deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-4872
Published: 2013-07-18
Description: Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/; https://exchange.xforce.ibmcloud.com/vulnerabilities/85804; https://blog.lookout.com/blog/2013/07/17/hacking-the-internet-of-things-for-good/
CVE: CVE-2013-4873
Published: 2013-07-18
Description: The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://osvdb.org/95374; http://staff.tumblr.com/post/[PII_REDACTED]8/important-security-update-for-iphone-ipad-users; http://www.theregister.co.uk/2013/07/17/tumblr_ios_snafu_fixed/
CVE: CVE-2013-4874
Published: 2013-07-18
Description: The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-287
References: http://www.kb.cert.org/vuls/id/458007; http://www.kb.cert.org/vuls/id/BLUU-997M5B; http://www.securityfocus.com/bid/61169
CVE: CVE-2013-4875
Published: 2013-07-18
Description: The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-287
References: http://www.kb.cert.org/vuls/id/458007; http://www.kb.cert.org/vuls/id/BLUU-997M5B; http://www.securityfocus.com/bid/61169
CVE: CVE-2013-4876
Published: 2013-07-18
Description: The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/458007; http://www.kb.cert.org/vuls/id/BLUU-997M5B; http://www.kb.cert.org/vuls/id/458007
CVE: CVE-2013-4877
Published: 2013-07-18
Description: The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets.
CVSS Score: 2.6 (LOW)
CWE: CWE-287
References: http://www.kb.cert.org/vuls/id/458007; http://www.kb.cert.org/vuls/id/BLUU-997M5B; http://www.securityfocus.com/bid/61169
CVE: CVE-2012-6349
Published: 2013-07-18
Description: Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute arbitrary code via a crafted file, aka SPR KLYH92XL3W.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21627992; http://www-01.ibm.com/support/docview.wss?uid=swg21627992
CVE: CVE-2013-4011
Published: 2013-07-18
Description: Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.
CVSS Score: 7.2 (HIGH)
References: http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.asc; http://osvdb.org/95419; http://osvdb.org/95420
CVE: CVE-2013-4141
Published: 2013-07-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-4125.  Reason: This candidate is a reservation duplicate of CVE-2013-4125.  Notes: All CVE users should reference CVE-2013-4125 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-4878
Published: 2013-07-18
Description: The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has an improper ScriptAlias directive for phppath, which makes it easier for remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2012-1823.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://kb.parallels.com/116241; http://seclists.org/fulldisclosure/2013/Jun/21; http://www.kb.cert.org/vuls/id/673343
CVE: CVE-2013-0559
Published: 2013-07-19
Description: Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1LI77499; http://www.ibm.com/support/docview.wss?uid=swg21643847; https://exchange.xforce.ibmcloud.com/vulnerabilities/85557
CVE: CVE-2013-3274
Published: 2013-07-19
Description: EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html; http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html
CVE: CVE-2013-3275
Published: 2013-07-19
Description: EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilities."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html; http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html
CVE: CVE-2013-3436
Published: 2013-07-19
Description: The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows remote attackers to bypass the encryption policy via certain uses of UDP port 848, aka Bug ID CSCui07698.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/95460; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3436; http://tools.cisco.com/security/center/viewAlert.x?alertId=30140
CVE: CVE-2012-3414
Published: 2013-07-19
Description: Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bot24.blogspot.ca/2013/04/swfupload-object-injectioncsrf.html; http://code.google.com/p/swfupload/issues/detail?id=376; http://make.wordpress.org/core/2013/06/21/secure-swfupload/
CVE: CVE-2013-1879
Published: 2013-07-20
Description: Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2013-1029.html; http://secunia.com/advisories/54073; http://www.securityfocus.com/bid/61142
CVE: CVE-2013-1955
Published: 2013-07-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs7.easyphpcalendar.com/source/ChangeLog/changeLog.htm; http://www.easyphpcalendar.com/forums/showthread.php?p=4555; http://www.openwall.com/lists/oss-security/2013/04/16/6
CVE: CVE-2013-2028
Published: 2013-07-20
Description: The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105176.html; http://mailman.nginx.org/pipermail/nginx-announce/2013/000112.html; http://nginx.org/download/patch.2013.chunked.txt
CVE: CVE-2013-2070
Published: 2013-07-20
Description: http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105950.html; http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html; http://nginx.org/download/patch.2013.proxy.txt
CVE: CVE-2013-2248
Published: 2013-07-20
Description: Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://struts.apache.org/release/2.3.x/docs/s2-017.html; http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html; http://www.oracle.com/technetwork/topics/security/cpujan2[PII_REDACTED].html
CVE: CVE-2013-2251
Published: 2013-07-20
Description: Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: http://archiva.apache.org/security.html; http://cxsecurity.com/issue/WLB[PII_REDACTED]; http://osvdb.org/98445
CVE: CVE-2013-3656
Published: 2013-07-20
Description: Cybozu Office 9.1.0 and earlier does not properly manage sessions, which allows remote attackers to bypass authentication by leveraging knowledge of a login URL.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN19491840/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000069; http://products.cybozu.co.jp/office/ver9/download/update/fix910.html
CVE: CVE-2013-4870
Published: 2013-07-20
Description: SQL injection vulnerability in the News Search (news_search) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/; https://exchange.xforce.ibmcloud.com/vulnerabilities/81580; http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/
CVE: CVE-2013-4871
Published: 2013-07-20
Description: Cross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo) extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/93816; http://secunia.com/advisories/53634; http://typo3.org/extensions/repository/view/tq_seo
CVE: CVE-2012-5217
Published: 2013-07-22
Description: HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2355.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2355
Published: 2013-07-22
Description: HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2012-5217.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2356
Published: 2013-07-22
Description: HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363.
