deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-3154
Published: 2020-02-19
Description: A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could exploit this vulnerability sending malicious requests to the affected device. An exploit could allow the attacker to modify values on or return values from the underlying database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cws-inject-6YTdx7AO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cws-inject-6YTdx7AO
CVE: CVE-2020-3156
Published: 2020-02-19
Description: A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface. An attacker could exploit this vulnerability by sending malicious endpoint data to the targeted system. An exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-s3ekcKch; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-s3ekcKch
CVE: CVE-2020-3158
Published: 2020-02-19
Description: A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password and is not under the control of the system administrator. An attacker could exploit this vulnerability by using this default account to connect to the affected system. A successful exploit could allow the attacker to obtain read and write access to system data, including the configuration of an affected device. The attacker would gain access to a sensitive portion of the system, but the attacker would not have full administrative rights to control the device.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-on-prem-static-cred-sL8rDs8; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-on-prem-static-cred-sL8rDs8
CVE: CVE-2020-3159
Published: 2020-02-19
Description: A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-xss-6OgfQkUT; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-xss-6OgfQkUT
CVE: CVE-2020-3160
Published: 2020-02-19
Description: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other applications and processes are unaffected. The vulnerability is due to improper input validation of XMPP packets. An attacker could exploit this vulnerability by sending crafted XMPP packets to an affected device. An exploit could allow the attacker to cause process crashes and a DoS condition for XMPP conferencing applications.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cms-xmpp-dos-ptfGUsBx; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cms-xmpp-dos-ptfGUsBx
CVE: CVE-2020-3163
Published: 2020-02-19
Description: A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing inbound Live Data traffic. An attacker could exploit this vulnerability by sending multiple crafted Live Data packets to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could result in a stack overflow and cause the affected device to reload, resulting in a DoS condition. Note: The Live Data port in Cisco Unified Contact Center Enterprise devices allows only a single TCP connection. To exploit this vulnerability, an attacker would have to send crafted packets to an affected device before a legitimate Live Data client establishes a connection.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-tip-dos-7cdLUASb; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-tip-dos-7cdLUASb
CVE: CVE-2014-9617
Published: 2020-02-19
Description: Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html; http://packetstormsecurity.com/files/133034/Netsweeper-Bypass-XSS-Redirection-SQL-Injection-Execution.html
CVE: CVE-2015-7747
Published: 2020-02-19
Description: Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170387.html; http://www.openwall.com/lists/oss-security/2015/10/06/2; http://www.ubuntu.com/usn/USN-2787-1
CVE: CVE-2020-3943
Published: 2020-02-19
Description: vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code in vRealize Operations.
CVSS Score: 9.8 (CRITICAL)
References: https://www.vmware.com/security/advisories/VMSA-2020-0003.html; https://www.vmware.com/security/advisories/VMSA-2020-0003.html
CVE: CVE-2020-3944
Published: 2020-02-19
Description: vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.
CVSS Score: 8.6 (HIGH)
CWE: CWE-287
References: https://www.vmware.com/security/advisories/VMSA-2020-0003.html; https://www.vmware.com/security/advisories/VMSA-2020-0003.html
CVE: CVE-2020-3945
Published: 2020-02-19
Description: vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may obtain sensitive information
CVSS Score: 7.5 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2020-0003.html; https://www.vmware.com/security/advisories/VMSA-2020-0003.html
CVE: CVE-2020-6970
Published: 2020-02-19
Description: A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-20-049-02; https://www.us-cert.gov/ics/advisories/icsa-20-049-02
CVE: CVE-2020-7942
Published: 2020-02-19
Description: Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the `default` node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting `strict_hostname_checking = true` in `puppet.conf` on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://puppet.com/security/cve/CVE-2020-7942/; https://puppet.com/security/cve/CVE-2020-7942/
CVE: CVE-2013-2018
Published: 2020-02-20
Description: Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2013/04/28/3; http://www.openwall.com/lists/oss-security/2013/04/29/11; http://www.openwall.com/lists/oss-security/2013/04/28/3
CVE: CVE-2016-3181
Published: 2020-02-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-3182. Reason: This candidate is a duplicate of CVE-2016-3182. Notes: All CVE users should reference CVE-2016-3182 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-3182
Published: 2020-02-20
Description: The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/03/16/16; http://www.openwall.com/lists/oss-security/2016/09/27/1; https://bugzilla.redhat.com/show_bug.cgi?id=1317826
CVE: CVE-2014-4660
Published: 2020-02-20
Description: Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb http://user:pass@server:port/" format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md; https://github.com/ansible/ansible/commit/c4b5e46054c74176b2446c82d4df1a2610eddc08; https://security-tracker.debian.org/tracker/CVE-2014-4660
CVE: CVE-2014-4678
Published: 2020-02-20
Description: The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/ansible/ansible/commit/5429b85b9f6c2e640074176f36ff05fd5e4d1916; https://groups.google.com/forum/message/raw?msg=ansible-announce/ieV1vZvcTXU/5Q93ThkY9rIJ; https://security-tracker.debian.org/tracker/CVE-2014-4678
CVE: CVE-2011-2498
Published: 2020-02-20
Description: The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering creation of PTE pages.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://marc.info/?l=oss-security&m=[PII_REDACTED]4984&w=2; https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2498.html; https://security-tracker.debian.org/tracker/CVE-2011-2498
