Provide references for further information: Can you share references or external links related to CVE-2013-0206?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1890318'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/live_css.git/commitdiff/ef323c8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1883978'}, {'name': '[oss-security] 20130121 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/21/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1883976'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/live_css.git/commitdiff/cb7005f'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0206?


Explain the CVE ID: What does the identifier CVE-2013-0207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0207.

Cross-site request forgery (CSRF) vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0207?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1890566'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1890538'}, {'name': '[oss-security] 20130121 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/21/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/mark_complete.git/commitdiff/a18c7b2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0207?


Explain the CVE ID: What does the identifier CVE-2013-0208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0208.

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-0208?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openstack/nova/commit/317cc0af385536dee43ef2addad50a91357fc1ad'}, {'name': 'RHSA-2013:0208', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0208.html'}, {'name': '51992', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51992'}, {'name': '51963', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/nova/+bug/1069904'}, {'name': '[oss-security] 20130129 [OSSA 2013-001] Boot from volume allows access to random volumes (CVE-2013-0208)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/29/9'}, {'name': '57613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57613'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openstack/nova/commit/243d516cea9d3caa5a8267b12d2f577dcb24193b'}, {'name': 'USN-1709-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1709-1'}, {'name': '89661', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89661'}, {'name': 'nova-volume-security-bypass(81697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81697'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=902629'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0208?


Explain the CVE ID: What does the identifier CVE-2013-0209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0209.

lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.


Provide references for further information: Can you share references or external links related to CVE-2013-0209?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.sec-1.com/blog/?p=402'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.movabletype.org/2013/01/movable_type_438_patch.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.sec-1.com/blog/wp-content/uploads/2013/01/movabletype_upgrade_exec.rb_.txt'}, {'name': '[oss-security] 20130121 Re: CVE request for Movable Type', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/01/22/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0209?


Explain the CVE ID: What does the identifier CVE-2013-0210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0210.

The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.


Provide references for further information: Can you share references or external links related to CVE-2013-0210?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://theforeman.org/security.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0210?


Explain the CVE ID: What does the identifier CVE-2013-0211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0211.

Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2013-0211?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libarchive/libarchive/commit/22531545514043e04633e1c015c7540b9de9dbe4'}, {'name': 'FreeBSD-SA-16:23', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-16:23.libarchive.asc'}, {'name': 'MDVSA-2013:147', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:147'}, {'name': 'openSUSE-SU-2015:0568', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html'}, {'name': 'FEDORA-2013-4522', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101876.html'}, {'name': '58926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58926'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=902998'}, {'name': '1035995', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035995'}, {'name': 'USN-2549-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2549-1'}, {'name': 'FEDORA-2013-4592', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101687.html'}, {'name': 'FEDORA-2013-4537', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101872.html'}, {'name': 'FEDORA-2013-4576', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101700.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0211?


Explain the CVE ID: What does the identifier CVE-2013-0212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0212.

store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.


Provide references for further information: Can you share references or external links related to CVE-2013-0212?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1'}, {'name': '[openstack] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.launchpad.net/openstack/msg20517.html'}, {'name': 'USN-1710-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1710-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/glance/+bug/1098962'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/glance/+milestone/2012.2.3'}, {'name': '[oss-security] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/29/10'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=902964'}, {'name': 'RHSA-2013:0209', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0209.html'}, {'name': '51990', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51990'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89'}, {'name': '51957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0212?


Explain the CVE ID: What does the identifier CVE-2013-0213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0213.

The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.


Provide references for further information: Can you share references or external links related to CVE-2013-0213?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/security/CVE-2013-0213'}, {'name': 'SUSE-SU-2013:0326', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html'}, {'name': 'openSUSE-SU-2013:0281', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html'}, {'name': '57631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57631'}, {'name': 'openSUSE-SU-2013:0277', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html'}, {'name': 'SUSE-SU-2013:0519', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993'}, {'name': 'RHSA-2014:0305', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0305.html'}, {'name': 'USN-2922-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2922-1'}, {'name': 'DSA-2617', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2617'}, {'name': 'RHSA-2013:1310', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1310.html'}, {'name': 'RHSA-2013:1542', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1542.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0213?


