rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-3438 
The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-24T01:00:00.000Z
CVE-2013-3439 
Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-23T17:00:00.000Z
CVE-2013-3440 
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-23T17:00:00.000Z
CVE-2013-3441 
Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device crash) by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-22T19:00:00.000Z
CVE-2013-3442 
The web portal in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-03T01:00:00.000Z
CVE-2013-3443 
The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T19:00:00.000Z
CVE-2013-3444 
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T19:00:00.000Z
CVE-2013-3445 
The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service (CPU consumption or process crash) via a flood of malformed IP packets, aka Bug ID CSCug94572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T17:00:00.000Z
CVE-2013-3446 
Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-12T01:00:00.000Z
CVE-2013-3448 
Cisco WebEx Meetings Server does not check whether a user account is active, which allows remote authenticated users to bypass intended access restrictions by performing meeting operations after account deactivation, aka Bug ID CSCuh33315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-01T16:00:00.000Z
CVE-2013-3450 
Cross-site request forgery (CSRF) vulnerability in the User WebDialer page in Cisco Unified Communications Manager (Unified CM) allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-03T01:00:00.000Z
CVE-2013-3451 
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Unified Communications Manager (Unified CM) allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-03T01:00:00.000Z
CVE-2013-3453 
Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presence, allows remote attackers to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5060 or (2) 5061, aka Bug ID CSCud84959.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-22T22:00:00.000Z
CVE-2013-3454 
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via HTTPS requests, aka Bug ID CSCui43128.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-08T14:00:00.000Z
CVE-2013-3455 
Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-12T10:00:00.000Z
CVE-2013-3457 
Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-12T10:00:00.000Z
CVE-2013-3458 
Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service (device crash) via a large volume of (1) SSL or (2) TLS traffic, aka Bug ID CSCuh19462.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-08T01:00:00.000Z
CVE-2013-3459 
Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6a does not properly handle errors, which allows remote attackers to cause a denial of service (service disruption) via malformed registration messages, aka Bug ID CSCuf93466.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3460 
Memory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(1) allows remote attackers to cause a denial of service (service disruption) via a high rate of UDP packets, aka Bug ID CSCub85597.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3461 
Cisco Unified Communications Manager (Unified CM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1) does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service (memory and CPU consumption, and service disruption) via a flood of UDP packets to port 5060, aka Bug ID CSCub35869.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3462 
Buffer overflow in Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(2) allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-25T01:00:00.000Z
CVE-2013-3463 
The protocol-inspection feature on Cisco Adaptive Security Appliances (ASA) devices does not properly implement the idle timeout, which allows remote attackers to cause a denial of service (connection-table exhaustion) via crafted requests that use an inspected protocol, aka Bug ID CSCuh13899.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-30T01:00:00.000Z
CVE-2013-3464 
Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-12T23:00:00.000Z
CVE-2013-3466 
The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-3467 
Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect devices, in certain situations that lack a SPAN session, allows local users to cause a denial of service (memory consumption and device reset) via a (1) "show monitor session all" or (2) "show monitor session" command, aka Bug ID CSCug20103.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-30T01:00:00.000Z
CVE-2013-3468 
The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of service (device hang) via a malformed PNG file, aka Bug ID CSCud04270.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-3469 
Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote attackers to obtain an unauthenticated session to the database-replication port, and consequently obtain sensitive information, via an SSL connection, aka Bug ID CSCue50794.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-04T01:00:00.000Z
CVE-2013-3470 
The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID CSCue46731.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-30T01:00:00.000Z
CVE-2013-3471 
The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to discover cleartext usernames and passwords by leveraging unspecified use of hidden form fields in an HTML document, aka Bug ID CSCug02515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-3472 
Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications Manager (CM) allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-3473 
The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T18:00:00.000Z
CVE-2013-3474 
The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request that (1) lacks a parameter value or (2) contains a malformed parameter value, aka Bug IDs CSCuh14313, CSCuh14159, CSCuh14368, and CSCuh14436.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-30T20:00:00.000Z
CVE-2013-3475 
Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T01:00:00.000Z
CVE-2013-3476 
Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-02T15:00:00.000Z
CVE-2013-3477 
Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-27T15:00:00.000Z
CVE-2013-3478 
SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-05T15:00:00.000Z
CVE-2013-3479 
Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-05T01:00:00.000Z
CVE-2013-3480 
Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a BMP file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-09T18:00:00.000Z
CVE-2013-3481 
Stack-based buffer overflow in Artweaver Plus and Free before 3.1.5 allows remote attackers to execute arbitrary code via a crafted JPG image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T16:00:00.000Z
CVE-2013-3482 
Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an ERS file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-19T15:00:00.000Z
CVE-2013-3483 
Stack-based buffer overflow in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ERS file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-19T15:00:00.000Z
CVE-2013-3484 
Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to application/login/login.html, (2) my_account_login parameter to c/portal_public/login, or (3) email parameter to forgotPassword.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-02T15:00:00.000Z
CVE-2013-3485 
Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) api-ms-win-core-localregistry-l1-1-0.dll file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-30T21:00:00.000Z
CVE-2013-3486 
IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability
Problem types: description: integer overflow
Affected products: vendor: IrfanView FlashPix PlugIn
product: IrfanView FlashPix PlugIn
Published: 2020-01-27T14:28:50.000Z
CVE-2013-3487 
Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to (1) 400.php, (2) 403.php, or (3) 403.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-03T16:00:00.000Z
CVE-2013-3488 
Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream (M2TS) file.
Problem types: description: Buffer Overflow
Affected products: vendor: Media Player Classic
product: Media Player Classic - Home Cinema (MPC-HC)
Published: 2020-01-31T17:46:47.000Z
CVE-2013-3489 
Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file
Problem types: description: Integer Overflow
Affected products: vendor: Media Player Classic
product: Media Player Classic - Home Cinema (MPC-HC)
Published: 2020-01-31T17:46:51.000Z
CVE-2013-3491 
Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) modify buttons, or (3) insert cross-site scripting (XSS) sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-16T10:00:00.000Z
CVE-2013-3492 
XnView 2.03 has a stack-based buffer overflow vulnerability
Problem types: description: buffer overflow
Affected products: vendor: XnView
product: XnView
Published: 2020-01-27T14:24:40.000Z
CVE-2013-3493 
XnView 2.03 has an integer overflow vulnerability
Problem types: description: integer overflow
Affected products: vendor: XnView
product: XnView
Published: 2020-01-27T14:26:46.000Z
CVE-2013-3494 
A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a malicious user execute arbitrary code.
Problem types: description: code execution
Affected products: vendor: UMPlayer
product: UMPlayer
Published: 2020-02-12T15:14:19.000Z
CVE-2013-3495 
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T17:00:00.000Z
CVE-2013-3496 
Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-22T10:00:00.000Z
CVE-2013-3497 
Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T23:00:00.000Z
CVE-2013-3498 
Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T00:00:00.000Z
CVE-2013-3499 
GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain administrative privileges or access files via a crafted header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3500 
The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3501 
Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the foundation-webapp/admin/ directory, (2) the NeDi component, or (3) the Noma component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3502 
monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3503 
The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3504 
Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to overwrite arbitrary files by leveraging access to the nagios account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3505 
The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended access restrictions via a direct request for a (1) log file or (2) configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3506 
cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content, which allows remote attackers to execute arbitrary commands by creating a .shtml file and leveraging Server Side Includes (SSI) functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z
CVE-2013-3507 
The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive information via a direct request for (1) a configuration file, (2) a database dump, or (3) the Tomcat status context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-08T10:00:00.000Z