rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-2810 
Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary commands via a TCP replay attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-08T11:00:00.000Z
CVE-2013-2811 
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-22T01:00:00.000Z
CVE-2013-2813 
The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service (reboot or link outage) via a crafted DNP3 TCP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-17T11:00:00.000Z
CVE-2013-2814 
Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled exception and process crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-17T11:00:00.000Z
CVE-2013-2816 
The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service (reboot or link outage) via crafted input over a serial line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-17T11:00:00.000Z
CVE-2013-2817 
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-24T02:00:00.000Z
CVE-2013-2818 
The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service (infinite loop and DNP3 service disruption) via crafted input over a serial line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-01T15:00:00.000Z
CVE-2013-2819 
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to install Trojan horse firmware by leveraging cleartext credentials in a crafted (1) update or (2) reprogramming action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-15T16:00:00.000Z
CVE-2013-2820 
The Sierra Wireless AirLink Raven X EV-DO gateway 4221_4.0.11.003 and 4228_4.0.11.003 allows remote attackers to reprogram the firmware via a replay attack using UDP ports 17336 and 17388.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-15T16:00:00.000Z
CVE-2013-2821 
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow remote attackers to cause a denial of service (driver crash and process restart) via a crafted DNP3 TCP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-21T11:00:00.000Z
CVE-2013-2822 
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically proximate attackers to cause a denial of service (driver crash and process restart) via crafted input over a serial line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-21T11:00:00.000Z
CVE-2013-2823 
The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY and iFIX, allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over a serial line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-22T01:00:00.000Z
CVE-2013-2824 
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to cause a denial of service via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-26T11:00:00.000Z
CVE-2013-2825 
The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service (CPU consumption and communication outage) via crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-04T20:00:00.000Z
CVE-2013-2826 
WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than on the server, which allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-15T16:00:00.000Z
CVE-2013-2827 
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-15T16:00:00.000Z
CVE-2013-2828 
The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service (interface shutdown) via crafted input over a serial line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-12T01:00:00.000Z
CVE-2013-2829 
MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed DNP3 packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-13T22:00:00.000Z
CVE-2013-2830 
Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-08T23:00:00.000Z
CVE-2013-2832 
The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-16T20:00:00.000Z
CVE-2013-2833 
Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-16T20:00:00.000Z
CVE-2013-2834 
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-16T20:00:00.000Z
CVE-2013-2835 
Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-16T20:00:00.000Z
CVE-2013-2836 
Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2837 
Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2838 
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2839 
Google Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2840 
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2846.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2841 
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of Pepper resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2842 
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2843 
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of speech data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2844 
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style resolution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2845 
The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2846 
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2847 
Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2848 
The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2849 
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-2850 
Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-07T10:00:00.000Z
CVE-2013-2851 
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-07T10:00:00.000Z
CVE-2013-2852 
Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-07T10:00:00.000Z
CVE-2013-2853 
The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \r\n\r\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2854 
Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2855 
The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2856 
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2857 
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2858 
Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2859 
Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2860 
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving access to a database API by a worker process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2861 
Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2862 
Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2863 
Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2864 
The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2865 
Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.110 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T00:00:00.000Z
CVE-2013-2866 
The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information from a machine's physical environment via a clickjacking attack, as demonstrated by an attack using a crafted Cascading Style Sheets (CSS) opacity property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-19T20:00:00.000Z
CVE-2013-2867 
Google Chrome before 28.0.1500.71 does not properly prevent pop-under windows, which allows remote attackers to have an unspecified impact via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2868 
common/extensions/sync_helper.cc in Google Chrome before 28.0.1500.71 proceeds with sync operations for NPAPI extensions without checking for a certain plugin permission setting, which might allow remote attackers to trigger unwanted extension changes via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2869 
Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted JPEG2000 image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2870 
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote servers to execute arbitrary code via crafted response traffic after a URL request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2871 
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2872 
Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2873 
Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2874 
Google Chrome before 28.0.1500.71 on Windows, when an Nvidia GPU is used, allows remote attackers to bypass intended restrictions on access to screen data via vectors involving IPC transmission of GL textures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2875 
core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2876 
browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2877 
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2878 
Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the handling of text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2879 
Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be considered a trusted process for sign-in and subsequent sync operations, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z