Explain the CVE ID: What does the identifier CVE-2013-1903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1903.

PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1903?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/about/news/1456/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/support/security/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1903?


Explain the CVE ID: What does the identifier CVE-2013-1904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1904.

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-1904?

{'tags': ['x_refsource_MISC'], 'url': 'http://habrahabr.ru/post/174423/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/p/roundcubemail/news/2013/03/security-updates-086-and-073/'}, {'name': '[dev] 20130327 [RCD] zero day vulnerability (tested on v8.0 to 9.0)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.roundcube.net/pipermail/dev/2013-March/022328.html'}, {'name': 'openSUSE-SU-2013:0671', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-04/msg00080.html'}, {'name': '[oss-security] 20130328 Re: CVE Request -- roundcubemail: Local file inclusion  via web UI modification of certain config options', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/03/28/8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1904?


Explain the CVE ID: What does the identifier CVE-2013-1905 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1905.

Cross-site scripting (XSS) vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1905?

{'name': '20130327 [Security-news] SA-CONTRIB-2013-036 - Zero Point - Cross Site Scripting (XSS)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Mar/241'}, {'name': '52775', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52775'}, {'name': '91745', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/91745'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1954588'}, {'name': '58758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58758'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120985/Drupal-Zero-Point-7.x-Cross-Site-Scripting.html'}, {'name': 'zeropoint-unspecified-xss(83137)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83137'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1953840'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1905?


Explain the CVE ID: What does the identifier CVE-2013-1906 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1906.

Cross-site scripting (XSS) vulnerability in the Rules module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with the "administer rules" permission to inject arbitrary web script or HTML via a rule tag.


Provide references for further information: Can you share references or external links related to CVE-2013-1906?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1954592'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1954508'}, {'name': '52768', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52768'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1906?


Explain the CVE ID: What does the identifier CVE-2013-1907 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1907.

The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1907?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120991/Drupal-Common-Groups-7.x-Access-Bypass-Privilege-Escalation.html'}, {'name': '20130327 [Security-news] SA-CONTRIB-2013-038 - Commons Groups - Access bypass & Privilege escalation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Mar/242'}, {'name': '52795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52795'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1954764'}, {'name': '52769', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52769'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1954948'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1954762'}, {'name': '91748', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/91748'}, {'name': 'drupal-commons-groups-security-bypass(83133)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83133'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1907?


Explain the CVE ID: What does the identifier CVE-2013-1908 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1908.

The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1908?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120995/Drupal-Common-Wikis-7.x-Access-Bypass-Privilege-Escalation.html'}, {'name': '20130327 [Security-news] SA-CONTRIB-2013-039 - Commons Wikis - Access bypass & Privilege escalation', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Mar/244'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1954768'}, {'name': '52795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52795'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1954766'}, {'name': '52766', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52766'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1954948'}, {'name': '91747', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/91747'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1908?


Explain the CVE ID: What does the identifier CVE-2013-1909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1909.

The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.


Provide references for further information: Can you share references or external links related to CVE-2013-1909?

{'name': '53968', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53968'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1460013'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/jira/browse/QPID-4918'}, {'name': 'RHSA-2013:1024', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1024.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://qpid.apache.org/releases/qpid-0.22/release-notes.html'}, {'name': '54137', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/54137'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1909?


Explain the CVE ID: What does the identifier CVE-2013-1910 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1910.

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.


Provide references for further information: Can you share references or external links related to CVE-2013-1910?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1910'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1910'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2013-1910'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/58533'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/03/29/4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83348'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1910?


Explain the CVE ID: What does the identifier CVE-2013-1911 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1911.

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.


Provide references for further information: Can you share references or external links related to CVE-2013-1911?

{'tags': ['x_refsource_MISC'], 'url': 'http://otiose.dhs.org/advisories/ldoce-0.0.2-cmd-exec.html'}, {'name': '58783', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58783'}, {'name': '20130401 Remote command execution in Ruby Gem ldoce 0.0.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-04/0010.html'}, {'name': 'rubygem-cve20131911-command-exec(83163)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83163'}, {'name': '[oss-security] 20130331 Re: Remote command execution in Ruby Gem ldoce 0.0.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/03/31/3'}, {'name': '91870', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/91870'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1911?


Explain the CVE ID: What does the identifier CVE-2013-1912 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1912.

Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends to requests, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted pipelined HTTP requests that prevent request realignment from occurring.


