deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-5944
Published: 2013-10-03
Description: The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-176087.pdf; http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-176087.pdf
CVE: CVE-2013-5690
Published: 2013-10-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) content with the text/xml MIME type or (2) the Status comment field of an appointment.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/528940; http://www.securityfocus.com/archive/1/528940
CVE: CVE-2013-6009
Published: 2013-10-03
Description: CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/528940; http://www.securityfocus.com/archive/1/528940
CVE: CVE-2013-5701
Published: 2013-10-03
Description: Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2013/Sep/43; http://www.securitytracker.com/id/1028992; https://www.rcesecurity.com/2013/09/cve-2013-5701-watchguard-server-center-v11-7-4-wgpr-dll-local-privileges-escalation-vulnerability
CVE: CVE-2013-6010
Published: 2013-10-03
Description: Cross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/97600; http://packetstormsecurity.com/files/123327; https://exchange.xforce.ibmcloud.com/vulnerabilities/87290
CVE: CVE-2013-1061
Published: 2013-10-03
Description: dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://launchpadlibrarian.net/150156695/software-properties_0.92.17.2_0.92.17.3.diff.gz; http://secunia.com/advisories/54909; http://www.ubuntu.com/usn/USN-1960-1
CVE: CVE-2013-1062
Published: 2013-10-03
Description: ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54907; http://www.ubuntu.com/usn/USN-1962-1; http://secunia.com/advisories/54907
CVE: CVE-2013-1063
Published: 2013-10-03
Description: usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54901; http://www.ubuntu.com/usn/USN-1963-1; https://launchpad.net/ubuntu/+source/usb-creator/0.2.38.2
CVE: CVE-2013-1064
Published: 2013-10-03
Description: apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54914; http://www.ubuntu.com/usn/USN-1955-1; https://launchpad.net/ubuntu/+source/apt-xapian-index/0.44ubuntu5.1
CVE: CVE-2013-1065
Published: 2013-10-03
Description: backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54912; http://www.ubuntu.com/usn/USN-1957-1; https://launchpad.net/ubuntu/+source/jockey/0.9.7-0ubuntu7.11
CVE: CVE-2013-1066
Published: 2013-10-03
Description: language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/54911; http://www.ubuntu.com/usn/USN-1958-1; https://exchange.xforce.ibmcloud.com/vulnerabilities/87379
CVE: CVE-2013-4288
Published: 2013-10-03
Description: Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
CVSS Score: 7.2 (HIGH)
CWE: CWE-362
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1002375; http://lists.opensuse.org/opensuse-updates/2013-10/msg00004.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00005.html
CVE: CVE-2013-4311
Published: 2013-10-03
Description: libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00023.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00024.html; http://rhn.redhat.com/errata/RHSA-2013-1272.html
CVE: CVE-2013-4324
Published: 2013-10-03
Description: spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00031.html; http://rhn.redhat.com/errata/RHSA-2013-1273.html; http://secunia.com/advisories/54947
CVE: CVE-2013-4326
Published: 2013-10-03
Description: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00022.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00051.html; http://rhn.redhat.com/errata/RHSA-2013-1282.html
CVE: CVE-2013-4327
Published: 2013-10-03
Description: systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://www.debian.org/security/2013/dsa-2777; http://www.openwall.com/lists/oss-security/2013/09/18/6; http://www.ubuntu.com/usn/USN-1961-1
CVE: CVE-2013-0742
Published: 2013-10-03
Description: Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory entry name in an XPS file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/show/osvdb/94933; http://secunia.com/advisories/52707; http://www.exploit-db.com/exploits/26805
CVE: CVE-2013-3248
Published: 2013-10-03
Description: Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/show/osvdb/94934; http://secunia.com/advisories/52707; http://osvdb.org/show/osvdb/94934
CVE: CVE-2013-2964
Published: 2013-10-04
Description: Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC96517; http://www-01.ibm.com/support/docview.wss?uid=swg21651120; https://exchange.xforce.ibmcloud.com/vulnerabilities/83760
CVE: CVE-2013-4711
Published: 2013-10-04
Description: Cross-site scripting (XSS) vulnerability in Accela BizSearch 3.2 on Linux and Solaris allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN33788325/995225/index.html; http://jvn.jp/en/jp/JVN33788325/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000094
CVE: CVE-2013-4828
Published: 2013-10-04
Description: HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014
CVE: CVE-2013-4829
Published: 2013-10-04
Description: HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors.
