deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-5191
Published: 2013-10-24
Description: The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveraging access to the Guest account and reading console-log messages from previous Guest sessions.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-5192
Published: 2013-10-24
Description: The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a request with a crafted (1) port or (2) port number.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
CVE: CVE-2013-6246
Published: 2013-10-24
Description: The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/123703/quest-captcha.txt; http://www.securityfocus.com/bid/63259; http://packetstormsecurity.com/files/123703/quest-captcha.txt
CVE: CVE-2013-1733
Published: 2013-10-24
Description: Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.bugzilla.org/security/4.0.10/; https://bugzilla.mozilla.org/show_bug.cgi?id=911593; http://www.bugzilla.org/security/4.0.10/
CVE: CVE-2013-1734
Published: 2013-10-24
Description: Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that commit an attachment change via an update action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.bugzilla.org/security/4.0.10/; https://bugzilla.mozilla.org/show_bug.cgi?id=913904; http://www.bugzilla.org/security/4.0.10/
CVE: CVE-2013-1742
Published: 2013-10-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) sortkey parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.bugzilla.org/security/4.0.10/; https://bugzilla.mozilla.org/show_bug.cgi?id=924802; http://www.bugzilla.org/security/4.0.10/
CVE: CVE-2013-1743
Published: 2013-10-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the (1) summary or (2) real name field.  NOTE: this issue exists because of an incomplete fix for CVE-2012-4189.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.bugzilla.org/security/4.0.10/; https://bugzilla.mozilla.org/show_bug.cgi?id=924932; http://www.bugzilla.org/security/4.0.10/
CVE: CVE-2013-4299
Published: 2013-10-24
Description: Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-200, CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9c6a182649f4259db704ae15a91ac820e63b0ca; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE: CVE-2013-4443
Published: 2013-10-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2013-5130
Published: 2013-10-24
Description: WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
CVE: CVE-2013-5143
Published: 2013-10-24
Description: The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html
CVE: CVE-2013-5148
Published: 2013-10-24
Description: Apple Keynote before 6.0 does not properly handle the interaction between Keynote presentation mode and the Screen Lock implementation, which allows physically proximate attackers to obtain access by visiting an unattended workstation on which this mode was enabled during a sleep operation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00005.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00005.html
CVE: CVE-2013-5536
Published: 2013-10-24
Description: Cisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall rule, which allows remote attackers to cause a denial of service (process crash) via a flood of crafted packets, aka Bug ID CSCui51521.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5536; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5536
CVE: CVE-2013-5537
Published: 2013-10-24
Description: The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA) devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service (management GUI outage) via multiple TCP connections, aka Bug IDs CSCuj59411, CSCuf89818, and CSCuh05635.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5537
CVE: CVE-2013-3280
Published: 2013-10-25
Description: EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2013-10/0115.html; http://archives.neohapsis.com/archives/bugtraq/2013-10/0115.html
CVE: CVE-2013-5521
Published: 2013-10-25
Description: Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers to cause a denial of service (exhaustion of the account supply) via a series of requests within one session, aka Bug ID CSCue94287.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5521; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5521
CVE: CVE-2013-5522
Published: 2013-10-25
Description: Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5522; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5522
CVE: CVE-2013-5530
Published: 2013-10-25
Description: The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.3 before 1.1.3.124-7, 1.1.4 before 1.1.4.218-7, and 1.2 before 1.2.0.899-2 allows remote authenticated users to execute arbitrary commands via a crafted session on TCP port 443, aka Bug ID CSCuh81511.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise; http://www.kb.cert.org/vuls/id/952422; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise
CVE: CVE-2013-5531
Published: 2013-10-25
Description: Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read support-bundle configuration and credentials data, via a crafted session on TCP port 443, aka Bug ID CSCty20405.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise
CVE: CVE-2013-5549
Published: 2013-10-25
Description: Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service (transmission outage) via (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCuh30380.
CVSS Score: 7.1 (HIGH)
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr
CVE: CVE-2013-6280
Published: 2013-10-25
Description: Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://wordpress.org/plugins/social-sharing-toolkit/changelog; http://wordpress.org/plugins/social-sharing-toolkit/changelog
CVE: CVE-2013-6281
Published: 2013-10-25
Description: Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "page" parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/98831; http://packetstormsecurity.com/files/123699/WordPress-dhtmlxspreadsheet-Cross-Site-Scripting.html; http://secunia.com/advisories/55396
CVE: CVE-2013-3989
Published: 2013-10-25
Description: IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.