Provide references for further information: Can you share references or external links related to CVE-2013-1912?

{'name': 'FEDORA-2013-6253', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103794.html'}, {'name': 'RHSA-2013:0868', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0868.html'}, {'name': '52725', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52725'}, {'name': 'FEDORA-2013-4807', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103730.html'}, {'name': 'DSA-2711', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2711'}, {'name': 'FEDORA-2013-4827', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103770.html'}, {'name': '58820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58820'}, {'name': 'USN-1800-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1800-1'}, {'name': '[oss-security] 20130403 CVE-2013-1912 : haproxy may crash on TCP content inspection rules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/03/1'}, {'name': 'RHSA-2013:0729', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0729.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1912?


Explain the CVE ID: What does the identifier CVE-2013-1913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1913.

Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large color entries value in an X Window System (XWD) image dump.


Provide references for further information: Can you share references or external links related to CVE-2013-1913?

{'name': '64105', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64105'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=947868'}, {'name': 'RHSA-2013:1778', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1778.html'}, {'name': 'GLSA-201603-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-01'}, {'name': 'DSA-2813', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2813'}, {'name': 'USN-2051-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2051-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1913?


Explain the CVE ID: What does the identifier CVE-2013-1914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1914.

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.


Provide references for further information: Can you share references or external links related to CVE-2013-1914?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0008.html'}, {'name': 'RHSA-2013:1605', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1605.html'}, {'name': '55113', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55113'}, {'name': '[oss-security] 20130403 CVE Request: glibc getaddrinfo() stack overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/03/2'}, {'name': 'USN-1991-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1991-1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=947882'}, {'name': 'MDVSA-2013:284', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:284'}, {'name': '58839', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58839'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceware.org/bugzilla/show_bug.cgi?id=15330'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=1cef1b19089528db11f221e938f60b9b048945d7'}, {'name': '[oss-security] 20130403 Re: CVE Request: glibc getaddrinfo() stack overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/03/8'}, {'name': '[oss-security] 20130405 Re: CVE Request: glibc getaddrinfo() stack overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/05/1'}, {'name': 'GLSA-201503-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-04'}, {'name': 'MDVSA-2013:283', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:283'}, {'name': '52817', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52817'}, {'name': 'RHSA-2013:0769', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0769.html'}, {'name': 'MDVSA-2013:163', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:163'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=813121'}, {'name': '20210901 SEC Consult SA-20210901-0 :: Multiple vulnerabilities in MOXA devices', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2021/Sep/0'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1914?


Explain the CVE ID: What does the identifier CVE-2013-1915 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1915.

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2013-1915?

{'name': 'openSUSE-SU-2013:1342', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/SpiderLabs/ModSecurity/commit/d4d80b38aa85eccb26e3c61b04d16e8ca5de76fe'}, {'name': 'openSUSE-SU-2013:1331', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html'}, {'name': '[oss-security] 20130403 Re: CVE Request -- ModSecurity (X < 2.7.3): Vulnerable  to XXE attacks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/03/7'}, {'name': '58810', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58810'}, {'name': 'FEDORA-2013-4831', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101911.html'}, {'name': 'MDVSA-2013:156', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:156'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=947842'}, {'name': 'FEDORA-2013-4834', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101898.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/SpiderLabs/ModSecurity/blob/master/CHANGES'}, {'name': 'FEDORA-2013-4908', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102616.html'}, {'name': '52977', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52977'}, {'name': '52847', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52847'}, {'name': 'DSA-2659', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2659'}, {'name': 'openSUSE-SU-2013:1336', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1915?


Explain the CVE ID: What does the identifier CVE-2013-1916 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1916.

In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.


Provide references for further information: Can you share references or external links related to CVE-2013-1916?

{'tags': ['x_refsource_MISC'], 'url': 'https://wordpress.org/plugins/user-photo/#developers'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset/347137'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.exploit-db.com/exploits/16181'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1916?


Explain the CVE ID: What does the identifier CVE-2013-1917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1917.

Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction.


Provide references for further information: Can you share references or external links related to CVE-2013-1917?

{'name': 'SUSE-SU-2014:0470', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html'}, {'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'name': '1028455', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028455'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': 'openSUSE-SU-2013:0912', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html'}, {'name': '[oss-security] 20130418 Xen Security Advisory 44 (CVE-2013-1917) - Xen PV DoS vulnerability with SYSENTER', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/18/8'}, {'name': 'DSA-2662', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2662'}, {'name': 'SUSE-SU-2014:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html'}, {'name': 'FEDORA-2013-6723', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html'}, {'name': 'SUSE-SU-2014:0411', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1917?


