rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-4956 
Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to read or modify those modules depending on the original permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4957 
The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted report-specific type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-25T23:00:00.000Z
CVE-2013-4958 
Puppet Enterprise before 3.0.1 does not use a session timeout, which makes it easier for attackers to gain privileges by leveraging an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4959 
Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain sensitive information such as (1) host name, (2) MAC address, and (3) SSH keys via the web browser cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4961 
Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4962 
The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4963 
Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report, (2) group, or (3) class or possibly have other unspecified impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-14T16:00:00.000Z
CVE-2013-4964 
Puppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4965 
Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-25T23:00:00.000Z
CVE-2013-4966 
The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-07T20:00:00.000Z
CVE-2013-4967 
Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4968 
Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-11T17:50:12.000Z
CVE-2013-4969 
Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-07T18:00:00.000Z
CVE-2013-4971 
Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-07T20:00:00.000Z
CVE-2013-4973 
Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-27T01:00:00.000Z
CVE-2013-4974 
RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealMedia file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-27T01:00:00.000Z
CVE-2013-4975 
Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:45:02.000Z
CVE-2013-4976 
Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:48:23.000Z
CVE-2013-4977 
Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-03T16:00:00.000Z
CVE-2013-4978 
Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to execute arbitrary code via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-05T15:00:00.000Z
CVE-2013-4979 
Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-31T15:00:00.000Z
CVE-2013-4980 
Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a long string in the URI in an RTSP SETUP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-03T16:00:00.000Z
CVE-2013-4981 
Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a long string in the Network.SMTP.Receivers parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-03T16:00:00.000Z
CVE-2013-4982 
AVTECH AVN801 DVR has a security bypass via the administration login captcha
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:53:10.000Z
CVE-2013-4983 
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-10T10:00:00.000Z
CVE-2013-4984 
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-10T10:00:00.000Z
CVE-2013-4985 
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:58:37.000Z
CVE-2013-4986 
Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-04T20:00:00.000Z
CVE-2013-4987 
PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-08T02:00:00.000Z
CVE-2013-4988 
Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-13T15:00:00.000Z
CVE-2013-4995 
Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-4996 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-4997 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-4998 
phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-4999 
phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-5000 
phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to config.default.php and other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-5001 
Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a TextLinkTransformationPlugin link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-5002 
Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schema_export.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-5003 
Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pmd_pdf.php or (2) the pdf_page_number parameter to schema_export.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T18:00:00.000Z
CVE-2013-5005 
Multiple cross-site scripting (XSS) vulnerabilities in ajaxRequest/methodCall.do in Tripwire Enterprise 8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) m_target_class_name, (2) m_target_method_name, or (3) m_request_context_params parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-29T18:00:00.000Z
CVE-2013-5006 
main_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading the "var pass=" line within the HTML source code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T01:00:00.000Z
CVE-2013-5008 
The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive information about package-server access, or cause a denial of service, by leveraging knowledge of this key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-10T10:00:00.000Z
CVE-2013-5009 
The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-10T16:00:00.000Z
CVE-2013-5010 
The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-10T16:00:00.000Z
CVE-2013-5011 
Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-10T16:00:00.000Z
CVE-2013-5012 
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-11T02:00:00.000Z
CVE-2013-5013 
Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via (1) vectors involving PHP scripts and (2) unspecified other vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-11T02:00:00.000Z
CVE-2013-5014 
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-14T02:00:00.000Z
CVE-2013-5015 
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-14T02:00:00.000Z
CVE-2013-5016 
Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T10:00:00.000Z
CVE-2013-5017 
SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-18T19:00:00.000Z
CVE-2013-5018 
The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentation fault) via a (1) XAuth username, (2) EAP identity, or (3) PEM encoded file that starts with a 0x04, 0x30, or 0x31 character followed by an ASN.1 length value that triggers an integer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T17:18:00.000Z
CVE-2013-5019 
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T10:00:00.000Z
CVE-2013-5020 
Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_name, (2) forum_group, (3) forum_icon, or (4) forum_desc parameter.  NOTE: the whatus vector is already covered by CVE-2008-2066.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T10:00:00.000Z
CVE-2013-5021 
Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-06T18:00:00.000Z
CVE-2013-5022 
Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method, in conjunction with file content in the (1) Caption or (2) FormatString property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-06T18:00:00.000Z
CVE-2013-5023 
The ActiveX controls in the HelpAsst component in NI Help Links in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allow remote attackers to cause a denial of service by triggering the display of local .chm files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-06T18:00:00.000Z
CVE-2013-5024 
An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted (1) key-open or (2) key-close method calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-06T18:00:00.000Z
CVE-2013-5025 
An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-06T18:00:00.000Z
CVE-2013-5026 
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-06T18:00:00.000Z
CVE-2013-5027 
Collabtive 1.0 has incorrect access control
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T17:02:34.000Z
CVE-2013-5028 
SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3) hardwareLocation parameter in a search command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-11T21:00:00.000Z
CVE-2013-5029 
phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-19T23:00:00.000Z
CVE-2013-5030 
Ruckus Wireless Zoneflex 2942 devices with firmware 9.6.0.0.267 allow remote attackers to bypass authentication, and subsequently access certain configuration/ and maintenance/ scripts, by constructing a crafted URI after receiving an authentication error for an arbitrary login attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T10:00:00.000Z
CVE-2013-5031 
Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a different vulnerability than CVE-2013-5032, CVE-2013-5033, and CVE-2013-5034.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-12T15:00:00.000Z