deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-1990
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106766.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html; http://www.debian.org/security/2013/dsa-2675
CVE: CVE-2013-1991
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XDGAQueryModes and (2) XDGASetMode functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106870.html; http://www.debian.org/security/2013/dsa-2690; http://www.openwall.com/lists/oss-security/2013/05/23/3
CVE: CVE-2013-1992
Published: 2013-06-15
Description: Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) DMXGetScreenAttributes, (2) DMXGetWindowAttributes, and (3) DMXGetInputAttributes functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107024.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00157.html; http://www.debian.org/security/2013/dsa-2673
CVE: CVE-2013-1993
Published: 2013-06-15
Description: Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://advisories.mageia.org/MGASA-2013-0190.html; http://lists.freedesktop.org/archives/mesa-dev/2013-May/039720.html; http://lists.freedesktop.org/archives/mesa-dev/2013-May/039722.html
CVE: CVE-2013-1994
Published: 2013-06-15
Description: Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) uniDRIOpenConnection and (2) uniDRIGetClientDriverName functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://www.debian.org/security/2013/dsa-2679; http://www.openwall.com/lists/oss-security/2013/05/23/3; http://www.ubuntu.com/usn/USN-1871-1
CVE: CVE-2013-2062
Published: 2013-06-15
Description: Multiple integer overflows in X.org libXp 1.0.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XpGetAttributes, (2) XpGetOneAttribute, (3) XpGetPrinterList, and (4) XpQueryScreens functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-updates/2013-06/msg00170.html; http://www.debian.org/security/2013/dsa-2685; http://www.openwall.com/lists/oss-security/2013/05/23/3
CVE: CVE-2013-2063
Published: 2013-06-15
Description: Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XRecordGetContext function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106886.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00160.html; http://www.debian.org/security/2013/dsa-2689
CVE: CVE-2013-2064
Published: 2013-06-15
Description: Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the read_packet function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106752.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00137.html; http://www.debian.org/security/2013/dsa-2686
CVE: CVE-2013-1995
Published: 2013-06-15
Description: X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html; http://www.debian.org/security/2013/dsa-2683
CVE: CVE-2013-1996
Published: 2013-06-15
Description: X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2013/dsa-2687; http://www.openwall.com/lists/oss-security/2013/05/23/3; http://www.securityfocus.com/bid/60130
CVE: CVE-2013-1997
Published: 2013-06-15
Description: Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106781.html; http://www.debian.org/security/2013/dsa-2693; http://www.openwall.com/lists/oss-security/2013/05/23/3
CVE: CVE-2013-1998
Published: 2013-06-15
Description: Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html; http://www.debian.org/security/2013/dsa-2683
CVE: CVE-2013-1999
Published: 2013-06-15
Description: Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106766.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html; http://www.debian.org/security/2013/dsa-2675
CVE: CVE-2013-2000
Published: 2013-06-15
Description: Multiple buffer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XDGAQueryModes and (2) XDGASetMode functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106870.html; http://www.debian.org/security/2013/dsa-2690; http://www.openwall.com/lists/oss-security/2013/05/23/3
CVE: CVE-2013-2001
Published: 2013-06-15
Description: Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XF86VidModeGetGammaRamp function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106872.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00165.html; http://www.debian.org/security/2013/dsa-2692
CVE: CVE-2013-2002
Published: 2013-06-15
Description: Buffer overflow in X.org libXt 1.1.3 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the _XtResourceConfigurationEH function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html; http://www.debian.org/security/2013/dsa-2680
CVE: CVE-2013-2003
Published: 2013-06-15
Description: Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the _XcursorFileHeaderCreate function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106791.html; http://www.debian.org/security/2013/dsa-2681; http://www.openwall.com/lists/oss-security/2013/05/23/3
CVE: CVE-2013-2004
Published: 2013-06-15
Description: The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service (stack consumption) via a crafted file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2013/dsa-2693; http://www.openwall.com/lists/oss-security/2013/05/23/3; http://www.ubuntu.com/usn/USN-1854-1
CVE: CVE-2013-2005
Published: 2013-06-15
Description: X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers to trigger use of an uninitialized pointer and memory corruption via vectors related to the (1) ReqCleanup, (2) HandleSelectionEvents, (3) ReqTimedOut, (4) HandleNormal, and (5) HandleSelectionReplies functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106785.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00138.html; http://www.debian.org/security/2013/dsa-2680
CVE: CVE-2013-2066
Published: 2013-06-15
Description: Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106889.html; http://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html; http://www.debian.org/security/2013/dsa-2674
CVE: CVE-2013-0148
Published: 2013-06-16
Description: The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another system that has a certain default configuration.