Explain the CVE ID: What does the identifier CVE-2013-1918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1918.

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."


Provide references for further information: Can you share references or external links related to CVE-2013-1918?

{'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'name': 'FEDORA-2013-7432', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105533.html'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': '53187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53187'}, {'name': 'DSA-2666', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2666'}, {'name': 'SUSE-SU-2014:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html'}, {'name': '[oss-security] 20130502 Xen Security Advisory 45 (CVE-2013-1918) - Several long latency operations are not preemptible', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/02/8'}, {'name': '59615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59615'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1918?


Explain the CVE ID: What does the identifier CVE-2013-1919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1919.

Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices."


Provide references for further information: Can you share references or external links related to CVE-2013-1919?

{'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': 'openSUSE-SU-2013:0912', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html'}, {'name': 'DSA-2662', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2662'}, {'name': 'SUSE-SU-2014:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html'}, {'name': 'FEDORA-2013-6723', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html'}, {'name': '[oss-security] 20130418 Xen Security Advisory 46 (CVE-2013-1919) - Several access permission issues with IRQs for unprivileged guests', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/18/6'}, {'name': '59292', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59292'}, {'name': 'FEDORA-2013-6641', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104538.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1919?


Explain the CVE ID: What does the identifier CVE-2013-1920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1920.

Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1920?

{'name': 'SUSE-SU-2014:0470', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html'}, {'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': '[Xen-announce] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html'}, {'name': '92050', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92050'}, {'name': 'xen-cve20131920-code-exec(83226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83226'}, {'name': 'openSUSE-SU-2013:0912', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html'}, {'name': '52857', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52857'}, {'name': '58880', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58880'}, {'name': 'SUSE-SU-2014:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html'}, {'name': 'SUSE-SU-2014:0411', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html'}, {'name': '1028388', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028388'}, {'name': '[oss-security] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/04/7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1920?


Explain the CVE ID: What does the identifier CVE-2013-1921 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1921.

PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.


Provide references for further information: Can you share references or external links related to CVE-2013-1921?

{'name': 'RHSA-2014:0029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0029.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=948106'}, {'name': 'RHSA-2013:1209', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1209.html'}, {'name': 'RHSA-2013:1437', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1437.html'}, {'name': 'RHSA-2013:1207', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1207.html'}, {'name': 'RHSA-2013:1208', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1208.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1921?


Explain the CVE ID: What does the identifier CVE-2013-1922 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1922.

qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.


Provide references for further information: Can you share references or external links related to CVE-2013-1922?

{'name': 'FEDORA-2013-6221', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103637.html'}, {'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'name': 'FEDORA-2013-6185', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103621.html'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': 'FEDORA-2013-6211', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104036.html'}, {'name': '[oss-security] 20130416 CVE-2013-1922 -- qemu: qemu-nbd block format auto-detection vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/16/2'}, {'name': '1028426', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028426'}, {'name': '[oss-security] 20130415 Xen Security Advisory 48 (CVE-2013-1922) - qemu-nbd format-guessing due to missing format specification', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/15/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1922?


Explain the CVE ID: What does the identifier CVE-2013-1923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1923.

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.


Provide references for further information: Can you share references or external links related to CVE-2013-1923?

{'name': '58854', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58854'}, {'name': '[linux-nfs] 20130403 Re: [PATCH] Avoid PTR lookups when possible', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-nfs&m=136500502805121&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=948072'}, {'name': 'openSUSE-SU-2013:1048', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00172.html'}, {'name': 'openSUSE-SU-2013:1012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00142.html'}, {'name': 'openSUSE-SU-2013:1016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00146.html'}, {'name': 'nfsutils-cve20131923-spoofing(85331)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/85331'}, {'name': '[linux-nfs] 20130402 Re: [PATCH] Avoid PTR lookups when possible', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-nfs&m=136491998607561&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1923?


Explain the CVE ID: What does the identifier CVE-2013-1924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1924.

Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2


Provide references for further information: Can you share references or external links related to CVE-2013-1924?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/04/6'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1960338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1924?


Explain the CVE ID: What does the identifier CVE-2013-1925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1925.

The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list.


