deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0608
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0611, CVE-2013-0614, and CVE-2013-0618.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0609
Published: 2013-01-10
Description: Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0613.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0610
Published: 2013-01-10
Description: Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0626.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0611
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0614, and CVE-2013-0618.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0612
Published: 2013-01-10
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0615, CVE-2013-0617, and CVE-2013-0621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0613
Published: 2013-01-10
Description: Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0609.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0614
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0618.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0615
Published: 2013-01-10
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0617, and CVE-2013-0621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0616
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0619, CVE-2013-0620, and CVE-2013-0623.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0617
Published: 2013-01-10
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0621.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0618
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0614.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0619
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0620, and CVE-2013-0623.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0620
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, and CVE-2013-0623.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0621
Published: 2013-01-10
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0617.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0622
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-0624.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0623
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, and CVE-2013-0620.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0624
Published: 2013-01-10
Description: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-0622.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0626
Published: 2013-01-10
Description: Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0610.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0627
Published: 2013-01-10
Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows local users to gain privileges via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
CVE: CVE-2013-0422
Published: 2013-01-10
Description: Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114.  CVE-2013-0422 covers both the JMX/MBean and Reflection API issues.  NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks.  NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11.  If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.html; http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/; http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two.html
CVE: CVE-2012-4820
Published: 2013-01-11
Description: Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."
CVSS Score: 9.3 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2012-1465.html; http://rhn.redhat.com/errata/RHSA-2012-1466.html; http://rhn.redhat.com/errata/RHSA-2012-1467.html
CVE: CVE-2012-4821
Published: 2013-01-11
Description: Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
CVSS Score: 9.3 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2012-1467.html; http://seclists.org/bugtraq/2012/Sep/38; http://secunia.com/advisories/51326
CVE: CVE-2012-4822
Published: 2013-01-11
Description: Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class."
CVSS Score: 9.3 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2012-1465.html; http://rhn.redhat.com/errata/RHSA-2012-1466.html; http://rhn.redhat.com/errata/RHSA-2012-1467.html
CVE: CVE-2012-4823
Published: 2013-01-11
Description: Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."
CVSS Score: 9.3 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2012-1466.html; http://rhn.redhat.com/errata/RHSA-2012-1467.html; http://rhn.redhat.com/errata/RHSA-2013-1455.html
CVE: CVE-2012-2251
Published: 2013-01-11
Description: rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html; http://secunia.com/advisories/51307; http://www.debian.org/security/2012/dsa-2578
CVE: CVE-2012-2252
Published: 2013-01-11
Description: Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.
CVSS Score: 4.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html; http://osvdb.org/87926; http://secunia.com/advisories/51307
CVE: CVE-2012-0722
Published: 2013-01-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-0722.  Reason: This candidate is a duplicate of CVE-2013-0722.  A year-transition issue caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2013-0722 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-0630
Published: 2013-01-11
Description: Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00003.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00012.html; http://lists.opensuse.org/opensuse-updates/2013-01/msg00019.html
CVE: CVE-2013-0722
Published: 2013-01-11
Description: Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/51731; http://www.exploit-db.com/exploits/23945/; http://www.securation.com/files/2013/01/ec.patch
CVE: CVE-2011-5252
Published: 2013-01-12
Description: Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0023.html; http://orchard.codeplex.com/discussions/283667; http://secunia.com/advisories/47398
CVE: CVE-2011-5253
Published: 2013-01-12
Description: Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/47466; http://www.securityfocus.com/bid/51347; http://www.thregr.org/~wavexx/software/dl/NEWS.html
CVE: CVE-2011-5254
Published: 2013-01-12
Description: Unspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/47390; http://wordpress.org/extend/plugins/connections/changelog/; http://www.osvdb.org/78063
CVE: CVE-2012-5874
Published: 2013-01-12
Description: Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATH_INFO to (a) checkuser.php, (b) groups.php, (c) index.php, (d) login.php, (e) quicklogin.php, (f) register.php, (g) Search.php, (h) viewboard.php, or (i) viewtopic.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-12/0114.html; http://elite-board.us/Community/viewtopic.php?bid=1&tid=310; http://packetstormsecurity.com/files/118962/Elite-Bulletin-Board-2.1.21-SQL-Injection.html
CVE: CVE-2012-6499
Published: 2013-01-12
Description: Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_to parameter.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/18350; http://www.osvdb.org/82584; http://www.securityfocus.com/bid/51357
CVE: CVE-2012-6500
Published: 2013-01-12
Description: Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/18347; http://www.osvdb.org/82585; http://www.securityfocus.com/bid/51360
CVE: CVE-2012-6501
Published: 2013-01-12
Description: The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill process) via the partial or full name of a process.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/47122; http://www.osvdb.org/78272; http://www.securityfocus.com/bid/51341
CVE: CVE-2013-0154
Published: 2013-01-12
Description: The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall.
CVSS Score: 1.9 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html; http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html; http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
CVE: CVE-2013-0744
Published: 2013-01-13
Description: Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an HTML document with a table containing many columns and column groups.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html
CVE: CVE-2013-0745
Published: 2013-01-13
Description: The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly interact with garbage collection, which allows remote attackers to execute arbitrary code via a crafted HTML document referencing JavaScript objects.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00010.html