deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-4284
Published: 2013-10-09
Description: Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted Ajax update request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2013-1294.html; http://rhn.redhat.com/errata/RHSA-2013-1295.html; http://www.securitytracker.com/id/1029122
CVE: CVE-2013-4384
Published: 2013-10-09
Description: Cross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/97503; http://www.securityfocus.com/bid/62495; https://drupal.org/node/2092395
CVE: CVE-2013-4385
Published: 2013-10-09
Description: Buffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8.0.5 and development snapshots before 4.8.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via a "#f" value in the NUM argument.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.gnu.org/archive/html/chicken-announce/2013-10/msg00000.html; http://lists.nongnu.org/archive/html/chicken-announce/2013-09/msg00000.html; http://lists.nongnu.org/archive/html/chicken-announce/2013-09/msg00001.html
CVE: CVE-2013-5325
Published: 2013-10-09
Description: Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.adobe.com/support/security/bulletins/apsb13-25.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19053; http://www.adobe.com/support/security/bulletins/apsb13-25.html
CVE: CVE-2013-5327
Published: 2013-10-09
Description: MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb13-24.html; http://www.adobe.com/support/security/bulletins/apsb13-24.html
CVE: CVE-2013-5576
Published: 2013-10-09
Description: administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://developer.joomla.org/security/[PII_REDACTED]1-core-unauthorised-uploads.html; http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626; http://seclists.org/oss-sec/2013/q3/484
CVE: CVE-2013-5967
Published: 2013-10-09
Description: Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the date_from parameter to (1) radar-iso27001-potential.php, (2) radar-iso27001-A12IS_acquisition-pot.php, (3) radar-iso27001-A11AccessControl-pot.php, (4) radar-iso27001-A10Com_OP_Mgnt-pot.php, or (5) radar-pci-potential.php in RadarReport/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/98052; http://osvdb.org/ref/97/ossim-sql.txt; http://www.securityfocus.com/bid/62790
CVE: CVE-2013-4379
Published: 2013-10-09
Description: The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access restrictions for a poll via a direct request to the node's URL instead of the hashed URL.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54634; http://www.openwall.com/lists/oss-security/2013/09/27/6; https://drupal.org/node/2081637
CVE: CVE-2012-4412
Published: 2013-10-09
Description: Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://seclists.org/fulldisclosure/2019/Jun/18; http://secunia.com/advisories/55113
CVE: CVE-2012-4424
Published: 2013-10-09
Description: Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://sourceware.org/bugzilla/show_bug.cgi?id=14547; http://www.mandriva.com/security/advisories?name=MDVSA-2013:283; http://www.mandriva.com/security/advisories?name=MDVSA-2013:284
CVE: CVE-2013-0736
Published: 2013-10-09
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/96905; http://secunia.com/advisories/47687; http://secunia.com/secunia_research/2013-6
CVE: CVE-2013-2207
Published: 2013-10-09
Description: pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
CVSS Score: 2.6 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html; http://secunia.com/advisories/55113
CVE: CVE-2013-4237
Published: 2013-10-09
Description: sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted (1) NTFS or (2) CIFS image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/55113; http://www.mandriva.com/security/advisories?name=MDVSA-2013:283; http://www.openwall.com/lists/oss-security/2013/08/12/8
CVE: CVE-2013-4332
Published: 2013-10-09
Description: Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://rhn.redhat.com/errata/RHSA-2013-1411.html; http://rhn.redhat.com/errata/RHSA-2013-1605.html; http://secunia.com/advisories/55113
CVE: CVE-2013-4356
Published: 2013-10-09
Description: Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54962; http://security.gentoo.org/glsa/glsa-201407-03.xml; http://www.openwall.com/lists/oss-security/2013/09/30/2
CVE: CVE-2013-1881
Published: 2013-10-10
Description: GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://en.securitylab.ru/lab/PT-2013-01; http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.39/librsvg-2.39.0.changes; http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00020.html
CVE: CVE-2013-2138
Published: 2013-10-10
Description: The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://galleryproject.org/gallery_3_0_8; http://sourceforge.net/apps/trac/gallery/ticket/2068; http://sourceforge.net/apps/trac/gallery/ticket/2070
CVE: CVE-2013-2240
Published: 2013-10-10
Description: lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.
CVSS Score: 7.5 (HIGH)
References: http://galleryproject.org/gallery_3_0_9; http://sourceforge.net/apps/trac/gallery/ticket/2073; http://www.openwall.com/lists/oss-security/2013/07/04/11
CVE: CVE-2013-2241
Published: 2013-10-10
Description: modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information (image files) via the "full" string in the size parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://galleryproject.org/gallery_3_0_9; http://sourceforge.net/apps/trac/gallery/ticket/2074; http://www.openwall.com/lists/oss-security/2013/07/04/11
CVE: CVE-2013-4221
Published: 2013-10-10
Description: The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16, CWE-91
References: http://blog.diniscruz.com/2013/08/using-xmldecoder-to-execute-server-side.html; http://restlet.org/learn/2.1/changes; http://rhn.redhat.com/errata/RHSA-2013-1410.html
CVE: CVE-2013-4271
Published: 2013-10-10
Description: The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: http://restlet.org/learn/2.1/changes; http://rhn.redhat.com/errata/RHSA-2013-1410.html; http://rhn.redhat.com/errata/RHSA-2013-1862.html
CVE: CVE-2013-4342
Published: 2013-10-10
Description: xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service.