Provide references for further information: Can you share references or external links related to CVE-2013-1925?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/121072/Drupal-Chaos-Tool-Suite-7.x-Access-Bypass.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1960406'}, {'name': '91986', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/91986'}, {'name': 'drupal-chaostool-node-security-bypass(83254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1960424'}, {'name': '20130403 [Security-news] SA-CONTRIB-2013-041 - Chaos tool suite (ctools) - Access bypass', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Apr/8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1925?


Explain the CVE ID: What does the identifier CVE-2013-1926 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1926.

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.


Provide references for further information: Can you share references or external links related to CVE-2013-1926?

{'name': '92543', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92543'}, {'name': 'SUSE-SU-2013:0851', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html'}, {'name': 'openSUSE-SU-2013:0897', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html'}, {'name': 'icedtea-cve20131940-security-bypass(83642)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83642'}, {'name': 'MDVSA-2013:146', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:146'}, {'name': 'SUSE-SU-2013:1174', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html'}, {'name': '53109', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53109'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/34b6f60ae586'}, {'name': 'openSUSE-SU-2013:0826', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html'}, {'name': 'openSUSE-SU-2013:0735', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html'}, {'name': '53117', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53117'}, {'name': 'RHSA-2013:0753', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0753.html'}, {'name': 'openSUSE-SU-2013:0966', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html'}, {'name': 'openSUSE-SU-2013:0893', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/25dd7c7ac39c'}, {'name': 'USN-1804-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1804-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS'}, {'name': '59281', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59281'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123'}, {'name': 'openSUSE-SU-2013:0715', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=916774'}, {'name': '[distro-pkg-dev] 20130417 IcedTea-Web 1.3.2 and 1.2.3 released!', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1926?


Explain the CVE ID: What does the identifier CVE-2013-1927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1927.

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR."


Provide references for further information: Can you share references or external links related to CVE-2013-1927?

{'name': '92544', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92544'}, {'name': 'SUSE-SU-2013:0851', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00020.html'}, {'name': 'openSUSE-SU-2013:0897', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00034.html'}, {'name': 'MDVSA-2013:146', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:146'}, {'name': 'SUSE-SU-2013:1174', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00013.html'}, {'name': '53109', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53109'}, {'name': 'openSUSE-SU-2013:0826', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-05/msg00032.html'}, {'name': '59286', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59286'}, {'name': 'icedtea-cve20131927-sec-bypass(83640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83640'}, {'name': 'openSUSE-SU-2013:0735', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-05/msg00003.html'}, {'name': '53117', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53117'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://icedtea.classpath.org/hg/release/icedtea-web-1.3/rev/19f5282f53e8'}, {'name': 'RHSA-2013:0753', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0753.html'}, {'name': 'openSUSE-SU-2013:0966', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00101.html'}, {'name': 'openSUSE-SU-2013:0893', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00030.html'}, {'name': 'USN-1804-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1804-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://icedtea.classpath.org/hg/release/icedtea-web-1.2/file/icedtea-web-1.2.3/NEWS'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0123'}, {'name': 'openSUSE-SU-2013:0715', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-04/msg00106.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=884705'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://icedtea.classpath.org/hg/release/icedtea-web-1.2/rev/cb58b31c450e'}, {'name': '[distro-pkg-dev] 20130417 IcedTea-Web 1.3.2 and 1.2.3 released!', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1927?


Explain the CVE ID: What does the identifier CVE-2013-1928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1928.

The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.


Provide references for further information: Can you share references or external links related to CVE-2013-1928?

{'name': 'openSUSE-SU-2013:0847', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/12176503366885edd542389eed3aaf94be163fdb'}, {'name': '[oss-security] 20130405 Re: CVE Request: kernel information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/06/2'}, {'name': 'SUSE-SU-2013:0856', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00000.html'}, {'name': 'USN-1829-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1829-1'}, {'name': '[oss-security] 20130409 Re: CVE Request: kernel information leak in fs/compat_ioctl.c VIDEO_SET_SPU_PALETTE', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/09/6'}, {'name': 'RHSA-2013:1645', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1645.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=949567'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12176503366885edd542389eed3aaf94be163fdb'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1928?


Explain the CVE ID: What does the identifier CVE-2013-1929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1929.

Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.


Provide references for further information: Can you share references or external links related to CVE-2013-1929?

