rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-3587 
The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack, a different issue than CVE-2012-4929.
Problem types: description: Other
Affected products: vendor: n/a
product: HTTPS protocol
Published: 2020-02-21T17:11:47.000Z
CVE-2013-3588 
The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-02T01:00:00.000Z
CVE-2013-3589 
Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-24T10:00:00.000Z
CVE-2013-3590 
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code by uploading an executable file with the image/jpeg content type, and then accessing this file via unspecified vectors, as demonstrated by access to a JSP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T01:00:00.000Z
CVE-2013-3591 
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
Problem types: description: PHP Code Execution
Affected products: vendor: vTiger CRM
product: vTiger CRM
Published: 2020-02-07T14:15:28.000Z
CVE-2013-3593 
Baramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and (2) data storage, which allows remote attackers to obtain sensitive information by sniffing the network, and allows context-dependent attackers to obtain sensitive information by reading a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-03T10:00:00.000Z
CVE-2013-3594 
The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device reset) or possibly execute arbitrary code by sending many packets to TCP port 22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-20T02:00:00.000Z
CVE-2013-3595 
The OpenManage web application 2.5 build 1.19 on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote authenticated users to cause a denial of service (device reset) via a direct request to an unspecified OSPF URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-20T02:00:00.000Z
CVE-2013-3596 
AdvancePro Advanceware allows remote authenticated users to obtain sensitive information about arbitrary customers' orders via a modified id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-08T16:00:00.000Z
CVE-2013-3597 
servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T01:00:00.000Z
CVE-2013-3598 
Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T01:00:00.000Z
CVE-2013-3599 
userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-06T10:00:00.000Z
CVE-2013-3600 
Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecified functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-06T10:00:00.000Z
CVE-2013-3601 
Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-06T10:00:00.000Z
CVE-2013-3602 
SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to execute arbitrary SQL commands via the docID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-06T10:00:00.000Z
CVE-2013-3603 
Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-06T10:00:00.000Z
CVE-2013-3604 
Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject arbitrary web script or HTML via crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-06T10:00:00.000Z
CVE-2013-3605 
Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-06T10:00:00.000Z
CVE-2013-3606 
The login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device outage) via a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-20T02:00:00.000Z
CVE-2013-3607 
Multiple stack-based buffer overflows in the web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allow remote attackers to execute arbitrary code on the Baseboard Management Controller (BMC), as demonstrated by the (1) username or (2) password field in login.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-08T01:00:00.000Z
CVE-2013-3608 
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices allows remote authenticated users to execute arbitrary commands via shell metacharacters, as demonstrated by the IP address field in config_date_time.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-08T01:00:00.000Z
CVE-2013-3609 
The web interface in the Intelligent Platform Management Interface (IPMI) implementation on Supermicro H8DC*, H8DG*, H8SCM-F, H8SGL-F, H8SM*, X7SP*, X8DT*, X8SI*, X9DAX-*, X9DB*, X9DR*, X9QR*, X9SBAA-F, X9SC*, X9SPU-F, and X9SR* devices relies on JavaScript code on the client for authorization checks, which allows remote authenticated users to bypass intended access restrictions via a crafted request, related to the PrivilegeCallBack function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-08T01:00:00.000Z
CVE-2013-3610 
qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers to discover the administrator password via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2013-3612 
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving (a) ActiveX, (b) a standalone client, or (c) unknown other vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-17T10:00:00.000Z
CVE-2013-3613 
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-17T10:00:00.000Z
CVE-2013-3614 
Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-17T10:00:00.000Z
CVE-2013-3615 
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-17T10:00:00.000Z
CVE-2013-3616 
Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-24T10:00:00.000Z
CVE-2013-3617 
The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML document with an external entity declaration in conjunction with an entity reference to /ws/dal/ADUser or other /ws/dal/XXX interfaces, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-02T19:00:00.000Z
CVE-2013-3619 
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon.
Problem types: description: Other
Affected products: vendor: Supermicro
product: IPMI
Published: 2020-01-02T17:51:46.000Z
CVE-2013-3620 
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generation motherboards before SMT X8 312.
