deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-1208
Published: 2013-05-29
Description: The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID CSCud14691.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1208; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1208
CVE: CVE-2013-1209
Published: 2013-05-29
Description: The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via crafted packets, aka Bug ID CSCud14710.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1209; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1209
CVE: CVE-2013-1210
Published: 2013-05-29
Description: Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service (ESXi crash and purple screen of death) by sending crafted STUN packets to a VEM, aka Bug ID CSCud14825.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1210; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1210
CVE: CVE-2013-1211
Published: 2013-05-29
Description: Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM access via (1) spoofed STUN packets or (2) a crafted VMware ESXi instance, aka Bug ID CSCud14832.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211
CVE: CVE-2013-1212
Published: 2013-05-29
Description: The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module (VSM) to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1212; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1212
CVE: CVE-2013-1213
Published: 2013-05-29
Description: Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor Module (VSM), which allows remote attackers to cause a denial of service (false VEM unavailability report) via a flood of UDP packets, aka Bug ID CSCud14840.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1213; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1213
CVE: CVE-2013-2312
Published: 2013-05-29
Description: Cross-site scripting (XSS) vulnerability in the shopping-cart screen in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN52552792/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000041; http://svn.ec-cube.net/open_trac/changeset/22604
CVE: CVE-2013-2313
Published: 2013-05-29
Description: Session fixation vulnerability in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN00985872/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000042; http://svn.ec-cube.net/open_trac/changeset/22804
CVE: CVE-2013-2314
Published: 2013-05-29
Description: Cross-site scripting (XSS) vulnerability in the adminAuthorization function in data/class/helper/SC_Helper_Session.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL associated with the management screen.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN45306814/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000043; http://svn.ec-cube.net/open_trac/changeset/22826
CVE: CVE-2013-2315
Published: 2013-05-29
Description: data/class/pages/forgot/LC_Page_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN39699406/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000044; http://svn.ec-cube.net/open_trac/changeset/22580
CVE: CVE-2013-3130
Published: 2013-05-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-3660, CVE-2013-3661.  Reason: This candidate is a reservation duplicate of CVE-2013-3660 and CVE-2013-3661.  Notes: All CVE users should reference CVE-2013-3660 and/or CVE-2013-3661 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-3719
Published: 2013-05-31
Description: Cross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/53050; http://www.algisinfo.com/en/home-bottom/41-xss-in-aicontactsafe.html; http://secunia.com/advisories/53050
CVE: CVE-2013-3720
Published: 2013-05-31
Description: Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wp_post_id parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://plugins.trac.wordpress.org/changeset?old_path=%2Ffeedweb&old=689612&new_path=%2Ffeedweb&new=689612; http://secunia.com/advisories/52855; http://wordpress.org/extend/plugins/feedweb/changelog/
CVE: CVE-2013-3721
Published: 2013-05-31
Description: SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL commands via the d parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/120976/PsychoStats-3.2.2b-Blind-SQL-Injection.html; http://www.exploit-db.com/exploits/24893; http://www.osvdb.org/91721
CVE: CVE-2013-1246
Published: 2013-05-31
Description: Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a denial of service (memory consumption and service outage) by establishing multiple SSH connections, aka Bug ID CSCug77610.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1246; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1246
CVE: CVE-2013-1247
Published: 2013-05-31
Description: Cross-site scripting (XSS) vulnerability in the wireless configuration module in Cisco Prime Infrastructure allows remote attackers to inject arbitrary web script or HTML via an SSID that is not properly handled during display of the XML windowing table, aka Bug ID CSCuf04356.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1247; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1247
CVE: CVE-2013-3315
Published: 2013-05-31
Description: The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role before executing a command, which allows authenticated users to gain privileges via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www.tibco.com/mk/advisory.jsp; http://www.tibco.com/multimedia/silver-mobile-advisory-2013-05-08_tcm8-18595.txt; http://www.tibco.com/services/support/advisories/silver-mobile-advisory_20130508.jsp
CVE: CVE-2013-3735
Published: 2013-05-31
Description: The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted function definition, as demonstrated by an attack within a shared web-hosting environment.  NOTE: the vendor's http://php.net/security-note.php page says "for critical security situations you should be using OS-level security by running multiple web servers each as their own user id.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugs.php.net/bug.php?id=64660; https://github.com/php/php-src/blob/php-5.4.16RC1/NEWS; https://github.com/php/php-src/blob/php-5.5.0RC2/NEWS
CVE: CVE-2012-3544
Published: 2013-06-01
Description: Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2013-05/0042.html; http://seclists.org/fulldisclosure/2014/Dec/23; http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/coyote/http11/filters/ChunkedInputFilter.java?r1=1476592&r2=1476591&pathrev=1476592
CVE: CVE-2013-0136
Published: 2013-06-01