{'name': 'USN-1834-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1834-1'}, {'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=949932'}, {'name': 'SUSE-SU-2013:1473', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html'}, {'name': 'RHSA-2013:1645', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1645.html'}, {'name': 'USN-1835-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1835-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.pdf'}, {'name': 'USN-1838-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1838-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=715230a44310a8cf66fbfb5a46f9a62a9b2de424'}, {'name': 'openSUSE-SU-2013:1971', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html'}, {'name': 'USN-1836-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1836-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424'}, {'name': 'SUSE-SU-2013:1474', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6'}, {'name': 'FEDORA-2013-5368', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101836.html'}, {'name': '[oss-security] 20130405 Re: CVE Request: tg3 VPD firmware -> driver injection', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/06/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1929?


Explain the CVE ID: What does the identifier CVE-2013-1930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1930.

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.


Provide references for further information: Can you share references or external links related to CVE-2013-1930?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1930'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1930'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/58890'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/06/4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83796'}, {'tags': ['x_refsource_MISC'], 'url': 'https://mantisbt.org/bugs/view.php?id=15453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1930?


Explain the CVE ID: What does the identifier CVE-2013-1931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1931.

A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.


Provide references for further information: Can you share references or external links related to CVE-2013-1931?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1931'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1931'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103438.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103459.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/06/4'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/58889'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://mantisbt.org/bugs/view.php?id=15511'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1931?


Explain the CVE ID: What does the identifier CVE-2013-1932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1932.

A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name.


Provide references for further information: Can you share references or external links related to CVE-2013-1932?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1932'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1932'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/06/4'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/58893'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://mantisbt.org/bugs/view.php?id=15415'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1932?


Explain the CVE ID: What does the identifier CVE-2013-1933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1933.

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename.


Provide references for further information: Can you share references or external links related to CVE-2013-1933?

{'name': '92117', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92117'}, {'tags': ['x_refsource_MISC'], 'url': 'http://vapid.dhs.org/advisories/karteek-docsplit-cmd-inject.html'}, {'name': 'karteekdocsplit-cve20131933-command-exec(83277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83277'}, {'name': '[oss-security] 20130408 Re: Remote Command Injection Ruby Gem Karteek Docsplit 0.5.4', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/08/15'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1933?


Explain the CVE ID: What does the identifier CVE-2013-1934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1934.

A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script or HTML via a complex value.


Provide references for further information: Can you share references or external links related to CVE-2013-1934?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.debian.org/security/2015/dsa-3120'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1934'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1934'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/09/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://mantisbt.org/bugs/view.php?id=15416'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1934?


Explain the CVE ID: What does the identifier CVE-2013-1935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1935.

A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest OS users to cause a denial of service (host OS crash) by leveraging a time window during which interrupts are disabled but copy_to_user function calls are possible.


Provide references for further information: Can you share references or external links related to CVE-2013-1935?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=949981'}, {'name': 'RHSA-2013:0907', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2013-0907.html'}, {'name': 'RHSA-2013:0911', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0911.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1935?


Explain the CVE ID: What does the identifier CVE-2013-1936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1936.


Provide references for further information: Can you share references or external links related to CVE-2013-1936?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1936?


Explain the CVE ID: What does the identifier CVE-2013-1937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1937.

Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the (1) visualizationSettings[width] or (2) visualizationSettings[height] parameter. NOTE: a third party reports that this is "not exploitable.


Provide references for further information: Can you share references or external links related to CVE-2013-1937?

{'name': 'MDVSA-2013:144', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:144'}, {'tags': ['x_refsource_MISC'], 'url': 'http://immunityservices.blogspot.com/2019/02/cvss.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/phpmyadmin/phpmyadmin/commit/79089c9bc02c82c15419fd9d6496b8781ae08a5a'}, {'name': 'openSUSE-SU-2013:1065', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html'}, {'name': 'FEDORA-2013-5623', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103188.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/121205/phpMyAdmin-3.5.7-Cross-Site-Scripting.html'}, {'name': 'FEDORA-2013-5604', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103195.html'}, {'name': '20130409 [waraxe-2013-SA#102] - Reflected XSS in phpMyAdmin 3.5.7', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2013-04/0101.html'}, {'name': '[oss-security] 20130409 Re: CVE Request: Self-XSS in phpmyadmin fixed in 3.5.8', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/04/09/13'}, {'name': 'FEDORA-2013-5620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103184.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpmyadmin.net/home_page/security/PMASA-2013-1.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-102.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1937?