Problem types: description: Other
Affected products: vendor: Supermicro
product: IPMI
Published: 2020-01-02T17:51:51.000Z
CVE-2013-3622 
Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-10T16:00:00.000Z
CVE-2013-3623 
Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1) sess_sid or (2) ACT parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-10T16:00:00.000Z
CVE-2013-3624 
The OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in cleartext on deployed machines, which allows remote attackers to obtain sensitive information by reading a file. NOTE: this ID was also incorrectly mapped to a separate issue in Oracle Outside In, but the correct ID for that issue is CVE-2013-5763.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-03T10:00:00.000Z
CVE-2013-3625 
An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-03T10:00:00.000Z
CVE-2013-3626 
Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-06T11:00:00.000Z
CVE-2013-3627 
FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927 and 4.6 before 4.6.0.3258 allows remote attackers to cause a denial of service (service crash) via a malformed HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-05T10:00:00.000Z
CVE-2013-3628 
Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
Problem types: description: Arbitrary Command Execution Vulnerability
Affected products: vendor: Zabbix
product: Zabbix
Published: 2020-02-07T14:19:00.000Z
CVE-2013-3629 
ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
Problem types: description: PHP Code Execution
Affected products: vendor: ISPConfig
product: ISPConfig
Published: 2020-02-07T14:25:36.000Z
CVE-2013-3630 
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-01T01:00:00.000Z
CVE-2013-3631 
NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.php, aka the "Advanced | Execute Command" feature.  NOTE: this issue might not be a vulnerability, since it appears to be part of legitimate, intentionally-exposed functionality by the developer and is allowed within the intended security policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-02T19:00:00.000Z
CVE-2013-3632 
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-09-29T22:00:00.000Z
CVE-2013-3633 
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The user privileges for the web interface are only enforced on client side and not properly verified on server side. Therefore, an attacker is able to execute privileged commands using an unprivileged account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T20:00:00.000Z
CVE-2013-3634 
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T20:00:00.000Z
CVE-2013-3635 
ProjectPier 0.8.8 has stored XSS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-07T14:31:22.000Z
CVE-2013-3636 
ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-07T14:34:40.000Z
CVE-2013-3637 
ProjectPier 0.8.8 does not use the Secure flag for cookies
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-07T14:38:48.000Z
CVE-2013-3638 
SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-06T21:59:15.000Z
CVE-2013-3639 
Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) interface, (3) name, or (4) tabmodule parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-05T15:00:00.000Z
CVE-2013-3640 
Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advanced before 12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-10T17:00:00.000Z
CVE-2013-3641 
The Pizza Hut Japan Official Order application before 1.1.1.a for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-10T17:00:00.000Z
CVE-2013-3642 
The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earlier for Android 3.0 through 4.0.3, and 1.76b and earlier for Android 4.1 through 4.2 does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-17T01:00:00.000Z
CVE-2013-3643 
The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-17T01:00:00.000Z
CVE-2013-3644 
Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and Ichitaro JUST School through 2010 allows remote attackers to execute arbitrary code via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-18T18:45:00.000Z
CVE-2013-3645 
Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-14T10:00:00.000Z
CVE-2013-3646 
The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-18T18:45:00.000Z
CVE-2013-3647 
The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.  NOTE: this vulnerability exists because of a CVE-2012-4009 regression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-18T18:45:00.000Z
CVE-2013-3648 
Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MAIL before 6.7, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-3649 
Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-3650 
Directory traversal vulnerability in the lfCheckFileName function in data/class/pages/LC_Page_ResizeImage.php in LOCKON EC-CUBE before 2.12.5 allows remote attackers to read arbitrary image files via vectors involving the image parameter to resize_image.php, a different vulnerability than CVE-2013-3654.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-29T19:00:00.000Z
CVE-2013-3651 
LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormParam.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-29T19:00:00.000Z
CVE-2013-3652 
Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC_Page_Products_List.php in LOCKON EC-CUBE 2.11.0 through 2.12.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving the classcategory_id2 field, a different vulnerability than CVE-2013-3653.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-29T16:00:00.000Z
CVE-2013-3653 
Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 allow remote attackers to inject arbitrary web script or HTML via vectors involving the rank parameter, a different vulnerability than CVE-2013-3652.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-29T16:00:00.000Z
CVE-2013-3654 
Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SC_CheckError.php and data/class/SC_FormParam.php, a different vulnerability than CVE-2013-3650.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-29T19:00:00.000Z
CVE-2013-3655 
The Sharp AQUOS PhotoPlayer HN-PP150 with firmware before 1.04.00.04 allows remote attackers to cause a denial of service (networking outage) via crafted packet data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-12T16:00:00.000Z
CVE-2013-3656 
Cybozu Office 9.1.0 and earlier does not properly manage sessions, which allows remote attackers to bypass authentication by leveraging knowledge of a login URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-18T01:00:00.000Z
CVE-2013-3657 
Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-10T10:00:00.000Z