rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-2880 
Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-10T10:00:00.000Z
CVE-2013-2881 
Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T21:00:00.000Z
CVE-2013-2882 
Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T21:00:00.000Z
CVE-2013-2883 
Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T21:00:00.000Z
CVE-2013-2884 
Use-after-free vulnerability in the DOM implementation in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper tracking of which document owns an Attr object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T21:00:00.000Z
CVE-2013-2885 
Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to not properly considering focus during the processing of JavaScript events in the presence of a multiple-fields input type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T21:00:00.000Z
CVE-2013-2886 
Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-30T21:00:00.000Z
CVE-2013-2887 
Multiple unspecified vulnerabilities in Google Chrome before 29.0.1547.57 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-21T10:00:00.000Z
CVE-2013-2888 
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2889 
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2890 
drivers/hid/hid-sony.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SONY is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2891 
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2892 
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2893 
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2894 
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2895 
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2896 
drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2897 
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2898 
drivers/hid/hid-sensor-hub.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SENSOR_HUB is enabled, allows physically proximate attackers to obtain sensitive information from kernel memory via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2899 
drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-2900 
The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-21T10:00:00.000Z
CVE-2013-2901 
Multiple integer overflows in (1) libGLESv2/renderer/Renderer9.cpp and (2) libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine (ANGLE), as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-21T10:00:00.000Z
CVE-2013-2902 
Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-21T10:00:00.000Z
CVE-2013-2903 
Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving a (1) AUDIO or (2) VIDEO element between documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-21T10:00:00.000Z
CVE-2013-2904 
Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element so that its src attribute is no longer an XML document, leading to unintended garbage collection of this document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-21T10:00:00.000Z
CVE-2013-2905 
The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-21T10:00:00.000Z
CVE-2013-2906 
Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp, core/platform/audio/AudioDSPKernelProcessor.cpp, core/platform/audio/HRTFElevation.cpp, and modules/webaudio/ConvolverNode.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2907 
The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2908 
Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2909 
Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2910 
Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2911 
Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of post-failure recompilation in unspecified libxslt versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2912 
Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_process_router.cc in the Pepper Plug-in API (PPAPI) in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a resource-destruction message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2913 
Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2914 
Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2915 
Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2916 
Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code, in conjunction with a delay in notifying the user of an attempted spoof.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2917 
The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2918 
Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect handling of parent-child relationships for anonymous blocks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2919 
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2920 
The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via a relative URL containing a hostname, as demonstrated by a protocol-relative URL beginning with a //www.google.com/ substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2921 
Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering certain callback processing during the reporting of a resource entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2922 
Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2923 
Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2924 
Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-02T10:00:00.000Z
CVE-2013-2925 
Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same XMLHttpRequest object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T20:00:00.000Z
CVE-2013-2926 
Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to list elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T20:00:00.000Z
CVE-2013-2927 
Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to submission for FORM elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T20:00:00.000Z
CVE-2013-2928 
Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T20:00:00.000Z
CVE-2013-2929 
The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T18:00:00.000Z
CVE-2013-2930 
The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable function tracing via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-09T18:00:00.000Z
CVE-2013-2931 
Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-13T15:00:00.000Z
CVE-2013-2933 
Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2934 
Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 does not properly restrict access to web services, which has unspecified impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2935 
Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2936 
Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2937 
Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, related to debugging messages, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2938 
Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2939 
Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2940 
Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T18:00:00.000Z
CVE-2013-2944 
strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-02T14:00:00.000Z