deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-4651
Published: 2013-08-01
Description: Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-255
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf
CVE: CVE-2013-4652
Published: 2013-08-01
Description: Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware before 4.5.4 allows remote attackers to bypass authentication and execute arbitrary code via a (1) SSH or (2) TELNET connection.
CVSS Score: 10.0 (HIGH)
References: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf; http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-120908.pdf
CVE: CVE-2013-4911
Published: 2013-08-01
Description: Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html; http://secunia.com/advisories/54051; http://secunia.com/advisories/54252
CVE: CVE-2013-4912
Published: 2013-08-01
Description: Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://scadastrangelove.blogspot.com/2013/08/ssa-064884-wincctia-portal-fixes.html; http://secunia.com/advisories/54051; http://secunia.com/advisories/54252
CVE: CVE-2012-3913
Published: 2013-08-01
Description: The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service (WebUI outage) via crafted packets, aka Bug IDs CSCtf73188, CSCtf88059, CSCtf87951, CSCtf87908, and CSCtf88019.
CVSS Score: 5.0 (MEDIUM)
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-3913; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-3913
CVE: CVE-2013-3443
Published: 2013-08-01
Description: The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/95877; http://secunia.com/advisories/54367; http://secunia.com/advisories/54372
CVE: CVE-2013-3444
Published: 2013-08-01
Description: The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://secunia.com/advisories/54367; http://secunia.com/advisories/54369; http://secunia.com/advisories/54370
CVE: CVE-2013-4897
Published: 2013-08-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate later determined that the request was a miscommunication.  Notes: none
CVE: CVE-2012-5460
Published: 2013-08-01
Description: Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-07/0148.html; http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2013-03-874&viewMode=view; http://archives.neohapsis.com/archives/bugtraq/2013-07/0148.html
CVE: CVE-2013-3724
Published: 2013-08-01
Description: The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.monkey-project.com/ticket/181; http://bugs.monkey-project.com/ticket/181
CVE: CVE-2013-1190
Published: 2013-08-02
Description: The C-Series Rack Server component 1.4 in Cisco Unified Computing System (UCS) does not properly restrict inbound access to ports, which allows remote attackers to cause a denial of service (Integrated Management Controller reboot or hang) via crafted packets, as demonstrated by nmap, aka Bug ID CSCtx19850.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1190; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1190
CVE: CVE-2013-3219
Published: 2013-08-02
Description: bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a certain block protocol rule, which allows remote attackers to bypass intended access restrictions and conduct double-spending attacks via a large block that triggers incorrect Berkeley DB locking in older product versions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://en.bitcoin.it/wiki/BIP_0050; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://en.bitcoin.it/wiki/BIP_0050
CVE: CVE-2013-3220
Published: 2013-08-02
Description: bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8rc2, 0.6.x before 0.6.5rc2, and 0.7.x before 0.7.3rc2, and wxBitcoin, do not properly consider whether a block's size could require an excessive number of database locks, which allows remote attackers to cause a denial of service (split) and enable certain double-spending capabilities via a large block that triggers incorrect Berkeley DB locking.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-399
References: https://en.bitcoin.it/wiki/BIP_0050; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://en.bitcoin.it/wiki/BIP_0050
CVE: CVE-2013-3448
Published: 2013-08-02
Description: Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/95880; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3448; http://tools.cisco.com/security/center/viewAlert.x?alertId=30277
CVE: CVE-2013-4165
Published: 2013-08-02
Description: The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first incorrect byte of a password, which makes it easier for remote attackers to determine passwords via a timing side-channel attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2013/07/25/5; https://github.com/bitcoin/bitcoin/issues/2838; https://github.com/bitcoin/bitcoin/pull/2845
CVE: CVE-2013-4627
Published: 2013-08-02
Description: Unspecified vulnerability in bitcoind and Bitcoin-Qt 0.8.x allows remote attackers to cause a denial of service (memory consumption) via a large amount of tx message data.
CVSS Score: 5.0 (MEDIUM)
References: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2013-0149
Published: 2013-08-05
Description: The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795.
CVSS Score: 5.8 (MEDIUM)
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf; http://www.kb.cert.org/vuls/id/229804; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf
CVE: CVE-2013-3442
Published: 2013-08-05
Description: The web portal in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3442; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3442
CVE: CVE-2013-3450
Published: 2013-08-05
Description: Cross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified Communications Manager (Unified CM) allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3450; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3450
CVE: CVE-2013-3451
Published: 2013-08-05
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3451; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3451
CVE: CVE-2013-4805
Published: 2013-08-05
Description: Unspecified vulnerability in HP Integrated Lights-Out 3 (aka iLO3) firmware before 1.60 and 4 (aka iLO4) firmware before 1.30 allows remote attackers to bypass authentication via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03844348; http://www.securityfocus.com/bid/61556; http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03844348
CVE: CVE-2013-1610
Published: 2013-08-05
Description: Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/61489; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_01; http://www.securityfocus.com/bid/61489
CVE: CVE-2013-4575
Published: 2013-08-05
Description: Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via unspecified vectors.
CVSS Score: 7.9 (HIGH)
CWE: CWE-119
References: http://osvdb.org/95938; http://www.securityfocus.com/bid/61485; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00
CVE: CVE-2013-4676
Published: 2013-08-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a (1) custom-reports generation page, (2) Storage Devices creation page, or (3) jobs creation page in the management console; or (4) a Backup Exec server-management page in the beutility console.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/95941; http://osvdb.org/95942; http://www.securityfocus.com/bid/61486
CVE: CVE-2013-4677
Published: 2013-08-05
Description: Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/95939; http://www.securityfocus.com/bid/61487; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00
CVE: CVE-2013-4678
Published: 2013-08-05
Description: The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors.
