rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-5600 
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors involving a blob: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-30T10:00:00.000Z
CVE-2013-5601 
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code via vectors related to a memory allocation through the garbage collection (GC) API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-30T10:00:00.000Z
CVE-2013-5602 
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-30T10:00:00.000Z
CVE-2013-5603 
Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving HTML document templates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-30T10:00:00.000Z
CVE-2013-5604 
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 does not properly initialize data, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via crafted documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-30T10:00:00.000Z
CVE-2013-5605 
Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-16T15:00:00.000Z
CVE-2013-5606 
The CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access restrictions via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-16T15:00:00.000Z
CVE-2013-5607 
Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in Firefox before 25.0.1, Firefox ESR 17.x before 17.0.11 and 24.x before 24.1.1, and SeaMonkey before 2.22.1, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted X.509 certificate, a related issue to CVE-2013-1741.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-20T11:00:00.000Z
CVE-2013-5609 
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5610 
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5611 
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5612 
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5613 
Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5614 
Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5615 
The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5616 
Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5618 
Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5619 
Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-11T15:00:00.000Z
CVE-2013-5634 
arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and host OS crash) or possibly have unspecified other impact by omitting vCPU initialization before a KVM_GET_REG_LIST ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-25T10:00:00.000Z
CVE-2013-5635 
Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly maintain the state of password failures, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by entering password guesses within multiple Unlock.exe processes that are running simultaneously.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-30T11:00:00.000Z
CVE-2013-5636 
Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not associate password failures with a device ID, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by overwriting DVREM.EPM with a copy of itself after each few password guesses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-30T11:00:00.000Z
CVE-2013-5637 
PQI AirCard has persistent XSS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-07T16:27:20.000Z
CVE-2013-5638 
Transcend WiFiSD 1.8 has persistent XSS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-07T16:31:33.000Z
CVE-2013-5639 
Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the gnew_language cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-11T15:00:00.000Z
CVE-2013-5640 
Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) answer_id or (2) question_id parameter to polls/vote.php, (3) story_id parameter to comments/add.php or (4) comments/edit.php, or (5) thread_id parameter to posts/add.php.  NOTE: this issue was SPLIT due to differences in researchers and disclosure dates. CVE-2013-7349 already covers the news_id parameter to news/send.php, user_email parameter to users/register.php, and thread_id to posts/edit.php vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-01T00:00:00.000Z
CVE-2013-5641 
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and daemon crash) via an ACK with SDP to a previously terminated channel.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-09T17:00:00.000Z
CVE-2013-5642 
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.3-digiumphones allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and daemon crash) via an invalid SDP that defines a media description before the connection description in a SIP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-09T17:00:00.000Z
CVE-2013-5645 
Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-5646 
Cross-site scripting (XSS) vulnerability in Roundcube webmail 1.0-git allows remote authenticated users to inject arbitrary web script or HTML via the Name field of an addressbook group.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-5647 
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-5648 
Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c in libdigidoc 3.6.0.0, as used in ID-software before 3.7.2 and other products, allows remote attackers to overwrite arbitrary files via a filename beginning with / (slash) or \ (backslash) in a DDOC file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-29T10:00:00.000Z
CVE-2013-5649 
Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow (1) remote attackers to inject arbitrary web script or HTML via vectors involving login pages, and allow (2) remote authenticated users to inject arbitrary web script or HTML via vectors involving a support page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-13T10:00:00.000Z
CVE-2013-5650 
Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T19:00:00.000Z
CVE-2013-5651 
The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonstrated by a large nodeset value to numatune.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T21:00:00.000Z
CVE-2013-5653 
The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-07T15:00:00.000Z
CVE-2013-5654 
Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage
Problem types: description: Arbitrary file upload vulnerability in YingZhi Python Programming Language for iOS
Affected products: vendor: YingZhi
product: YingZhi Python Programming Language
Published: 2019-02-15T21:00:00.000Z
CVE-2013-5655 
Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. (dot dot) in the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-14T19:00:00.000Z
CVE-2013-5656 
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-07T16:35:23.000Z
CVE-2013-5657 
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-07T16:41:30.000Z
CVE-2013-5658 
AultWare pwStore 2010.8.30.0 has XSS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-07T16:47:11.000Z
CVE-2013-5659 
Wiz 5.0.3 has a user mode write access violation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T14:19:26.000Z
CVE-2013-5660 
Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-25T17:00:00.000Z
CVE-2013-5661 
Cache Poisoning issue exists in DNS Response Rate Limiting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-05T18:14:31.000Z
CVE-2013-5663 
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2013-5664 
Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-31T17:00:00.000Z
CVE-2013-5666 
The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad transmissions, which allows local users to obtain sensitive information (kernel memory) via a length greater than the length of the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-23T20:00:00.000Z
CVE-2013-5667 
The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell metacharacters in the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-24T02:00:00.000Z
CVE-2013-5668 
The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-24T02:00:00.000Z
CVE-2013-5669 
The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-24T02:00:00.000Z
CVE-2013-5670 
Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity before 1.7.3 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the to_r_list parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-05T18:00:00.000Z
CVE-2013-5671 
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-12T14:00:00.000Z
CVE-2013-5672 
Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add a testimonial via an iNIC_testimonial_save action; (2) add a listing template via an iNIC_testimonial_save_listing_template action; (3) add a widget template via an iNIC_testimonial_save_widget action; insert cross-site scripting (XSS) sequences via the (4) project_name, (5) project_url, (6) client_name, (7) client_city, (8) client_state, (9) description, (10) tags, (11) video_url, or (12) is_featured, (13) title, (14) widget_title, (15) no_of_testimonials, (16) filter_by_country, (17) filter_by_tags, or (18) widget_template parameter to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-10T19:00:00.000Z
CVE-2013-5673 
SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testimonial_add action to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-10T19:00:00.000Z
CVE-2013-5674 
badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge, which allows remote attackers to conduct PHP object injection attacks via unspecified vectors, as demonstrated by overwriting the value of the userid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T10:00:00.000Z
CVE-2013-5676 
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-13T17:00:00.000Z
CVE-2013-5679 
The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protection mechanisms via an attack against authenticity in the default configuration, involving a null MAC and a zero MAC length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T10:00:00.000Z
CVE-2013-5680 
Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-06T16:00:00.000Z
CVE-2013-5687 
RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-13T23:03:34.000Z
CVE-2013-5688 
Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated users to read arbitrary files via a ../%00 (dot dot backslash encoded null byte) in the file parameter in a (1) download or (2) get_content action, or (3) upload arbitrary files via a ../%00 (dot dot backslash encoded null byte) in the dir parameter in an upload action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-05T21:00:00.000Z
CVE-2013-5690 
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) content with the text/xml MIME type or (2) the Status comment field of an appointment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-03T19:00:00.000Z