rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-7404 
GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for (1) Telnet and (2) FTP, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T10:00:00.000Z
CVE-2013-7405 
The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T10:00:00.000Z
CVE-2013-7406 
SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-21T14:00:00.000Z
CVE-2013-7407 
Cross-site request forgery (CSRF) vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-22T14:00:00.000Z
CVE-2013-7408 
F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-26T20:00:00.000Z
CVE-2013-7409 
Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-30T15:00:00.000Z
CVE-2013-7416 
canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-12-03T21:00:00.000Z
CVE-2013-7417 
Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.  NOTE: this can be used to bypass the cross-site request forgery (CSRF) protection mechanism by setting the Referer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-02T19:00:00.000Z
CVE-2013-7418 
cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter.  NOTE: this can be exploited remotely by leveraging a separate cross-site scripting (XSS) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-02T22:00:00.000Z
CVE-2013-7419 
Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-09T18:00:00.000Z
CVE-2013-7420 
Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-12T17:00:00.000Z
CVE-2013-7421 
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-02T11:00:00.000Z
CVE-2013-7422 
Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long digit string associated with an invalid backreference within a regular expression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2013-7423 
The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-02-24T15:00:00.000Z
CVE-2013-7424 
The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-26T19:00:00.000Z
CVE-2013-7426 
Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T20:00:00.000Z
CVE-2013-7428 
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T16:00:00.000Z
CVE-2013-7429 
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin_googlemap2_proxy.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T16:00:00.000Z
CVE-2013-7430 
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2013-7431 
Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T20:00:00.000Z
CVE-2013-7432 
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T20:00:00.000Z
CVE-2013-7433 
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T20:00:00.000Z
CVE-2013-7435 
The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retrieval in fm_IDL.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-01T17:00:00.000Z
CVE-2013-7436 
noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-10T14:00:00.000Z
CVE-2013-7437 
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-29T21:00:00.000Z
CVE-2013-7438 
Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PBM image, related to (1) stream line data, which triggers a heap-based buffer overflow, or (2) vectors related to an "internal intermediate heap-based buffer."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-29T21:00:00.000Z
CVE-2013-7439 
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-16T14:00:00.000Z
CVE-2013-7440 
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-07T18:00:00.000Z
CVE-2013-7441 
The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2013-7442 
GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the Administrator user and (2) iis for the IIS user, which has unspecified impact and attack vectors related to TimbuktuPro.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T10:00:00.000Z
CVE-2013-7443 
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-12T14:00:00.000Z
CVE-2013-7444 
The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-01T14:00:00.000Z
CVE-2013-7445 
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-16T01:00:00.000Z
CVE-2013-7446 
Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-28T11:00:00.000Z
CVE-2013-7447 
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-17T15:00:00.000Z
CVE-2013-7448 
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-23T19:00:00.000Z
CVE-2013-7449 
The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-21T14:00:00.000Z
CVE-2013-7450 
Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-03T15:00:00.000Z
CVE-2013-7451 
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2013-7452 
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2013-7453 
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2013-7454 
The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2013-7455 
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-07T10:00:00.000Z
CVE-2013-7456 
gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-07T10:00:00.000Z
CVE-2013-7457 
Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2013-7458 
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-10T14:00:00.000Z
CVE-2013-7459 
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-15T15:00:00.000Z
CVE-2013-7460 
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions.
Problem types: description: A write protection and execution bypass vulnerability
Affected products: vendor: Intel
product: Application Control (MAC)
Published: 2017-03-14T22:00:00.000Z
CVE-2013-7461 
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions.
Problem types: description: A write protection and execution bypass vulnerability
Affected products: vendor: Intel
product: Change Control (MCC)
Published: 2017-03-14T22:00:00.000Z
CVE-2013-7462 
A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated users to view contents of arbitrary system files that did not have file system level read access restrictions via a null-byte injection exploit.
Problem types: description: A directory traversal vulnerability
Affected products: vendor: Intel
product: SaaS Control Console (SCC) Platform
Published: 2017-03-14T22:00:00.000Z
CVE-2013-7463 
The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-19T17:00:00.000Z
CVE-2013-7464 
In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is not configured, the Anti-CSRF Token used is predictable and would permit an attacker to bypass the CSRF protections, because an automatically generated secret is not used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T00:00:00.000Z
CVE-2013-7465 
Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-05T05:00:00.000Z
CVE-2013-7466 
Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2013-7467 
Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2013-7468 
Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-07T22:00:00.000Z
CVE-2013-7469 
Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-21T03:00:00.000Z
CVE-2013-7470 
cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T02:22:33.000Z
CVE-2013-7471 
An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-11T20:46:45.000Z
CVE-2013-7472 
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-15T22:28:13.000Z
CVE-2013-7473 
Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:21:42.000Z
CVE-2013-7474 
Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-01T14:19:10.000Z
CVE-2013-7475 
The contact-form-plugin plugin before 3.52 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-13T16:47:59.000Z
CVE-2013-7476 
The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T15:29:42.000Z
CVE-2013-7477 
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:25:52.000Z
CVE-2013-7478 
The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:26:42.000Z
CVE-2013-7479 
The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:27:29.000Z
CVE-2013-7480 
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:28:11.000Z
CVE-2013-7481 
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:46:07.000Z
CVE-2013-7482 
The reflex-gallery plugin before 1.4.3 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:12:14.000Z
CVE-2013-7483 
The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:36:32.000Z
CVE-2013-7484 
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-30T00:00:00.000Z
CVE-2013-7485 
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or HTML via the publication name, which is not properly handled in an error message. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-02T18:05:35.000Z
CVE-2013-7486 
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or HTML via the body of an email. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-02T18:05:38.000Z
CVE-2013-7487 
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-21T00:04:20.000Z