Explain the CVE ID: What does the identifier CVE-2013-1938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1938.


Provide references for further information: Can you share references or external links related to CVE-2013-1938?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/58913'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/09/14'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/09/15'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1938?


Explain the CVE ID: What does the identifier CVE-2013-1939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1939.

The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.


Provide references for further information: Can you share references or external links related to CVE-2013-1939?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQ'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://owncloud.org/about/security/advisories/oC-SA-2013-016/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1939?


Explain the CVE ID: What does the identifier CVE-2013-1940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1940.

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.


Provide references for further information: Can you share references or external links related to CVE-2013-1940?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.freedesktop.org/show_bug.cgi?id=63353'}, {'name': 'USN-1803-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1803-1'}, {'name': 'FEDORA-2013-5883', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104089.html'}, {'name': 'openSUSE-SU-2013:0878', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00015.html'}, {'name': 'DSA-2661', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2661'}, {'name': '[oss-security] 20130418 Xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/18/3'}, {'name': 'FEDORA-2013-5928', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102391.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1940?


Explain the CVE ID: What does the identifier CVE-2013-1941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1941.

The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack.


Provide references for further information: Can you share references or external links related to CVE-2013-1941?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://owncloud.org/about/security/advisories/oC-SA-2013-015/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1941?


Explain the CVE ID: What does the identifier CVE-2013-1942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1942.

Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id parameters, as demonstrated using document.write in the jQuery parameter, a different vulnerability than CVE-2013-2022 and CVE-2013-2023.


Provide references for further information: Can you share references or external links related to CVE-2013-1942?

{'name': '59030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59030'}, {'name': '[oss-security] 20130505 Re: CVE-2013-1942 jPlayer 2.2.19 XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=136773622321563&w=2'}, {'name': '[oss-security] 20130411 CVE-2013-1942 jPlayer 2.2.19 XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=136570964825921&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.jplayer.org/2.3.0/release-notes/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://owncloud.org/about/security/advisories/oC-SA-2013-014/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/happyworm/jPlayer/commit/e8ca190f7f972a6a421cb95f09e138720e40ed6d'}, {'name': '20130421 Vulnerabilities in jPlayer', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Apr/192'}, {'name': '[oss-security] 20130429 Re: CVE-2013-1942 jPlayer 2.2.19 XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=136726705917858&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1942?


Explain the CVE ID: What does the identifier CVE-2013-1943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1943.

The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privileges or obtain sensitive information from kernel memory via a crafted application, related to arch/x86/kvm/paging_tmpl.h and virt/kvm/kvm_main.c.


Provide references for further information: Can you share references or external links related to CVE-2013-1943?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.archive.org/web/20130329070349/http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/fa3d315a4ce2c0891cdde262562e710d95fba19e'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=950490'}, {'name': 'USN-1939-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1939-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa3d315a4ce2c0891cdde262562e710d95fba19e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1943?


Explain the CVE ID: What does the identifier CVE-2013-1944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1944.

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.


Provide references for further information: Can you share references or external links related to CVE-2013-1944?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'name': 'MDVSA-2013:151', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:151'}, {'name': '92316', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/92316'}, {'name': 'DSA-2660', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2660'}, {'name': 'FEDORA-2013-6766', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104598.html'}, {'name': 'USN-1801-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1801-1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=950577'}, {'name': 'FEDORA-2013-6780', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104207.html'}, {'name': 'FEDORA-2013-5618', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102056.html'}, {'name': 'FEDORA-2013-5598', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102711.html'}, {'name': 'APPLE-SA-2013-10-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/docs/adv_20130412.html'}, {'name': 'openSUSE-SU-2013:0879', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00016.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0121'}, {'name': '59058', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59058'}, {'name': '53044', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53044'}, {'name': 'RHSA-2013:0771', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0771.html'}, {'name': '53051', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53051'}, {'name': 'FEDORA-2013-7813', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105539.html'}, {'name': 'FEDORA-2013-7797', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106606.html'}, {'name': '53097', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53097'}, {'name': 'openSUSE-SU-2013:0876', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00013.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/bagder/curl/commit/2eb8dcf26cb37f09cffe26909a646e702dbcab66'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1944?


Explain the CVE ID: What does the identifier CVE-2013-1945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1945.

ruby193 uses an insecure LD_LIBRARY_PATH setting.


Provide references for further information: Can you share references or external links related to CVE-2013-1945?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1945'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1945?


