rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-10075 Apache::Session versions through 1.94 for Perl re-creates deleted sessions
Apache::Session versions through 1.94 for Perl re-creates deleted sessions.

The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist.  This can lead to sessions being revived, potentially with data that was to be deleted.
Problem types: cwe_id: CWE-672
description: CWE-672 Operation on a Resource after Expiration or Release
Affected products: vendor: CHORNY
product: Apache::Session
default_status: unaffected
Credits: lang: en
value: Thomas Sibley
Published: 2026-05-08T07:44:13.267Z
CVE-2013-1000 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1001 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1002 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1003 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1004 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1005 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1006 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1007 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1008 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1009 
WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1023.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T10:00:00.000Z
CVE-2013-1010 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1011 
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1012 
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T10:00:00.000Z
CVE-2013-1013 
XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T10:00:00.000Z
CVE-2013-1014 
Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-19T10:00:00.000Z
CVE-2013-1015 
Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1016 
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.263 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1017 
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1018 
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1019 
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1020 
Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1021 
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG data in a movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1022 
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-24T10:00:00.000Z
CVE-2013-1023 
WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T10:00:00.000Z
CVE-2013-1024 
CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-05T10:00:00.000Z
CVE-2013-1025 
Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JBIG2 data in a PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1026 
Buffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1027 
Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote attackers to execute arbitrary code via a crafted package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1028 
The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1029 
The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service (panic) via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1030 
mdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1031 
Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup of the screen saver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1032 
QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted idsc atom in a QuickTime movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1033 
Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T01:00:00.000Z
CVE-2013-1034 
Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1035 
The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1036 
Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1037 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1038 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1039 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1040 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1041 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1042 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1043 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1044 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1045 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1046 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1047 
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-19T10:00:00.000Z
CVE-2013-1048 
The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an unspecified symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-06T11:00:00.000Z
CVE-2013-1049 
Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-12T16:00:00.000Z
CVE-2013-1050 
The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate attackers to bypass screen locking and access an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-08T22:00:00.000Z
CVE-2013-1051 
apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-21T17:00:00.000Z
CVE-2013-1052 
pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privileges via unspecified vectors related to sudo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-03-21T17:00:00.000Z
CVE-2013-1053 Insecure crypto for storing passwords
In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.
Problem types: cwe_id: CWE-261
description: CWE-261 Weak Cryptography for Passwords
Affected products: vendor: Canonical
product: remote-login-service
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Marc Deslauriers
Published: 2021-01-13T23:00:16.583Z
CVE-2013-1054 Possible remote DOS in WebApps
The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus disabling the extension entirely.
Problem types: cwe_id: CWE-404
description: CWE-404 Improper Resource Shutdown or Release
Affected products: vendor: Canonical
product: unity-firefox-extension
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Chris Coulson
Published: 2021-04-07T19:20:18.126Z
CVE-2013-1055 Potential DoS through abuse of rate limit in libunity-webapps for Firefox
The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was hit. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 of unity-firefox-extension and in all versions of libunity-webapps by shipping an empty unity-firefox-extension package, thus disabling the extension entirely and invalidating the attack against the libunity-webapps package.
Problem types: cwe_id: CWE-404
description: CWE-404 Improper Resource Shutdown or Release
Affected products: vendor: Canonical
product: unity-firefox-extension
vendor: Canonical
product: libunity-webapps
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Chris Coulson
Published: 2021-04-07T19:20:18.808Z
CVE-2013-1056 
X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or possibly gain privileges via vectors involving cached xkb files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-28T21:00:00.000Z
CVE-2013-1057 
Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-15T18:16:00.000Z
CVE-2013-1058 
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-23T18:00:00.000Z