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2013-1409.html; https://bugzilla.redhat.com/show_bug.cgi?id=1006100; https://github.com/xinetd-org/xinetd/pull/10
CVE: CVE-2013-4351
Published: 2013-10-10
Description: GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00003.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00006.html; http://rhn.redhat.com/errata/RHSA-2013-1459.html
CVE: CVE-2013-4767
Published: 2013-10-10
Description: Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/98180; http://www.eucalyptus.com/resources/security/advisories; http://osvdb.org/98180
CVE: CVE-2013-0577
Published: 2013-10-10
Description: The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21651990; https://exchange.xforce.ibmcloud.com/vulnerabilities/83329; http://www-01.ibm.com/support/docview.wss?uid=swg21651990
CVE: CVE-2013-0579
Published: 2013-10-10
Description: The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (1) before or (2) after authentication.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21651990; https://exchange.xforce.ibmcloud.com/vulnerabilities/83331; http://www-01.ibm.com/support/docview.wss?uid=swg21651990
CVE: CVE-2013-0580
Published: 2013-10-10
Description: Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg21651990; https://exchange.xforce.ibmcloud.com/vulnerabilities/83332; http://www-01.ibm.com/support/docview.wss?uid=swg21651990
CVE: CVE-2013-3409
Published: 2013-10-10
Description: The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary files, which allows local users to obtain sensitive information by leveraging weak file permissions to read these files, aka Bug IDs CSCuh33735 and CSCuh34230.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3409; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3409
CVE: CVE-2013-4345
Published: 2013-10-10
Description: Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-189
References: http://marc.info/?l=linux-crypto-vger&m=[PII_REDACTED]2845&w=2; http://rhn.redhat.com/errata/RHSA-2013-1449.html; http://rhn.redhat.com/errata/RHSA-2013-1490.html
CVE: CVE-2013-4387
Published: 2013-10-10
Description: net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47; http://rhn.redhat.com/errata/RHSA-2013-1490.html; http://rhn.redhat.com/errata/RHSA-2013-1645.html
CVE: CVE-2013-4396
Published: 2013-10-10
Description: Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00056.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00060.html; http://lists.x.org/archives/xorg-announce/2013-October/002332.html
CVE: CVE-2013-5008
Published: 2013-10-10
Description: The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive information about package-server access, or cause a denial of service, by leveraging knowledge of this key.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/62757; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20131008_00; http://www.securityfocus.com/bid/62757
CVE: CVE-2013-5499
Published: 2013-10-10
Description: The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload) by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822.
CVSS Score: 5.7 (MEDIUM)
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5499; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5499
CVE: CVE-2013-5523
Published: 2013-10-10
Description: The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCui82666.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/98168; http://secunia.com/advisories/55207; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5523
CVE: CVE-2013-5524
Published: 2013-10-10
Description: Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/98166; http://secunia.com/advisories/55067; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5524
CVE: CVE-2013-5525
Published: 2013-10-10
Description: SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/98167; http://secunia.com/advisories/55098; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5525
CVE: CVE-2013-5526
Published: 2013-10-10
Description: Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf06698.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://osvdb.org/98254; http://secunia.com/advisories/55231; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5526
CVE: CVE-2013-5527
Published: 2013-10-10
Description: The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/98253; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5527; http://www.securityfocus.com/bid/62904
CVE: CVE-2013-5528
Published: 2013-10-11
Description: Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/98336; http://packetstormsecurity.com/files/140071/Cisco-Unified-Communications-Manager-7-8-9-Directory-Traversal.html; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5528
CVE: CVE-2013-5532
Published: 2013-10-11
Description: Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp interface outage) via long values in unspecified fields, aka Bug ID CSCuh10343.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/98338; http://secunia.com/advisories/55275; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5532
CVE: CVE-2013-5533
Published: 2013-10-11
Description: The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/98337; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5533; http://www.securityfocus.com/bid/62943
CVE: CVE-2013-2578
Published: 2013-10-11
Description: cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2) other unspecified parameters.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras; http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
CVE: CVE-2013-2579
Published: 2013-10-11
Description: TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras; http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
CVE: CVE-2013-2580
Published: 2013-10-11
Description: Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allows remote attackers to upload arbitrary files, then accessing it via a direct request to the file in the mnt/mtd directory.
CVSS Score: 7.1 (HIGH)
References: http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras; http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
CVE: CVE-2013-2581
Published: 2013-10-11
Description: cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to modify the firmware revision via a "preset" action.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/54155; http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras; http://secunia.com/advisories/54155
CVE: CVE-2013-3686
Published: 2013-10-11
Description: cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2013/Jun/84; http://seclists.org/fulldisclosure/2013/Jun/84
CVE: CVE-2013-3687
Published: 2013-10-11
Description: AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://seclists.org/fulldisclosure/2013/Jun/84; http://seclists.org/fulldisclosure/2013/Jun/84