Description: Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1) the uploadPath parameter in an UPLOAD operation; the paths[] parameter in a (2) DELETE, (3) CUT, or (4) COPY operation; or the newPath parameter in a (5) CUT or (6) COPY operation.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: http://www.kb.cert.org/vuls/id/701572; https://community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities; http://www.kb.cert.org/vuls/id/701572
CVE: CVE-2013-2067
Published: 2013-06-01
Description: java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2013-05/0041.html; http://rhn.redhat.com/errata/RHSA-2013-0833.html; http://rhn.redhat.com/errata/RHSA-2013-0834.html
CVE: CVE-2013-2071
Published: 2013-06-01
Description: java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request information intended for other applications in opportunistic circumstances via an application that records the requests that it processes.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2013-05/0040.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105855.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105886.html
CVE: CVE-2013-3261
Published: 2013-06-01
Description: Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/53111; http://wordpress.org/plugins/flash-album-gallery/changelog/; http://secunia.com/advisories/53111
CVE: CVE-2013-0549
Published: 2013-06-03
Description: Cross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM84525; http://www-01.ibm.com/support/docview.wss?uid=swg21638984; https://exchange.xforce.ibmcloud.com/vulnerabilities/82762
CVE: CVE-2013-2950
Published: 2013-06-03
Description: CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-94
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM85071; http://www-01.ibm.com/support/docview.wss?uid=swg21638864; https://exchange.xforce.ibmcloud.com/vulnerabilities/83618
CVE: CVE-2013-0464
Published: 2013-06-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/54971; http://secunia.com/advisories/55115; http://www-01.ibm.com/support/docview.wss?uid=swg21637954
CVE: CVE-2013-2316
Published: 2013-06-03
Description: The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307.
CVSS Score: 5.8 (MEDIUM)
References: http://jvn.jp/en/jp/JVN31817913/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000045; http://jvn.jp/en/jp/JVN31817913/index.html
CVE: CVE-2013-2317
Published: 2013-06-03
Description: The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window.
CVSS Score: 5.8 (MEDIUM)
References: http://jvn.jp/en/jp/JVN22756333/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000046; http://jvn.jp/en/jp/JVN22756333/index.html
CVE: CVE-2013-2970
Published: 2013-06-03
Description: Unspecified vulnerability in IBM QRadar Security Information and Event Manager (SIEM) 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg21639309; http://www.kb.cert.org/vuls/id/722868; https://exchange.xforce.ibmcloud.com/vulnerabilities/83872
CVE: CVE-2013-2854
Published: 2013-06-05
Description: Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=243339; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16796
CVE: CVE-2013-2855
Published: 2013-06-05
Description: The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=242322
CVE: CVE-2013-2856
Published: 2013-06-05
Description: Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=242224
CVE: CVE-2013-2857
Published: 2013-06-05
Description: Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of images.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=240124
CVE: CVE-2013-2858
Published: 2013-06-05
Description: Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=239897
CVE: CVE-2013-2859
Published: 2013-06-05
Description: Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=237022
CVE: CVE-2013-2860
Published: 2013-06-05
Description: Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving access to a database API by a worker process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=225546
CVE: CVE-2013-2861
Published: 2013-06-05
Description: Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=209604
CVE: CVE-2013-2862
Published: 2013-06-05
Description: Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=161077
CVE: CVE-2013-2863
Published: 2013-06-05
Description: Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=232633
CVE: CVE-2013-2864
Published: 2013-06-05
Description: The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; https://code.google.com/p/chromium/issues/detail?id=239134; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16736
CVE: CVE-2013-2865
Published: 2013-06-05
Description: Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.110 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2013/06/stable-channel-update.html; http://www.debian.org/security/2013/dsa-2706; https://code.google.com/p/chromium/issues/detail?id=164263
CVE: CVE-2013-0508
Published: 2013-06-05
Description: Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4.0.1 before FP1 allow context-dependent attackers to execute arbitrary code or cause a denial of service via a long line in (1) hrfstable.idx, (2) hrdevice.idx, (3) hrstorage.idx, or (4) lotusmapfile in the SSM Config directory, or (5) .manifest.hive in the main agent directory.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21638459; https://exchange.xforce.ibmcloud.com/vulnerabilities/82333; http://www-01.ibm.com/support/docview.wss?uid=swg21638459
CVE: CVE-2013-0509
Published: 2013-06-05
Description: Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 allows remote attackers to execute arbitrary code via a SQL transaction with a long table name that is not properly handled by a packet decoder.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21638183; https://exchange.xforce.ibmcloud.com/vulnerabilities/82334; http://www-01.ibm.com/support/docview.wss?uid=swg21638183
CVE: CVE-2013-3475
Published: 2013-06-05
Description: Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/52663; http://secunia.com/advisories/53704; http://www-01.ibm.com/support/docview.wss?uid=swg1IC92463
CVE: CVE-2013-0975
Published: 2013-06-05
Description: Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://support.apple.com/kb/HT5784; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2013-0982
Published: 2013-06-05
Description: The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation.
CVSS Score: 1.7 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://support.apple.com/kb/HT5784; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html