Explain the CVE ID: What does the identifier CVE-2013-0214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0214.

Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.


Provide references for further information: Can you share references or external links related to CVE-2013-0214?

{'name': 'SUSE-SU-2013:0326', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html'}, {'name': '89627', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89627'}, {'name': 'openSUSE-SU-2013:0281', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html'}, {'name': '57631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57631'}, {'name': 'openSUSE-SU-2013:0277', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/security/CVE-2013-0214'}, {'name': 'SUSE-SU-2013:0519', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993'}, {'name': 'RHSA-2014:0305', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0305.html'}, {'name': 'USN-2922-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2922-1'}, {'name': 'DSA-2617', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2617'}, {'name': 'RHSA-2013:1310', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1310.html'}, {'name': 'RHSA-2013:1542', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1542.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0214?


Explain the CVE ID: What does the identifier CVE-2013-0215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0215.

oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access.


Provide references for further information: Can you share references or external links related to CVE-2013-0215?

{'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=40f9c5e0a6d15b4ca1f6d4ed3a46f0871520eab5'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': '[oss-security] 20130205 Xen Security Advisory 38 (CVE-2013-0215) - oxenstored incorrect handling of certain Xenbus ring states', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/02/05/10'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=61401264eb00fae4ee4efc8e9a5067449283207b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0215?


Explain the CVE ID: What does the identifier CVE-2013-0216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0216.

The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption.


Provide references for further information: Can you share references or external links related to CVE-2013-0216?

{'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=910883'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/48856286b64e4b66ec62b94e504d0b29c1ade664'}, {'name': 'openSUSE-SU-2013:0395', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=48856286b64e4b66ec62b94e504d0b29c1ade664'}, {'name': 'SUSE-SU-2013:0674', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.8'}, {'name': 'openSUSE-SU-2013:0925', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html'}, {'name': '[oss-security] 20130205 Xen Security Advisory 39 (CVE-2013-0216,CVE-2013-0217) - Linux netback DoS via malicious guest ring.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/12'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0216?


Explain the CVE ID: What does the identifier CVE-2013-0217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0217.

Memory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (memory consumption) by triggering certain error conditions.


Provide references for further information: Can you share references or external links related to CVE-2013-0217?

{'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=910883'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7d5145d8eb2b9791533ffe4dc003b129b9696c48'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/7d5145d8eb2b9791533ffe4dc003b129b9696c48'}, {'name': '[oss-security] 20130205 Xen Security Advisory 39 (CVE-2013-0216,CVE-2013-0217) - Linux netback DoS via malicious guest ring.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/12'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0217?


Explain the CVE ID: What does the identifier CVE-2013-0218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0218.

The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file.


Provide references for further information: Can you share references or external links related to CVE-2013-0218?

{'name': 'RHSA-2013:0206', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0206.html'}, {'name': '89698', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/89698'}, {'name': '52041', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52041'}, {'name': 'RHSA-2013:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0833.html'}, {'name': 'RHSA-2013:0207', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0207.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=903073'}, {'name': 'jboss-eap-info-disc(81725)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81725'}, {'name': '57652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57652'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0218?


Explain the CVE ID: What does the identifier CVE-2013-0219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0219.

System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.


Provide references for further information: Can you share references or external links related to CVE-2013-0219?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4'}, {'name': '51928', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51928'}, {'name': 'FEDORA-2013-1795', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html'}, {'name': 'RHSA-2013:0508', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0508.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.fedorahosted.org/cgit/sssd.git/commit/?id=94cbf1cfb0f88c967f1fb0a4cf23723148868e4a'}, {'name': 'RHSA-2013:1319', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1319.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.fedorahosted.org/cgit/sssd.git/commit/?id=020bf88fd1c5bdac8fc671b37c7118f5378c7047'}, {'name': '52315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52315'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/sssd/ticket/1782'}, {'name': '57539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57539'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.fedorahosted.org/cgit/sssd.git/commit/?id=3843b284cd3e8f88327772ebebc7249990fd87b9'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=884254'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.fedorahosted.org/cgit/sssd.git/commit/?id=e864d914a44a37016736554e9257c06b18c57d37'}, {'name': 'FEDORA-2013-1826', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0219?