Explain the CVE ID: What does the identifier CVE-2013-1946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1946.

The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a non-HTML type, which can "interfere with Drupal's page cache."


Provide references for further information: Can you share references or external links related to CVE-2013-1946?

{'name': '92259', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/92259'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1966758'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1966752'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1966780'}, {'name': '[oss-security] 20130412 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/12/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1946?


Explain the CVE ID: What does the identifier CVE-2013-1947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1947.

kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb.


Provide references for further information: Can you share references or external links related to CVE-2013-1947?

{'name': '[oss-security] 20130412 Re: Remote command injection in Ruby Gem kelredd-pruview 0.3.8', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/12/2'}, {'name': '[oss-security] 20130410 Remote command injection in Ruby Gem kelredd-pruview 0.3.8', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/10/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1947?


Explain the CVE ID: What does the identifier CVE-2013-1948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1948.

converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.


Provide references for further information: Can you share references or external links related to CVE-2013-1948?

{'tags': ['x_refsource_MISC'], 'url': 'http://vapid.dhs.org/advisories/md2pdf-remote-exec.html'}, {'name': '92290', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92290'}, {'name': 'md2pdf-cve20131948-command-exec(83416)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83416'}, {'name': '59061', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59061'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1948?


Explain the CVE ID: What does the identifier CVE-2013-1949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1949.

Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally introduced modification (Trojan Horse), which allows remote attackers to force the upload of arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2013-1949?

{'tags': ['x_refsource_MISC'], 'url': 'http://it.slashdot.org/story/13/04/13/212226/popular-wordpress-plug-in-caught-spamming-is-put-on-probation'}, {'tags': ['x_refsource_MISC'], 'url': 'http://securityledger.com/hacked-wordpress-plug-in-put-on-double-secret-probation/'}, {'name': '[oss-security] 20130413 CVE-2013-1949 Social Media Widget remote file inclusion', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/14/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.sucuri.net/2013/04/wordpress-plugin-social-media-widget.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1949?


Explain the CVE ID: What does the identifier CVE-2013-1950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1950.

The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer.


Provide references for further information: Can you share references or external links related to CVE-2013-1950?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=948378'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.infradead.org/users/steved/libtirpc.git/commitdiff/a9f437119d79a438cb12e510f3cadd4060102c9f'}, {'name': 'RHSA-2013:0884', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0884.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1950?


Explain the CVE ID: What does the identifier CVE-2013-1951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1951.

A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.


Provide references for further information: Can you share references or external links related to CVE-2013-1951?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1951'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1951'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.gentoo.org/glsa/glsa-201310-21.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-1951'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104022.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104027.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/16/12'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/59077'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T48084'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1951?


Explain the CVE ID: What does the identifier CVE-2013-1952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1952.

Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1952?

{'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'name': 'FEDORA-2013-7432', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105533.html'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': 'DSA-2666', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2666'}, {'name': '59617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59617'}, {'name': '53312', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53312'}, {'name': 'SUSE-SU-2014:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html'}, {'name': 'xen-cve20131952-dos(83968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83968'}, {'name': '92984', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92984'}, {'name': '[oss-security] 20130502 Xen Security Advisory 49 (CVE-2013-1952) - VT-d interrupt remapping source validation flaw for bridges', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/02/9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1952?


Explain the CVE ID: What does the identifier CVE-2013-1953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1953.

Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2013-1953?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=951257'}, {'name': '[oss-security] 20130316 Re: autotrace: stack-based buffer overflow in bmp  parser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/16/3'}, {'name': 'MDVSA-2013:190', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:190'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1953?


Explain the CVE ID: What does the identifier CVE-2013-1954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1954.

The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ASF movie that triggers an out-of-bounds read.


Provide references for further information: Can you share references or external links related to CVE-2013-1954?

{'name': '[oss-security] 20130414 CVE Request: VLC Buffer Overflow in ASF Demuxer', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=136593191416152&w=2'}, {'name': '59793', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59793'}, {'name': '[oss-security] 20130416 Re: CVE Request: VLC Buffer Overflow in ASF Demuxer', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=136610343501731&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.videolan.org/vlc/ticket/8024'}, {'name': '57333', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57333'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.videolan.org/?p=vlc.git%3Ba=commitdiff%3Bh=b31ce523331aa3a6e620b68cdfe3f161d519631e'}, {'name': '89598', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/89598'}, {'name': 'oval:org.mitre.oval:def:17023', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17023'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.videolan.org/security/sa1302.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1954?