CVSS Score: 5.0 (MEDIUM)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2357
Published: 2013-07-22
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2358, CVE-2013-2359, and CVE-2013-2360.
CVSS Score: 4.0 (MEDIUM)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2358
Published: 2013-07-22
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2359, and CVE-2013-2360.
CVSS Score: 4.0 (MEDIUM)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2359
Published: 2013-07-22
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2360.
CVSS Score: 4.0 (MEDIUM)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2360
Published: 2013-07-22
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2359.
CVSS Score: 4.0 (MEDIUM)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2361
Published: 2013-07-22
Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2362
Published: 2013-07-22
Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users to cause a denial of service via unknown vectors, aka ZDI-CAN-1676.
CVSS Score: 2.1 (LOW)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2363
Published: 2013-07-22
Description: HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2356.
CVSS Score: 5.0 (MEDIUM)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2364
Published: 2013-07-22
Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
CVE: CVE-2013-2365
Published: 2013-07-22
Description: HP Database and Middleware Automation (DMA) 10.x before 10.10, when SSL is used, allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 7.9 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03788014; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03788014
CVE: CVE-2013-5217
Published: 2013-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5217.  Reason: This candidate is a duplicate of CVE-2012-5217.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2012-5217 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-4882
Published: 2013-07-22
Description: Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (ePO) extension for McAfee Agent (MA) 4.5 and 4.6, allow remote authenticated users to execute arbitrary SQL commands via the uid parameter to (1) core/showRegisteredTypeDetails.do and (2) EPOAGENTMETA/DisplayMSAPropsDetail.do, a different vulnerability than CVE-2013-0140.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/527228; http://www.securitytracker.com/id/1028803; https://kc.mcafee.com/corporate/index?page=content&id=SB10043
CVE: CVE-2013-4883
Published: 2013-07-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Extension for the McAfee Agent (MA) 4.5 through 4.6, allow remote attackers to inject arbitrary web script or HTML via the (1) instanceId parameter core/loadDisplayType.do; (2) instanceId or (3) monitorUrl parameter to console/createDashboardContainer.do; uid parameter to (4) ComputerMgmt/sysDetPanelBoolPie.do or (5) ComputerMgmt/sysDetPanelSummary.do; (6) uid, (7) orion.user.security.token, or (8) ajaxMode parameter to ComputerMgmt/sysDetPanelQry.do; or (9) uid, (10) orion.user.security.token, or (11) ajaxMode parameter to ComputerMgmt/sysDetPanelSummary.do.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/95187; http://osvdb.org/95188; http://osvdb.org/95189
CVE: CVE-2013-3435
Published: 2013-07-23
Description: The Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of service (networking outage) via a flood of TCP packets, aka Bug ID CSCuh42052.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://osvdb.org/95471; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3435; http://tools.cisco.com/security/center/viewAlert.x?alertId=30152
CVE: CVE-2013-3437
Published: 2013-07-23
Description: SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/95472; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3437; http://tools.cisco.com/security/center/viewAlert.x?alertId=30153
CVE: CVE-2013-2165
Published: 2013-07-23
Description: ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN38787103/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000072; http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html
CVE: CVE-2013-3441
Published: 2013-07-23
Description: Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device crash) by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/95548; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3441; http://tools.cisco.com/security/center/viewAlert.x?alertId=30170
CVE: CVE-2013-4890
Published: 2013-07-23
Description: The DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial of service (daemon crash) via a long URI to TCP port 5600.
CVSS Score: 7.8 (HIGH)
References: http://www.mmeit.be/exploits/samsungtv_reset.txt; http://www.mmeit.be/exploits/samsungtv_reset.txt
CVE: CVE-2013-3006
Published: 2013-07-23
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3008.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html; http://rhn.redhat.com/errata/RHSA-2013-1060.html
CVE: CVE-2013-3007
Published: 2013-07-23
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html; http://rhn.redhat.com/errata/RHSA-2013-1060.html
CVE: CVE-2013-3008
Published: 2013-07-23
Description: Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html; http://rhn.redhat.com/errata/RHSA-2013-1060.html