Explain the CVE ID: What does the identifier CVE-2013-0220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0220.

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0220?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/sssd/ticket/1781'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4'}, {'name': '51928', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51928'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.fedorahosted.org/cgit/sssd.git/commit/?id=30e2585dd46b62aa3a4abdf6de3f40a20e1743ab'}, {'name': 'FEDORA-2013-1795', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html'}, {'name': 'RHSA-2013:0508', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0508.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=884601'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.fedorahosted.org/cgit/sssd.git/commit/?id=2bd514cfde1938b1e245af11c9b548d58d49b325'}, {'name': '52315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52315'}, {'name': '57539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57539'}, {'name': 'FEDORA-2013-1826', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0220?


Explain the CVE ID: What does the identifier CVE-2013-0221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0221.

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.


Provide references for further information: Can you share references or external links related to CVE-2013-0221?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=903464'}, {'name': 'RHSA-2013:1652', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1652.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=798538'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0221?


Explain the CVE ID: What does the identifier CVE-2013-0222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0222.

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.


Provide references for further information: Can you share references or external links related to CVE-2013-0222?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=903465'}, {'name': 'RHSA-2013:1652', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1652.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=796243'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0222?


Explain the CVE ID: What does the identifier CVE-2013-0223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0223.

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.


Provide references for further information: Can you share references or external links related to CVE-2013-0223?

{'name': 'RHSA-2013:1652', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1652.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=798541'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=903466'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0223?


Explain the CVE ID: What does the identifier CVE-2013-0224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0224.

The Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows local users to execute arbitrary PHP code by modifying a temporary PHP file.


Provide references for further information: Can you share references or external links related to CVE-2013-0224?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1896714'}, {'name': '[oss-security] 20130124 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/25/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1895234'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0224?


Explain the CVE ID: What does the identifier CVE-2013-0225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0225.

Cross-site scripting (XSS) vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5 for Drupal allows remote authenticated users with the "administer user relationships" permission to inject arbitrary web script or HTML via a relationship name.


Provide references for further information: Can you share references or external links related to CVE-2013-0225?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1896720'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/user_relationships.git/commitdiff/b9a4739'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1896276'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1896272'}, {'name': '[oss-security] 20130124 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/25/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/user_relationships.git/commitdiff/17e94b9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0225?


Explain the CVE ID: What does the identifier CVE-2013-0226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0226.

The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the "view shortcuts" permission to read nodes or (2) remote authenticated users with the "admin shortcuts" permission to read, edit, or delete nodes via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0226?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1896752'}, {'name': '[oss-security] 20130124 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/25/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0226?


Explain the CVE ID: What does the identifier CVE-2013-0227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0227.

Cross-site scripting (XSS) vulnerability in the Search API Sorts module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified field labels.


Provide references for further information: Can you share references or external links related to CVE-2013-0227?

{'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1896782'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1896756'}, {'name': '[oss-security] 20130124 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/25/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/search_api_sorts.git/commitdiff/f6cbf47'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0227?


Explain the CVE ID: What does the identifier CVE-2013-0228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0228.

The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2013-0228?

{'name': 'USN-1796-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1796-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.9'}, {'name': 'USN-1805-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1805-1'}, {'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'name': 'USN-1797-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1797-1'}, {'name': 'USN-1808-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1808-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13d2b4d11d69a92574a55bfd985cfb0ca77aebdc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/13d2b4d11d69a92574a55bfd985cfb0ca77aebdc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=906309'}, {'name': '[oss-security] 20130213 Xen Security Advisory 42 (CVE-2013-0228) - Linux kernel hits general protection if %ds is corrupt for 32-bit PVOPS.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/13/10'}, {'name': 'USN-1795-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1795-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0228?


