rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-1445 
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-26T17:00:00.000Z
CVE-2013-1447 
OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-12T18:00:00.000Z
CVE-2013-1450 
Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-29T11:00:00.000Z
CVE-2013-1451 
Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-29T11:00:00.000Z
CVE-2013-1453 
plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter.  Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-13T01:00:00.000Z
CVE-2013-1454 
Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to "Coding errors."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-13T01:00:00.000Z
CVE-2013-1455 
Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-13T01:00:00.000Z
CVE-2013-1461 
The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-31T21:00:00.000Z
CVE-2013-1462 
Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-31T21:00:00.000Z
CVE-2013-1463 
Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: this might be the same vulnerability as CVE-2013-1808.  If so, it is likely that CVE-2013-1463 will be REJECTed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-07T02:00:00.000Z
CVE-2013-1464 
Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-07T02:00:00.000Z
CVE-2013-1465 
The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping parameter, as demonstrated by modifying the application configuration using the Config object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-08T20:00:00.000Z
CVE-2013-1466 
Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-05T15:00:00.000Z
CVE-2013-1468 
Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T16:00:00.000Z
CVE-2013-1469 
Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the dl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-13T20:48:00.000Z
CVE-2013-1470 
Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 allows remote attackers to inject arbitrary web script or HTML via the calendar_type parameter to submit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-05T15:00:00.000Z
CVE-2013-1471 
Multiple cross-site scripting (XSS) vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via (1) the Add field for the Black List under Antispam Management User Preferences or (2) the User name field for the Personal Black/White List in the AntiSpam section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-04T19:00:00.000Z
CVE-2013-1472 
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1473 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1474 
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1475 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "IIOP type reuse management" in ObjectStreamClass.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1476 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-0441 and CVE-2013-1475.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via "certain value handler constructors."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1477 
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1478 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" that can trigger an integer overflow and memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1479 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1480 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.  NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient validation of raster parameters" in awt_parseImage.c, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1481 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1482 
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1483 
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-02T00:00:00.000Z
CVE-2013-1484 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-20T21:00:00.000Z
CVE-2013-1485 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-20T21:00:00.000Z
CVE-2013-1486 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-20T21:00:00.000Z
CVE-2013-1487 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 Update 13 and earlier and 6 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-20T21:00:00.000Z
CVE-2013-1488 
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "improper toString calls," and the JDBC driver manager, as demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-08T18:00:00.000Z
CVE-2013-1489 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-31T14:10:00.000Z
CVE-2013-1490 
Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431.  NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors.  NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-31T14:10:00.000Z
CVE-2013-1491 
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-08T18:00:00.000Z
CVE-2013-1492 
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-28T23:00:00.000Z
CVE-2013-1493 
The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-04T16:00:00.000Z
CVE-2013-1494 
Unspecified vulnerability in Oracle Sun Solaris 10, when running on SPARC T4 servers, allows local users to affect availability via unknown vectors related to Kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1495 
asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-18T21:00:00.000Z
CVE-2013-1496 
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1497 
Unspecified vulnerability in the Oracle COREid Access component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to WebGate - WebServer plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1498 
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1496.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1499 
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Network Configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1500 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-18T22:00:00.000Z
CVE-2013-1501 
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1502 
Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.9 and earlier allows local users to affect availability via unknown vectors related to Server Partition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1503 
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1504 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2, 10.3.5, 10.3.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors related to WebLogic Console, a different vulnerability than CVE-2013-2390.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1505 
Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 3.1.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BASE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1506 
Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Locking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1507 
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1508 
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to REST Interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1509 
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1510 
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0419.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1511 
Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z
CVE-2013-1512 
Unspecified vulnerability in Oracle MySQL 5.5.29 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-04-17T05:04:00.000Z