CWE-120
References: http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb; http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.html
CVE: CVE-2013-0152
Published: 2013-02-13
Description: Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/55082; http://security.gentoo.org/glsa/glsa-201309-24.xml; http://www.openwall.com/lists/oss-security/2013/01/23/8
CVE: CVE-2013-0190
Published: 2013-02-13
Description: The xen_failsafe_callback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of service (guest crash) by triggering an iret fault, leading to use of an incorrect stack pointer and stack corruption.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2013-0496.html; http://www.openwall.com/lists/oss-security/2013/01/16/6; http://www.openwall.com/lists/oss-security/2013/01/16/8
CVE: CVE-2013-0231
Published: 2013-02-13
Description: The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are obtained from third party information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html; http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
CVE: CVE-2013-0238
Published: 2013-02-13
Description: The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267; http://osvdb.org/89623; http://secunia.com/advisories/51948
CVE: CVE-2013-0241
Published: 2013-02-13
Description: The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service (guest crash or hang) via a SPICE connection that prevents other threads from obtaining the qemu_mutex mutex.  NOTE: some of these details are obtained from third party information.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2013-0218.html; http://secunia.com/advisories/52021; http://www.mandriva.com/security/advisories?name=MDVSA-2013:138
CVE: CVE-2013-0255
Published: 2013-02-13
Description: PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html; http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html
CVE: CVE-2013-0265
Published: 2013-02-13
Description: The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/02/06/2; http://www.openwall.com/lists/oss-security/2013/02/07/5; http://www.osvdb.org/90008
CVE: CVE-2013-0269
Published: 2013-02-13
Description: The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka "Unsafe Object Creation Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html
CVE: CVE-2013-0276
Published: 2013-02-13
Description: ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html; http://rhn.redhat.com/errata/RHSA-2013-0686.html
CVE: CVE-2013-0277
Published: 2013-02-13
Description: ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html; http://secunia.com/advisories/52112
CVE: CVE-2013-1453
Published: 2013-02-13
Description: plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter.  Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.
CVSS Score: 7.5 (HIGH)
References: http://developer.joomla.org/security/news/[PII_REDACTED]1-core-information-disclosure.html; http://karmainsecurity.com/KIS-2013-03; http://karmainsecurity.com/analysis-of-the-joomla-php-object-injection-vulnerability
CVE: CVE-2013-1454
Published: 2013-02-13
Description: Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to "Coding errors."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://developer.joomla.org/security/news/[PII_REDACTED]3-core-information-disclosure.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/81927; http://developer.joomla.org/security/news/[PII_REDACTED]3-core-information-disclosure.html
CVE: CVE-2013-1455
Published: 2013-02-13
Description: Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://developer.joomla.org/security/news/[PII_REDACTED]2-core-information-disclosure.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/81926; http://developer.joomla.org/security/news/[PII_REDACTED]2-core-information-disclosure.html
CVE: CVE-2013-0015
Published: 2013-02-13
Description: Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16371
CVE: CVE-2013-0018
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SetCapture Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16438
CVE: CVE-2013-0019
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://blog.skylined.nl/[PII_REDACTED]1.html; http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009
CVE: CVE-2013-0020
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CMarkup Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15875
CVE: CVE-2013-0021
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer vtable Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://lists.apache.org/thread.html/r1c07a561426ec[PII_REDACTED]ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E