deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-4427
Published: 2014-05-19
Description: pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers to gain access to the keyboard or mouse without unlocking the screen via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2013/09/25/16; http://www.openwall.com/lists/oss-security/2013/10/16/8; https://github.com/leonnnn/pyxtrlock/blob/master/CHANGELOG
CVE: CVE-2013-4429
Published: 2014-05-19
Description: Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the (1) artefact id in an upload action when creating a journal or (2) instconf_artefactid_selected[ID] parameter in an upload action when editing a block.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/10/08/3; http://www.openwall.com/lists/oss-security/2013/10/15/1; http://www.openwall.com/lists/oss-security/2013/10/16/7
CVE: CVE-2013-4430
Published: 2014-05-19
Description: Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML via the Host header to lib/web.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2013/10/08/3; http://www.openwall.com/lists/oss-security/2013/10/15/1; http://www.openwall.com/lists/oss-security/2013/10/16/7
CVE: CVE-2013-4431
Published: 2014-05-19
Description: Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/10/08/3; http://www.openwall.com/lists/oss-security/2013/10/15/1; http://www.openwall.com/lists/oss-security/2013/10/16/7
CVE: CVE-2013-4432
Published: 2014-05-19
Description: Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary folders (1) by leveraging an active folder tab loaded before permissions were removed or (2) via the folder parameter to artefact/file/groupfiles.php.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2013/10/08/3; http://www.openwall.com/lists/oss-security/2013/10/15/1; http://www.openwall.com/lists/oss-security/2013/10/16/7
CVE: CVE-2013-6413
Published: 2014-05-19
Description: Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors.  NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7384 was assigned for the NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://forums.unrealircd.com/viewtopic.php?f=2&t=8221; http://seclists.org/oss-sec/2013/q4/379; http://seclists.org/oss-sec/2013/q4/383
CVE: CVE-2013-6764
Published: 2014-05-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6795.  Reason: This candidate is a duplicate of CVE-2013-6795.  A typo in an external publication caused this ID to be associated with the wrong vulnerability.  Notes: All CVE users should reference CVE-2013-6795 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-6765
Published: 2014-05-19
Description: OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://lists.wald.intevation.org/pipermail/openvas-announce/2013-November/000157.html; http://www.openvas.org/OVSA20131108.html; http://www.openwall.com/lists/oss-security/2013/11/10/2
CVE: CVE-2013-6766
Published: 2014-05-19
Description: OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://lists.wald.intevation.org/pipermail/openvas-announce/2013-November/000157.html; http://www.openvas.org/OVSA20131108.html; http://www.openwall.com/lists/oss-security/2013/11/10/2
CVE: CVE-2013-6805
Published: 2014-05-19
Description: OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover credentials by reading a .eod8 file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: https://github.com/koto/exceed-mitm; https://github.com/koto/exceed-mitm
CVE: CVE-2013-6806
Published: 2014-05-19
Description: OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://github.com/koto/exceed-mitm; https://github.com/koto/exceed-mitm
CVE: CVE-2013-6807
Published: 2014-05-19
Description: The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: https://github.com/koto/exceed-mitm; https://github.com/koto/exceed-mitm
CVE: CVE-2013-6994
Published: 2014-05-19
Description: OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-310
References: https://github.com/koto/exceed-mitm; https://github.com/koto/exceed-mitm
CVE: CVE-2013-7033
Published: 2014-05-19
Description: LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting (XSS) attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://forums.livezilla.net/index.php?/topic/163-livezilla-changelog/; http://packetstormsecurity.com/files/124444/LiveZilla-5.1.2.0-Insecure-Password-Storage.html; http://forums.livezilla.net/index.php?/topic/163-livezilla-changelog/
CVE: CVE-2013-7040
Published: 2014-05-19
Description: Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://bugs.python.org/issue14621; http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://www.openwall.com/lists/oss-security/2013/12/09/13
CVE: CVE-2013-7384
Published: 2014-05-19
Description: UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors, related to SSL.  NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types.
CVSS Score: 5.0 (MEDIUM)
References: http://forums.unrealircd.com/viewtopic.php?f=2&t=8221; http://seclists.org/oss-sec/2013/q4/379; http://seclists.org/oss-sec/2013/q4/383
CVE: CVE-2013-7385
Published: 2014-05-19
Description: LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting (XSS) attack.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7033.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://packetstormsecurity.com/files/124444/LiveZilla-5.1.2.0-Insecure-Password-Storage.html; http://packetstormsecurity.com/files/124444/LiveZilla-5.1.2.0-Insecure-Password-Storage.html
CVE: CVE-2014-0012
Published: 2014-05-19
Description: FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://seclists.org/oss-sec/2014/q1/73; http://secunia.com/advisories/56328; http://secunia.com/advisories/60738
CVE: CVE-2014-1402
Published: 2014-05-19
Description: The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://advisories.mageia.org/MGASA-2014-0028.html; http://jinja.pocoo.org/docs/changelog/; http://openwall.com/lists/oss-security/2014/01/10/2
CVE: CVE-2014-3411
Published: 2014-05-19
Description: Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/58684; http://www.securityfocus.com/bid/67445; http://www.securitytracker.com/id/1030253
CVE: CVE-2014-3714
Published: 2014-05-19
Description: The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2014/05/14/4; http://www.openwall.com/lists/oss-security/2014/05/15/6; http://www.openwall.com/lists/oss-security/2014/05/16/1
CVE: CVE-2014-3715
Published: 2014-05-19
Description: Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit guest kernel, related to searching for an appended DTB.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/05/14/4; http://www.openwall.com/lists/oss-security/2014/05/15/6; http://www.openwall.com/lists/oss-security/2014/05/16/1
CVE: CVE-2014-3716
Published: 2014-05-19
Description: Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel.