Explain the CVE ID: What does the identifier CVE-2013-0229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0229.

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read.


Provide references for further information: Can you share references or external links related to CVE-2013-0229?

{'tags': ['x_refsource_MISC'], 'url': 'https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb'}, {'tags': ['x_refsource_MISC'], 'url': 'https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0229?


Explain the CVE ID: What does the identifier CVE-2013-0230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0230.

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.


Provide references for further information: Can you share references or external links related to CVE-2013-0230?

{'tags': ['x_refsource_MISC'], 'url': 'https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb'}, {'tags': ['x_refsource_MISC'], 'url': 'https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play'}, {'name': '57608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57608'}, {'name': '36839', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/36839/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0230?


Explain the CVE ID: What does the identifier CVE-2013-0231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0231.

The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2013-0231?

{'name': '[oss-security] 20130205 Xen Security Advisory 43 (CVE-2013-0231) - Linux pciback DoS via not rate limited log messages.', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/9'}, {'name': '57740', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57740'}, {'name': 'xen-pcibackenablemsi-dos(81923)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81923'}, {'name': 'openSUSE-SU-2013:0395', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html'}, {'name': '52059', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52059'}, {'name': 'SUSE-SU-2013:0674', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html'}, {'name': 'openSUSE-SU-2013:0925', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html'}, {'name': 'DSA-2632', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2632'}, {'name': '89903', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89903'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0231?


Explain the CVE ID: What does the identifier CVE-2013-0232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0232.

includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the setDeviceStatusX10 function.


Provide references for further information: Can you share references or external links related to CVE-2013-0232?

{'tags': ['x_refsource_MISC'], 'url': 'http://itsecuritysolutions.org/2013-01-22-ZoneMinder-Video-Server-arbitrary-command-execution-vulnerability/'}, {'name': '[oss-security] 20130128 Re: CVE Request: zoneminder: arbitrary command execution vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/28/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zoneminder.com/forums/viewtopic.php?f=29&t=20771'}, {'name': 'DSA-2640', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2640'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698910'}, {'name': '24310', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24310'}, {'name': '89529', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/89529'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0232?


Explain the CVE ID: What does the identifier CVE-2013-0233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0233.

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts.


Provide references for further information: Can you share references or external links related to CVE-2013-0233?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.metasploit.com/modules/auxiliary/admin/http/rails_devise_pass_reset'}, {'name': "[oss-security] 20130128 Re: CVE request for 'devise' ruby gem", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/29/3'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html'}, {'name': 'openSUSE-SU-2013:0374', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00000.html'}, {'name': '57577', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57577'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Snorby/snorby/issues/261'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0233?


Explain the CVE ID: What does the identifier CVE-2013-0234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0234.

Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the params[twitter_username] parameter to action/widgets/save.


Provide references for further information: Can you share references or external links related to CVE-2013-0234?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.elgg.org/pg/blog/cash/read/223/elgg-1813-and-1717'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/119903/Elgg-Twitter-Widget-Cross-Site-Scripting.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/Elgg/Elgg/commit/a74a88501c41e89c8bcd7fc650ae2f8cc0a5003d#L2L21'}, {'name': '20130129 XSS in Elgg 1.8.12, 1.7.16 (core module "Twitter widget")', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Jan/251'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/Elgg/Elgg/commit/19dc507c2fccb378be2a44a762edf6c1e7afa334#L0R11'}, {'name': '[oss-security] 20130128 Re: CVE Request: XSS in Elgg 1.8.12, 1.7.16 (core module "Twitter widget")', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/29/4'}, {'name': '52007', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52007'}, {'name': '57569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57569'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0234?


Explain the CVE ID: What does the identifier CVE-2013-0235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0235.