CVSS Score: 7.1 (HIGH)
CWE: CWE-310
References: http://www.kb.cert.org/vuls/id/900031; http://www.kb.cert.org/vuls/id/900031
CVE: CVE-2013-2309
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the "mobile version color scheme."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18501376/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000038; http://www.openpne.jp/archives/11096/
CVE: CVE-2013-2310
Published: 2013-06-17
Description: SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile smartphones with the WISPrClient application before 1.3.1, SoftBank Disney Mobile Android smartphones with the Wi-Fi application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly connect to access points, which allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network.
CVSS Score: 3.3 (LOW)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN85371480/397327/index.html; http://jvn.jp/en/jp/JVN85371480/995319/index.html; http://jvn.jp/en/jp/JVN85371480/995417/index.html
CVE: CVE-2013-3026
Published: 2013-06-17
Description: Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21639643; https://exchange.xforce.ibmcloud.com/vulnerabilities/84381; http://www-01.ibm.com/support/docview.wss?uid=swg21639643
CVE: CVE-2013-3520
Published: 2013-06-17
Description: VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.vmware.com/security/advisories/VMSA-2013-0008.html; http://www.vmware.com/security/advisories/VMSA-2013-0008.html
CVE: CVE-2013-3642
Published: 2013-06-17
Description: The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earlier for Android 3.0 through 4.0.3, and 1.76b and earlier for Android 4.1 through 4.2 does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN79301570/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000055; http://jvn.jp/en/jp/JVN79301570/index.html
CVE: CVE-2013-3643
Published: 2013-06-17
Description: The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN99813183/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000056; http://jvn.jp/en/jp/JVN99813183/index.html
CVE: CVE-2012-6564
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2012-6565
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript events within user-defined labels.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2012-6566
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in REDCap before 4.14.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2012-6567
Published: 2013-06-17
Description: REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2013-1093
Published: 2013-06-17
Description: Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage parameter.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.novell.com/support/kb/doc.php?id=7012025; http://www.novell.com/support/kb/doc.php?id=7012027; http://www.novell.com/support/kb/doc.php?id=7012499
CVE: CVE-2013-1094
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.novell.com/support/kb/doc.php?id=7012025; http://www.novell.com/support/kb/doc.php?id=7012027; http://www.novell.com/support/kb/doc.php?id=7012501
CVE: CVE-2013-1095
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.novell.com/support/kb/doc.php?id=7012025; http://www.novell.com/support/kb/doc.php?id=7012027; http://www.novell.com/support/kb/doc.php?id=7012500
CVE: CVE-2013-1097
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.novell.com/support/kb/doc.php?id=7012025; http://www.novell.com/support/kb/doc.php?id=7012027; http://www.novell.com/support/kb/doc.php?id=7012502
CVE: CVE-2013-2980
Published: 2013-06-17
Description: Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg21638733; https://exchange.xforce.ibmcloud.com/vulnerabilities/84113; http://www-01.ibm.com/support/docview.wss?uid=swg21638733
CVE: CVE-2013-2981
Published: 2013-06-17
Description: Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www-01.ibm.com/support/docview.wss?uid=swg21638734; https://exchange.xforce.ibmcloud.com/vulnerabilities/83973; http://www-01.ibm.com/support/docview.wss?uid=swg21638734
CVE: CVE-2013-4608
Published: 2013-06-17
Description: Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2013-4609
Published: 2013-06-17
Description: REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as demonstrated by an eval call.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2013-4610
Published: 2013-06-17
Description: Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2013-4611
Published: 2013-06-17
Description: Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.
CVSS Score: 10.0 (HIGH)
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2013-4612
Published: 2013-06-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving different modules.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf; http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf
CVE: CVE-2013-1203
Published: 2013-06-18
Description: Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service (device reload) via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances (ASA) device, aka Bug ID CSCue88386.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1203; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1203
CVE: CVE-2013-4616
Published: 2013-06-18
Description: The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UITextChecker suggestWordInLanguage method for selection of Wi-Fi hotspot WPA2 PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack that leverages the insufficient number of possible passphrases.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-255
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://lists.owasp.org/pipermail/owasp-mobile-security-project/2013-June/000640.html; http://secunia.com/advisories/54886
CVE: CVE-2013-3644
Published: 2013-06-18
Description: Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and Ichitaro JUST School through 2010 allows remote attackers to execute arbitrary code via a crafted document.
CVSS Score: 10.0 (HIGH)
References: http://jvn.jp/en/jp/JVN98712361/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000058; http://www.justsystems.com/jp/info/js13002.html
CVE: CVE-2013-3646
Published: 2013-06-18
Description: The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-17
References: http://jvn.jp/en/jp/JVN63428218/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000059; https://live.cybozu.co.jp/trouble.html?q=2530