CVSS Score: 2.7 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/61488; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00; http://www.securityfocus.com/bid/61488
CVE: CVE-2013-4679
Published: 2013-08-05
Description: Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges via an application that performs crafted interaction with the operating system.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/61349; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_02; http://www.securityfocus.com/bid/61349
CVE: CVE-2013-4807
Published: 2013-08-05
Description: Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26 20130703 allows remote attackers to modify data via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03825817; http://osvdb.org/95907; http://www.securityfocus.com/bid/61565
CVE: CVE-2013-1629
Published: 2013-08-06
Description: pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a "pip install" operation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.pip-installer.org/en/latest/installing.html; http://www.pip-installer.org/en/latest/news.html#changelog; http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/
CVE: CVE-2013-1630
Published: 2013-08-06
Description: pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a download operation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/; https://github.com/mardiros/pyshop/blob/master/CHANGES.txt; https://github.com/mardiros/pyshop/commit/ffadb0bcdef1e[PII_REDACTED]70210cfd6ba351784
CVE: CVE-2013-1633
Published: 2013-08-06
Description: easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/; https://pypi.python.org/pypi/setuptools/0.9.8#changes; http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/
CVE: CVE-2013-4124
Published: 2013-08-06
Description: Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2013-08/0028.html; http://ftp.samba.org/pub/samba/patches/security/samba-4.0.7-CVE-2013-4124.patch; http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113591.html
CVE: CVE-2013-3992
Published: 2013-08-06
Description: Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/95943; http://secunia.com/advisories/54447; http://www-01.ibm.com/support/docview.wss?uid=swg21645804
CVE: CVE-2013-3995
Published: 2013-08-06
Description: Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/54447; http://www-01.ibm.com/support/docview.wss?uid=swg21645804; http://www.securityfocus.com/bid/61604
CVE: CVE-2013-3996
Published: 2013-08-06
Description: IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/54447; http://www-01.ibm.com/support/docview.wss?uid=swg21645804; http://www.securityfocus.com/bid/61604
CVE: CVE-2013-5021
Published: 2013-08-06
Description: Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://digital.ni.com/public.nsf/allkb/04B[PII_REDACTED]82C86257BD1000CC950?OpenDocument; http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B[PII_REDACTED]?OpenDocument; http://www05.abb.com/global/scot/scot203.nsf/veritydisplay/5975a8a86c82eec2c125798e00551522/%24file/SECURITY_BULLETIN_-_ABBVU-PACT-3BSE072617_DataManager_Vulnerability.pdf
CVE: CVE-2013-5022
Published: 2013-08-06
Description: Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://digital.ni.com/public.nsf/allkb/782E4F31442D833186257BD3004AEB47?OpenDocument; http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B[PII_REDACTED]?OpenDocument; http://digital.ni.com/public.nsf/websearch/C4619A438F7E78E486257B360050BD7D?OpenDocument
CVE: CVE-2013-5023
Published: 2013-08-06
Description: The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allow remote attackers to cause a denial of service by triggering the display of local .chm files.
CVSS Score: 4.3 (MEDIUM)
References: http://digital.ni.com/public.nsf/allkb/E6BC4F119D49A97A86257BD3004FE019?OpenDocument; http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B[PII_REDACTED]?OpenDocument; http://digital.ni.com/public.nsf/websearch/5C87A3AA[PII_REDACTED]257B3600501FE6?OpenDocument
CVE: CVE-2013-5024
Published: 2013-08-06
Description: An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted (1) key-open or (2) key-close method calls.
CVSS Score: 4.3 (MEDIUM)
References: http://digital.ni.com/public.nsf/allkb/548965C170D6AA2586257BD3004B146B?OpenDocument; http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B[PII_REDACTED]?OpenDocument; http://digital.ni.com/public.nsf/websearch/D8E97E95D59AC17086257B[PII_REDACTED]?OpenDocument
CVE: CVE-2013-5025
Published: 2013-08-06
Description: An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files.
CVSS Score: 4.3 (MEDIUM)
References: http://digital.ni.com/public.nsf/allkb/493D011EE5C305FD86257BCF006C8540?OpenDocument; http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B[PII_REDACTED]?OpenDocument; http://digital.ni.com/public.nsf/websearch/DFFB9F8AD5014E9586257B36004F6E5D?OpenDocument
CVE: CVE-2013-5026
Published: 2013-08-06
Description: An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.
CVSS Score: 9.3 (HIGH)
References: http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument; http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B[PII_REDACTED]?OpenDocument; http://digital.ni.com/public.nsf/websearch/A792DE0703C[PII_REDACTED]B[PII_REDACTED]?OpenDocument
CVE: CVE-2013-1701
Published: 2013-08-07
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.debian.org/security/2013/dsa-2735; http://www.debian.org/security/2013/dsa-2746; http://www.mozilla.org/security/announce/2013/mfsa2013-63.html
CVE: CVE-2013-1702
Published: 2013-08-07
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.mozilla.org/security/announce/2013/mfsa2013-63.html; https://bugzilla.mozilla.org/show_bug.cgi?id=844088; https://bugzilla.mozilla.org/show_bug.cgi?id=854157