rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-4793 
The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary ASP.NET code via a crafted SOAP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-27T18:00:00.000Z
CVE-2013-4795 
Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-11T14:00:00.000Z
CVE-2013-4796 
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:24:53.000Z
CVE-2013-4797 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1690.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-4798 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-4799 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-4800 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-4801 
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T18:00:00.000Z
CVE-2013-4802 
Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T17:00:00.000Z
CVE-2013-4804 
Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-4805 
Unspecified vulnerability in HP Integrated Lights-Out 3 (aka iLO3) firmware before 1.60 and 4 (aka iLO4) firmware before 1.30 allows remote attackers to bypass authentication via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-03T01:00:00.000Z
CVE-2013-4806 
The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote authenticated users to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-12T10:00:00.000Z
CVE-2013-4807 
Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26 20130703 allows remote attackers to modify data via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-04T20:00:00.000Z
CVE-2013-4808 
Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2.8 allows remote attackers to obtain privileged access via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-18T01:00:00.000Z
CVE-2013-4809 
Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-4810 
HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplicate of CVE-2007-1036, CVE-2010-0738, and/or CVE-2012-0874.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-4811 
UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-4812 
UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-4813 
The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a HEAD request, aka ZDI-CAN-1745.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T18:00:00.000Z
CVE-2013-4814 
Cross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-4815 
Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-20T21:00:00.000Z
CVE-2013-4817 
Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-4818 
Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, and IceWall File Manager 3.0 through SP4 allows remote attackers to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-4819 
Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-4820 
Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA Agent Library 8.0 through 10.0, IceWall Federation Agent 3.0, and IceWall File Manager 3.0 through SP4 allows remote authenticated users to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-4821 
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T10:00:00.000Z
CVE-2013-4822 
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-4823 
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-4824 
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-1644.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-4825 
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-4826 
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-4827 
SQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-13T10:00:00.000Z
CVE-2013-4828 
HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-04T10:00:00.000Z
CVE-2013-4829 
HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-04T10:00:00.000Z
CVE-2013-4830 
HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T10:00:00.000Z
CVE-2013-4831 
HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T10:00:00.000Z
CVE-2013-4832 
HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T10:00:00.000Z
CVE-2013-4833 
Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-16T10:00:00.000Z
CVE-2013-4834 
Unspecified vulnerability in the client component in HP Application LifeCycle Management (ALM) before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1327.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-04T15:00:00.000Z
CVE-2013-4835 
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-04T15:00:00.000Z
CVE-2013-4836 
Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application LifeCycle Management (ALM) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1759.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-04T15:00:00.000Z
CVE-2013-4837 
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-04T15:00:00.000Z
CVE-2013-4838 
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1850.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-04T15:00:00.000Z
CVE-2013-4839 
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1851.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-04T15:00:00.000Z
CVE-2013-4840 
Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-28T17:00:00.000Z
CVE-2013-4841 
Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-26T11:00:00.000Z
CVE-2013-4842 
Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-16T02:00:00.000Z
CVE-2013-4843 
Unspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-16T02:00:00.000Z
CVE-2013-4844 
Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-29T02:00:00.000Z
CVE-2013-4845 
Cross-site scripting (XSS) vulnerability on HP Officejet Pro 8500 (aka A909) All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-14T22:00:00.000Z
CVE-2013-4846 
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote attackers to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-14T10:00:00.000Z
CVE-2013-4848 
TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-25T16:03:09.000Z
CVE-2013-4851 
The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-28T18:00:00.000Z
CVE-2013-4852 
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-19T23:00:00.000Z
CVE-2013-4854 
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-26T23:00:00.000Z
CVE-2013-4855 
D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-25T15:47:43.000Z
CVE-2013-4856 
D-Link DIR-865L has Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-25T15:44:11.000Z
CVE-2013-4857 
D-Link DIR-865L has PHP File Inclusion in the router xml file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-25T15:36:13.000Z
CVE-2013-4858 
Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) via a crafted .wav file, as demonstrated by movieMaker.wav.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-30T02:00:00.000Z
CVE-2013-4859 
INSTEON Hub 2242-222 lacks Web and API authentication
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:28:23.000Z
CVE-2013-4860 
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-05T20:00:00.000Z
CVE-2013-4861 
Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users to read arbirary files via a .. (dot dot) in the filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T16:09:39.000Z
CVE-2013-4862 
MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T16:09:36.000Z
CVE-2013-4863 
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote authenticated users to execute arbitrary Lua code via a RunLua action in a request to port_49451/upnp/control/hag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T16:09:32.000Z
CVE-2013-4864 
MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bin/cmh/proxy.sh, related to a Server-Side Request Forgery (SSRF) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T16:09:29.000Z
CVE-2013-4865 
Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware via the squashfs parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T16:09:26.000Z
CVE-2013-4866 
The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption (water or heat) or user discomfort.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-16T23:00:00.000Z
CVE-2013-4867 
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:31:35.000Z
CVE-2013-4868 
Karotz API 12.07.19.00: Session Token Information Disclosure
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-27T16:38:06.000Z
CVE-2013-4869 
Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756.  NOTE: the vendor has provided a statement that the "hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T00:00:00.000Z
CVE-2013-4870 
SQL injection vulnerability in the News Search (news_search) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T01:00:00.000Z