deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-5975
Published: 2013-10-01
Description: The access policy logon page (logon.inc) in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54844; http://support.f5.com/kb/en-us/solutions/public/14000/700/sol14700.html; http://www.securitytracker.com/id/1029079
CVE: CVE-2013-5976
Published: 2013-10-01
Description: Cross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRH_Session cookie.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/54941; http://support.f5.com/kb/en-us/solutions/public/14000/700/sol14712.html; http://www.securityfocus.com/bid/62596
CVE: CVE-2013-2906
Published: 2013-10-02
Description: Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp, core/platform/audio/AudioDSPKernelProcessor.cpp, core/platform/audio/HRTFElevation.cpp, and modules/webaudio/ConvolverNode.cpp.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2907
Published: 2013-10-02
Description: The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2908
Published: 2013-10-02
Description: Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.
CVSS Score: 5.0 (MEDIUM)
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2909
Published: 2013-10-02
Description: Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2910
Published: 2013-10-02
Description: Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2911
Published: 2013-10-02
Description: Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of post-failure recompilation in unspecified libxslt versions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2912
Published: 2013-10-02
Description: Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_process_router.cc in the Pepper Plug-in API (PPAPI) in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a resource-destruction message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2913
Published: 2013-10-02
Description: Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2914
Published: 2013-10-02
Description: Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2915
Published: 2013-10-02
Description: Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL.
CVSS Score: 4.3 (MEDIUM)
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2916
Published: 2013-10-02
Description: Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code, in conjunction with a delay in notifying the user of an attempted spoof.
CVSS Score: 4.3 (MEDIUM)
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2917
Published: 2013-10-02
Description: The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2918
Published: 2013-10-02
Description: Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect handling of parent-child relationships for anonymous blocks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2919
Published: 2013-10-02
Description: Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2920
Published: 2013-10-02
Description: The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via a relative URL containing a hostname, as demonstrated by a protocol-relative URL beginning with a //www.google.com/ substring.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2921
Published: 2013-10-02
Description: Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering certain callback processing during the reporting of a resource entry.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2922
Published: 2013-10-02
Description: Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2923
Published: 2013-10-02
Description: Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
CVE: CVE-2013-2924
Published: 2013-10-02
Description: Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://bugs.icu-project.org/trac/ticket/10318; http://googlechromereleases.blogspot.com/2013/10/stable-channel-update.html; http://jvn.jp/en/jp/JVN85336306/index.html
CVE: CVE-2013-4032
Published: 2013-10-02
Description: The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote attackers to cause a denial of service via vectors involving arbitrary data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC94434; http://www-01.ibm.com/support/docview.wss?uid=swg1IC94939; http://www-01.ibm.com/support/docview.wss?uid=swg21650231
CVE: CVE-2012-2497
Published: 2013-10-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-3497, CVE-2012-6400.  Reason: This candidate is a duplicate of CVE-2012-3497 and CVE-2012-6400.  Notes: All CVE users should reference CVE-2012-3497 (an issue in Xen) or CVE-2012-6400 (an issue not in Xen) instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-4095
Published: 2013-10-02
Description: The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, and read or modify arbitrary files, via unspecified key bindings, aka Bug ID CSCtn04521.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/55135; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4095; http://secunia.com/advisories/55135
CVE: CVE-2012-4102
Published: 2013-10-02
Description: The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02600.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4102; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4102
CVE: CVE-2012-4103
Published: 2013-10-02
Description: ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02686.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4103; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4103
CVE: CVE-2012-4104
Published: 2013-10-02
Description: Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-22
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4104; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4104
CVE: CVE-2012-4109
Published: 2013-10-02
Description: The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86559.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4109; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4109
CVE: CVE-2012-4110
Published: 2013-10-02
Description: run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86560.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4110; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4110
CVE: CVE-2012-4111
Published: 2013-10-02
Description: The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86563.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4111; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4111
CVE: CVE-2013-4066
Published: 2013-10-02
Description: IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg21651343; http://www.securityfocus.com/bid/62767; https://exchange.xforce.ibmcloud.com/vulnerabilities/86597
CVE: CVE-2013-4067
Published: 2013-10-02
Description: IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg21651343; http://www.securityfocus.com/bid/62768; https://exchange.xforce.ibmcloud.com/vulnerabilities/86598
CVE: CVE-2013-5503
Published: 2013-10-02
Description: The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka Bug ID CSCue69413.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131002-iosxr; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131002-iosxr
CVE: CVE-2013-5517
Published: 2013-10-02
Description: SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/98019; http://secunia.com/advisories/54847; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5517
CVE: CVE-2013-5979
Published: 2013-10-02
Description: Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00; https://bugs.launchpad.net/xibo/+bug/1093967; http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00
CVE: CVE-2012-4136
Published: 2013-10-03
Description: The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service (peer-syncing outage) via a TELNET connection, aka Bug ID CSCtz72910.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54171; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVS-2012-4136; http://secunia.com/advisories/54171
CVE: CVE-2013-0689
Published: 2013-10-03
Description: The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01; http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE: CVE-2013-0692
Published: 2013-10-03
Description: The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary code by connecting to the debug service.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01; http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE: CVE-2013-0693
Published: 2013-10-03
Description: The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive information about device presence by listening for broadcast traffic.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01; http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE: CVE-2013-0694
Published: 2013-10-03
Description: The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by leveraging knowledge of the ROM contents from a product installation elsewhere.
CVSS Score: 9.0 (HIGH)
CWE: CWE-255
References: http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01; http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01
CVE: CVE-2013-3593
Published: 2013-10-03
Description: Baramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and (2) data storage, which allows remote attackers to obtain sensitive information by sniffing the network, and allows context-dependent attackers to obtain sensitive information by reading a file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/392654; http://www.kb.cert.org/vuls/id/392654
CVE: CVE-2013-3624
Published: 2013-10-03
Description: The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in cleartext on deployed machines, which allows remote attackers to obtain sensitive information by reading a file. NOTE: this ID was also incorrectly mapped to a separate issue in Oracle Outside In, but the correct ID for that issue is CVE-2013-5763.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/392654; http://www.kb.cert.org/vuls/id/392654
CVE: CVE-2013-3625
Published: 2013-10-03
Description: An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/392654; http://www.kb.cert.org/vuls/id/392654
CVE: CVE-2013-5519
Published: 2013-10-03
Description: Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/98083; http://secunia.com/advisories/55171; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5519