CVSS Score: 1.9 (LOW)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2014/05/14/4; http://www.openwall.com/lists/oss-security/2014/05/15/6; http://www.openwall.com/lists/oss-security/2014/05/16/1
CVE: CVE-2014-3717
Published: 2014-05-19
Description: Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2014/05/14/4; http://www.openwall.com/lists/oss-security/2014/05/15/6; http://www.openwall.com/lists/oss-security/2014/05/16/1
CVE: CVE-2014-3735
Published: 2014-05-19
Description: ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://packetstormsecurity.com/files/126640/Intel-Ideo-Video-4.5-Memory-Corruption.html; http://www.securityfocus.com/bid/67431; http://packetstormsecurity.com/files/126640/Intel-Ideo-Video-4.5-Memory-Corruption.html
CVE: CVE-2014-3787
Published: 2014-05-19
Description: SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://en.securitylab.ru/lab/PT-2014-09; http://scn.sap.com/docs/DOC-8218; http://secunia.com/advisories/58671
CVE: CVE-2013-6975
Published: 2014-05-20
Description: Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-22
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6975; http://tools.cisco.com/security/center/viewAlert.x?alertId=34260; http://www.securityfocus.com/bid/67426
CVE: CVE-2014-2192
Published: 2014-05-20
Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2192; http://tools.cisco.com/security/center/viewAlert.x?alertId=34269; http://www.securityfocus.com/bid/67464
CVE: CVE-2014-2193
Published: 2014-05-20
Description: Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2193; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2193
CVE: CVE-2014-2194
Published: 2014-05-20
Description: system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2194; http://tools.cisco.com/security/center/viewAlert.x?alertId=34270; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2194
CVE: CVE-2014-2195
Published: 2014-05-20
Description: Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2195; http://www.securitytracker.com/id/1030258; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2195
CVE: CVE-2014-2199
Published: 2014-05-20
Description: meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2199; http://tools.cisco.com/security/center/viewAlert.x?alertId=34252; http://www.securitytracker.com/id/1030251
CVE: CVE-2014-2351
Published: 2014-05-20
Description: SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: http://www.controlsystemworks.com/blogengine/post/2014/05/08/Important-CSWorks-security-release-2552330; http://www.securityfocus.com/bid/67427; https://www.cisa.gov/news-events/ics-advisories/icsa-14-135-01
CVE: CVE-2014-3264
Published: 2014-05-20
Description: Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561.
CVSS Score: 6.3 (MEDIUM)
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3264; http://tools.cisco.com/security/center/viewAlert.x?alertId=34273; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3264
CVE: CVE-2014-3265
Published: 2014-05-20
Description: Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3265; http://tools.cisco.com/security/center/viewAlert.x?alertId=34274; http://www.securitytracker.com/id/1030260
CVE: CVE-2014-3268
Published: 2014-05-20
Description: Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via crafted RTCP packets, aka Bug ID CSCuj72215.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3268; http://tools.cisco.com/security/center/viewAlert.x?alertId=34272; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3268
CVE: CVE-2014-3269
Published: 2014-05-20
Description: The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID CSCug65204.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3269; http://tools.cisco.com/security/center/viewAlert.x?alertId=34268; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3269
CVE: CVE-2014-3270
Published: 2014-05-20
Description: The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCul80924.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3270; http://www.securitytracker.com/id/1030259; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3270
CVE: CVE-2014-3271
Published: 2014-05-20
Description: The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3271; http://www.securitytracker.com/id/1030259; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3271
CVE: CVE-2014-3273
Published: 2014-05-20
Description: The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3273; http://www.securitytracker.com/id/1030257; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3273
CVE: CVE-2014-3444
Published: 2014-05-20
Description: The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/126637; http://packetstormsecurity.com/files/126637
CVE: CVE-2014-3460
Published: 2014-05-20
Description: Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/58635; http://www.novell.com/support/kb/doc.php?id=7015183; http://www.securityfocus.com/bid/67487
CVE: CVE-2012-6146
Published: 2014-05-20
Description: The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticated editors to read the history of arbitrary records via a crafted URL.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-005/; http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-005/
CVE: CVE-2013-4250
Published: 2014-05-20
Description: The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allow remote authenticated editors to execute arbitrary PHP code by uploading a .php file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-002/; https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-002/
CVE: CVE-2013-4320
Published: 2014-05-20
Description: The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to create or read arbitrary files via a crafted URL.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003/; https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003/
CVE: CVE-2013-4321
Published: 2014-05-20
Description: The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code via unspecified characters in the file extension when renaming a file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4250.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003/; https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003/
CVE: CVE-2013-4346
Published: 2014-05-20
Description: The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://www.openwall.com/lists/oss-security/2013/09/12/7; http://www.securityfocus.com/bid/62386; https://github.com/simplegeo/python-oauth2/issues/129
CVE: CVE-2013-4347
Published: 2014-05-20
Description: The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://www.openwall.com/lists/oss-security/2013/09/12/7; http://www.securityfocus.com/bid/62388; https://github.com/simplegeo/python-oauth2/issues/9