CVSS Score: 1.5 (LOW)
CWE: CWE-200
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03888014
CVE: CVE-2013-5163
Published: 2013-10-04
Description: Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00000.html
CVE: CVE-2013-5419
Published: 2013-10-04
Description: Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://aix.software.ibm.com/aix/efixes/security/cmdque_advisory.asc; http://www.ibm.com/support/docview.wss?uid=isg1IV47427; http://www.ibm.com/support/docview.wss?uid=isg1IV47428
CVE: CVE-2013-2221
Published: 2013-10-04
Description: Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html
CVE: CVE-2013-2222
Published: 2013-10-04
Description: Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ZRTP Hello packet to the (1) ZRtp::findBestSASType, (2) ZRtp::findBestAuthLen, (3) ZRtp::findBestCipher, (4) ZRtp::findBestHash, or (5) ZRtp::findBestPubKey functions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html
CVE: CVE-2013-2223
Published: 2013-10-04
Description: GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html; http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html
CVE: CVE-2013-4157
Published: 2013-10-04
Description: Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp.
CVSS Score: 3.6 (LOW)
CWE: CWE-59
References: http://rhn.redhat.com/errata/RHSA-2013-1205.html; https://bugzilla.redhat.com/show_bug.cgi?id=986516; http://rhn.redhat.com/errata/RHSA-2013-1205.html
CVE: CVE-2013-4249
Published: 2013-10-04
Description: Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/oss-sec/2013/q3/369; http://seclists.org/oss-sec/2013/q3/411; http://secunia.com/advisories/54476
CVE: CVE-2013-4330
Published: 2013-10-04
Description: Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://camel.apache.org/security-advisories.data/CVE-2013-4330.txt.asc?version=1&modificationDate=[PII_REDACTED]43; http://osvdb.org/97941; http://packetstormsecurity.com/files/123454/
CVE: CVE-2013-4344
Published: 2013-10-04
Description: Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: http://article.gmane.org/gmane.comp.emulators.qemu/237191; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html
CVE: CVE-2013-4758
Published: 2013-10-04
Description: Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JSON response.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2013/07/05/2; http://www.rsyslog.com/rsyslog-7-4-2-v7-stable-released/; http://www.rsyslog.com/rsyslog-7-5-2-v7-devel-released/
CVE: CVE-2013-4788
Published: 2013-10-04
Description: The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow vulnerability in an application and using the known zero value pointer guard to calculate a pointer address.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20
References: http://hmarco.org/bugs/CVE-2013-4788.html; http://seclists.org/fulldisclosure/2015/Sep/23; http://www.mandriva.com/security/advisories?name=MDVSA-2013:283
CVE: CVE-2013-5915
Published: 2013-10-04
Description: The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-October/118758.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119018.html
CVE: CVE-2013-6011
Published: 2013-10-04
Description: Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2013-10/0016.html; http://support.citrix.com/article/ctx139017; http://archives.neohapsis.com/archives/bugtraq/2013-10/0016.html
CVE: CVE-2013-6044
Published: 2013-10-04
Description: The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting (XSS) or other vulnerabilities into Django applications that use this function, as demonstrated by "the login view in django.contrib.auth.views" and the javascript: scheme.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00015.html; http://rhn.redhat.com/errata/RHSA-2013-1521.html; http://seclists.org/oss-sec/2013/q3/369
CVE: CVE-2013-4986
Published: 2013-10-04
Description: Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html; http://osvdb.org/97959; http://packetstormsecurity.com/files/123476
CVE: CVE-2013-5091
Published: 2013-10-04
Description: SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated users to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php.  NOTE: this issue might be a duplicate of CVE-2011-4559.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2013-09/0079.html; http://osvdb.org/76138; http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.4.0/Core%20Product/
CVE: CVE-2013-0188
Published: 2013-10-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-0189, CVE-2013-0191.  Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues.  Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-3540
Published: 2013-10-04
Description: Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2013/Jun/84; http://seclists.org/fulldisclosure/2013/Jun/84
CVE: CVE-2013-3541
Published: 2013-10-04
Description: Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. (dot dot) in the READ.filePath parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2013/Jun/84; http://seclists.org/fulldisclosure/2013/Jun/84
CVE: CVE-2013-3543
Published: 2013-10-04
Description: The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote attackers to create or overwrite arbitrary files via a file path to the (1) StartRecord, (2) SaveCurrentImage, or (3) StartRecordMedia methods.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2013/Jun/84; http://seclists.org/fulldisclosure/2013/Jun/84
CVE: CVE-2013-3689
Published: 2013-10-04
Description: Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://seclists.org/fulldisclosure/2013/Jun/84; http://seclists.org/fulldisclosure/2013/Jun/84
CVE: CVE-2012-4075
Published: 2013-10-05
Description: Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://secunia.com/advisories/55196; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4075; http://www.securityfocus.com/bid/62837
CVE: CVE-2012-4084
Published: 2013-10-05
Description: Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco Unified Computing System (UCS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/98125; http://secunia.com/advisories/55203; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4084
CVE: CVE-2012-4090
Published: 2013-10-05
Description: The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/98123; http://secunia.com/advisories/55206; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4090