CVE: CVE-2012-2629
Published: 2020-02-20
Description: Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator account via an addnew action to admin/administrators_add.php; or (2) conduct cross-site scripting (XSS) attacks via the page_title parameter to admin/content_pages_edit.php; the (3) category_name[] parameter to admin/products_category.php; the (4) site_name, (5) seo_title, or (6) meta_keywords parameter to admin/settings_siteinfo.php; the (7) company_name, (8) address1, (9) address2, (10) city, (11) state, (12) country, (13) author_first_name, (14) author_last_name, (15) author_email, (16) contact_first_name, (17) contact_last_name, (18) contact_email, (19) general_email, (20) general_phone, (21) general_fax, (22) sales_email, (23) sales_phone, (24) support_email, or (25) support_phone parameter to admin/settings_company.php; or the (26) system_email, (27) sender_name, (28) smtp_server, (29) smtp_username, (30) smtp_password, or (31) order_notice_email parameter to admin/settings_email.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/112748/Axous-1.1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://www.exploit-db.com/exploits/18886; http://packetstormsecurity.com/files/112748/Axous-1.1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE: CVE-2014-3484
Published: 2020-02-20
Description: Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://git.musl-libc.org/cgit/musl/commit/?id=b3d9e0b94ea73c68ef4169ec82c898ce59a4e30a; http://seclists.org/oss-sec/2014/q2/495; http://git.musl-libc.org/cgit/musl/commit/?id=b3d9e0b94ea73c68ef4169ec82c898ce59a4e30a
CVE: CVE-2015-2923
Published: 2020-02-20
Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2015/04/04/2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6fd99094de2b83d1d4c8457f2c83483b2828e75a; https://lists.freebsd.org/pipermail/freebsd-net/2015-April/041934.html
CVE: CVE-2019-20479
Published: 2020-02-20
Description: A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00036.html; https://github.com/zmartzone/mod_auth_openidc/commit/02431c0adfa30f478cf2eb20ed6ea51fdf446be7; https://github.com/zmartzone/mod_auth_openidc/pull/453
CVE: CVE-2020-9308
Published: 2020-02-20
Description: archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20459; https://github.com/libarchive/libarchive/pull/1326; https://github.com/libarchive/libarchive/pull/1326/commits/94821008d6eea81e315c5881cdf[PII_REDACTED]40a
CVE: CVE-2012-5362
Published: 2020-02-20
Description: The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2010-4669.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2012/10/10/12; https://www.securityfocus.com/bid/56170/info; http://www.openwall.com/lists/oss-security/2012/10/10/12
CVE: CVE-2012-5363
Published: 2020-02-20
Description: The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2011-2393.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2012/10/10/12; https://www.securityfocus.com/bid/56170/info; http://www.openwall.com/lists/oss-security/2012/10/10/12
CVE: CVE-2012-5364
Published: 2020-02-20
Description: The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2012/10/10/12; https://www.securityfocus.com/bid/56170/info; http://www.openwall.com/lists/oss-security/2012/10/10/12
CVE: CVE-2012-5365
Published: 2020-02-20
Description: The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2012/10/10/12; https://www.securityfocus.com/bid/56170/info; http://www.openwall.com/lists/oss-security/2012/10/10/12
CVE: CVE-2012-5366
Published: 2020-02-20
Description: The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2012/10/10/12; https://www.securityfocus.com/bid/56170/info; http://www.openwall.com/lists/oss-security/2012/10/10/12
CVE: CVE-2014-4657
Published: 2020-02-20
Description: The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md; https://www.securityfocus.com/bid/68232; https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md
CVE: CVE-2014-4658
Published: 2020-02-20
Description: The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md; https://www.securityfocus.com/bid/68233; https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md
CVE: CVE-2014-4659
Published: 2020-02-20
Description: Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md; https://www.securityfocus.com/bid/68234; https://github.com/ansible/ansible/blob/release1.5.5/CHANGELOG.md
CVE: CVE-2014-7951
Published: 2020-02-20
Description: Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android device to write to arbitrary files owned by system via a .. (dot dot) in the tar archive headers.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/131510/ADB-Backup-Traversal-File-Overwrite.html; http://seclists.org/fulldisclosure/2015/Apr/51; http://www.securityfocus.com/bid/74211
CVE: CVE-2019-19741
Published: 2020-02-20
Description: Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's executable file instead of its in-memory process (which can be significantly different from the executable file due to, for example, DLL injection). Data transmitted over the pipe is encrypted using a static key. Instead of hooking the pipe communication directly via WriteFileEx(), this can be bypassed by hooking the EVP_EncryptUpdate() function of libeay32.dll. The pipe takes the command CreateDirectory to create a directory and adjust the directory DACL. Calls to this function can be intercepted, the directory and the DACL can be replaced, and the manipulated DACL is written. Arbitrary DACL write is further achieved by creating a hardlink in a user-controlled directory that points to (for example) a service binary. The DACL is then written to this service binary, which results in escalation of privileges.
CVSS Score: 7.8 (HIGH)
References: https://medium.com/%40tobiasgyoerfi/ea-origin-10-5-55-33574-createdirectory-arbitrary-dacl-write-privilege-escalation-cve-2019-19741-5f18adfabb27; https://medium.com/%40tobiasgyoerfi/ea-origin-10-5-55-33574-createdirectory-arbitrary-dacl-write-privilege-escalation-cve-2019-19741-5f18adfabb27
CVE: CVE-2020-9272
Published: 2020-02-20
Description: ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00002.html; https://cert-portal.siemens.com/productcert/pdf/ssa-679335.pdf; https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
CVE: CVE-2020-9273
Published: 2020-02-20
Description: In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00002.html; http://www.openwall.com/lists/oss-security/2021/08/25/1; http://www.openwall.com/lists/oss-security/2021/09/06/2
CVE: CVE-2013-7109
Published: 2020-02-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none