Explain the CVE ID: What does the identifier CVE-2013-1955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1955.

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1955?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs7.easyphpcalendar.com/source/ChangeLog/changeLog.htm'}, {'name': '[oss-security] 20130416 Re: CVE for XSS in EasyPHPCalender script', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/16/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.easyphpcalendar.com/forums/showthread.php?p=4555'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1955?


Explain the CVE ID: What does the identifier CVE-2013-1956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1956.

The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the namespace root directory, which allows local users to bypass intended filesystem restrictions via a crafted clone system call.


Provide references for further information: Can you share references or external links related to CVE-2013-1956?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3151527ee007b73a0ebd296010f1c0454a919c7d'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/3151527ee007b73a0ebd296010f1c0454a919c7d'}, {'name': '[oss-security] 20130416 Re: Re: Summary of security bugs (now fixed) in user namespaces', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/16/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1956?


Explain the CVE ID: What does the identifier CVE-2013-1957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1957.

The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT_READONLY flag, which allows local users to bypass an intended read-only property of a filesystem by leveraging a separate mount namespace.


Provide references for further information: Can you share references or external links related to CVE-2013-1957?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=132c94e31b8bca8ea921f9f96a57d684fa4ae0a9'}, {'name': '[oss-security] 20130416 Re: Re: Summary of security bugs (now fixed) in user namespaces', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/16/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/132c94e31b8bca8ea921f9f96a57d684fa4ae0a9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1957?


Explain the CVE ID: What does the identifier CVE-2013-1958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1958.

The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, which allows local users to bypass intended access restrictions by leveraging the time interval during which a user namespace has been created but a PID namespace has not been created.


Provide references for further information: Can you share references or external links related to CVE-2013-1958?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=92f28d973cce45ef5823209aab3138eb45d8b349'}, {'name': '[oss-security] 20130416 Re: Re: Summary of security bugs (now fixed) in user namespaces', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/16/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/92f28d973cce45ef5823209aab3138eb45d8b349'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1958?


Explain the CVE ID: What does the identifier CVE-2013-1959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1959.

kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process.


Provide references for further information: Can you share references or external links related to CVE-2013-1959?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/e3211c120a85b792978bcb4be7b2886df18d27f0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/6708075f104c3c9b04b23336bb0366ca30c3931b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6708075f104c3c9b04b23336bb0366ca30c3931b'}, {'name': '[oss-security] 20130428 Multiple Linux setuid output redirection vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/29/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9'}, {'name': '25307', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/25307'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e3211c120a85b792978bcb4be7b2886df18d27f0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1959?


Explain the CVE ID: What does the identifier CVE-2013-1960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1960.

Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.


Provide references for further information: Can you share references or external links related to CVE-2013-1960?

{'name': '53237', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53237'}, {'name': 'FEDORA-2013-7369', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105253.html'}, {'name': 'DSA-2698', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2698'}, {'name': '59609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59609'}, {'name': '53765', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53765'}, {'name': 'openSUSE-SU-2013:0944', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html'}, {'name': 'RHSA-2014:0223', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0223.html'}, {'name': '[oss-security] 20130502 Fwd: Two libtiff (tiff2pdf flaws)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q2/254'}, {'name': 'FEDORA-2013-7361', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105828.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=952158'}, {'name': 'openSUSE-SU-2013:0922', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html'}, {'name': 'FEDORA-2013-7339', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104916.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1960?


Explain the CVE ID: What does the identifier CVE-2013-1961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1961.

Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.


Provide references for further information: Can you share references or external links related to CVE-2013-1961?

{'name': '53237', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53237'}, {'name': 'FEDORA-2013-7369', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105253.html'}, {'name': 'DSA-2698', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2698'}, {'name': '53765', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53765'}, {'name': 'openSUSE-SU-2013:0944', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=952131'}, {'name': 'RHSA-2014:0223', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0223.html'}, {'name': '[oss-security] 20130502 Fwd: Two libtiff (tiff2pdf flaws)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q2/254'}, {'name': 'FEDORA-2013-7361', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105828.html'}, {'name': '59607', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59607'}, {'name': 'openSUSE-SU-2013:0922', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html'}, {'name': 'FEDORA-2013-7339', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104916.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1961?


Explain the CVE ID: What does the identifier CVE-2013-1962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1962.

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."