CVSS Score: 3.5 (LOW)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg21653287; https://exchange.xforce.ibmcloud.com/vulnerabilities/84975; http://www-01.ibm.com/support/docview.wss?uid=swg21653287
CVE: CVE-2013-5424
Published: 2013-10-25
Description: IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC96952; http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093938; https://exchange.xforce.ibmcloud.com/vulnerabilities/87486
CVE: CVE-2013-6127
Published: 2013-10-25
Description: The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the two pathname arguments, as demonstrated by a directory traversal attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-295-01; http://www.exploit-db.com/exploits/28084/; http://ics-cert.us-cert.gov/advisories/ICSA-13-295-01
CVE: CVE-2013-6128
Published: 2013-10-25
Description: The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict SaveToFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the single pathname argument, as demonstrated by a directory traversal attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-295-01; http://www.exploit-db.com/exploits/28085/; http://ics-cert.us-cert.gov/advisories/ICSA-13-295-01
CVE: CVE-2013-1067
Published: 2013-10-25
Description: Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://www.ubuntu.com/usn/USN-2007-1; http://www.ubuntu.com/usn/USN-2007-1
CVE: CVE-2013-4421
Published: 2013-10-25
Description: The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119300.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119323.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html
CVE: CVE-2013-4434
Published: 2013-10-25
Description: Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00061.html; http://lists.opensuse.org/opensuse-updates/2013-11/msg00046.html; http://secunia.com/advisories/55173
CVE: CVE-2013-4465
Published: 2013-10-25
Description: Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
CVSS Score: 4.6 (MEDIUM)
References: http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt; http://www.openwall.com/lists/oss-security/2013/10/23/6; http://www.openwall.com/lists/oss-security/2013/10/25/3
CVE: CVE-2013-4957
Published: 2013-10-25
Description: The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/98639; http://puppetlabs.com/security/cve/cve-2013-4957; http://secunia.com/advisories/55362
CVE: CVE-2013-4965
Published: 2013-10-25
Description: Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://osvdb.org/98640; http://puppetlabs.com/security/cve/cve-2013-4965; http://osvdb.org/98640
CVE: CVE-2013-6283
Published: 2013-10-25
Description: VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a URL in a m3u file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/27700; http://www.osvdb.org/96603; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19318
CVE: CVE-2011-4106
Published: 2013-10-26
Description: TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited in the wild in August 2011.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/timthumb/issues/detail?id=212; http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/; http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/
CVE: CVE-2013-6284
Published: 2013-10-26
Description: Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module for SAP ERP Central Component (ECC) allows attackers to execute arbitrary code via unspecified vectors, related to a "code injection vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://scn.sap.com/docs/DOC-8218; http://www.layersevensecurity.com/docs/Layer%20Seven%20Security_Advisory_September%202013.pdf; https://service.sap.com/sap/support/notes/
CVE: CVE-2013-1445
Published: 2013-10-26
Description: The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://www.debian.org/security/2013/dsa-2781; http://www.openwall.com/lists/oss-security/2013/10/17/3; https://github.com/dlitz/pycrypto/commit/19dcf7b15d61b7dc1a125a367151de40df6ef175
CVE: CVE-2013-4885
Published: 2013-10-26
Description: The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00030.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00035.html; http://nmap.org/changelog.html
CVE: CVE-2013-5914
Published: 2013-10-26
Description: Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2013/dsa-2782; https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-04; http://www.debian.org/security/2013/dsa-2782
CVE: CVE-2013-6016
Published: 2013-10-26
Description: The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAccelerator 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.3.0 might change a TCP connection to the ESTABLISHED state before receiving the ACK packet, which allows remote attackers to cause a denial of service (SIGFPE or assertion failure and TMM restart) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/55378; http://support.f5.com/kb/en-us/solutions/public/13000/200/sol13233.html; http://www.securitytracker.com/id/1029220
CVE: CVE-2013-0337
Published: 2013-10-27
Description: The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/55181; http://security.gentoo.org/glsa/glsa-201310-04.xml; http://www.openwall.com/lists/oss-security/2013/02/21/15
CVE: CVE-2013-4122
Published: 2013-10-27
Description: Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://git.cyrusimap.org/cyrus-sasl/commit/?id=dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d; http://security.gentoo.org/glsa/glsa-201309-01.xml; http://www.debian.org/security/2015/dsa-3368
CVE: CVE-2013-4301
Published: 2013-10-27
Description: includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a "<" (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html; http://osvdb.org/96913; http://seclists.org/oss-sec/2013/q3/553
CVE: CVE-2013-4302
Published: 2013-10-27
Description: (1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5) ApiQueryDeletedrevs.php, (6) ApiTokens.php, and (7) ApiUnblock.php in includes/api/ in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow remote attackers to obtain CSRF tokens and bypass the cross-site request forgery (CSRF) protection mechanism via a JSONP request to wiki/api.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html; http://osvdb.org/96912; http://seclists.org/oss-sec/2013/q3/553
CVE: CVE-2013-4428
Published: 2013-10-27
Description: OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download_image policy is configured, does not properly restrict access to cached images, which allows remote authenticated users to read otherwise restricted images via an image UUID.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2013-1525.html; http://www.openwall.com/lists/oss-security/2013/10/15/8; http://www.openwall.com/lists/oss-security/2013/10/16/9
CVE: CVE-2013-5430
Published: 2013-10-28
Description: The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-255
References: http://www-01.ibm.com/support/docview.wss?uid=swg21653287; https://exchange.xforce.ibmcloud.com/vulnerabilities/87562; http://www-01.ibm.com/support/docview.wss?uid=swg21653287
CVE: CVE-2013-6018
Published: 2013-10-28
Description: Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.kb.cert.org/vuls/id/911678; http://www.kb.cert.org/vuls/id/911678