The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, related to a Server-Side Request Forgery (SSRF) issue.


Provide references for further information: Can you share references or external links related to CVE-2013-0235?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://codex.wordpress.org/Version_3.5.1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://core.trac.wordpress.org/changeset/23330'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.acunetix.com/blog/web-security-zone/wordpress-pingback-vulnerability/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=904120'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/news/2013/01/wordpress-3-5-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0235?


Explain the CVE ID: What does the identifier CVE-2013-0236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0236.

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.


Provide references for further information: Can you share references or external links related to CVE-2013-0236?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://core.trac.wordpress.org/changeset/23322'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codex.wordpress.org/Version_3.5.1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=904121'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://core.trac.wordpress.org/changeset/23317'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/news/2013/01/wordpress-3-5-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0236?


Explain the CVE ID: What does the identifier CVE-2013-0237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0237.

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-0237?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=904122'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codex.wordpress.org/Version_3.5.1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/moxiecode/plupload/commit/2d746ee9083c184f1234d8fed311e89bdd1b39e5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/news/2013/01/wordpress-3-5-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0237?


Explain the CVE ID: What does the identifier CVE-2013-0238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0238.

The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.


Provide references for further information: Can you share references or external links related to CVE-2013-0238?

{'name': 'DSA-2618', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2618'}, {'name': '52106', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52106'}, {'name': '[oss-security] 20130129 ircd-hybrid: Denial of service vulnerability in  hostmask.c:try_parse_v4_netmask()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/29/8'}, {'name': 'MDVSA-2013:093', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:093'}, {'name': '57610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57610'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.ircd-hybrid.org:8000/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=1786&r2=1785&pathrev=1786'}, {'name': '51948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51948'}, {'name': 'ircdhybrid-tryparsev4netmask-dos(81695)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81695'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055'}, {'name': '89623', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89623'}, {'name': '24951', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24951'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0238?


Explain the CVE ID: What does the identifier CVE-2013-0239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0239.

Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.


Provide references for further information: Can you share references or external links related to CVE-2013-0239?

{'name': '90078', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90078'}, {'name': '51988', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51988'}, {'name': '20130208 New security advisories for Apache CXF', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Feb/39'}, {'name': 'apachecxf-username-tokens-sec-bypass(81981)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81981'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cxf.apache.org/cve-2013-0239.html'}, {'name': '57876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57876'}, {'name': 'RHSA-2013:0749', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0749.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1438424'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120214/Apache-CXF-WS-Security-UsernameToken-Bypass.html'}, {'name': '[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E'}, {'name': '[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E'}, {'name': '[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E'}, {'name': '[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E'}, {'name': '[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E'}, {'name': '[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0239?


Explain the CVE ID: What does the identifier CVE-2013-0240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0240.

Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network.


Provide references for further information: Can you share references or external links related to CVE-2013-0240?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/gnome-online-accounts/commit/?id=edde7c63326242a60a075341d3fea0be0bc4d80e'}, {'name': '51976', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51976'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/gnome-online-accounts/commit/?id=bc10fdb68f75f8be84eb698ada08743b9c7c248f'}, {'name': '[gnome-announce-list] 20130304 GNOME Online Accounts 3.6.3 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail.gnome.org/archives/gnome-announce-list/2013-March/msg00007.html'}, {'name': 'USN-1779-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1779-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/gnome-online-accounts/commit/?h=gnome-3-6&id=ecad8142e9ac519b9fc74b96dcb5531052bbffe1'}, {'name': '52791', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=693214'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=894352'}, {'name': 'openSUSE-SU-2013:0301', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00046.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0240?


Explain the CVE ID: What does the identifier CVE-2013-0241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0241.

The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service (guest crash or hang) via a SPICE connection that prevents other threads from obtaining the qemu_mutex mutex.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2013-0241?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=906032'}, {'name': 'MDVSA-2013:138', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:138'}, {'name': '[oss-security] 20130130 CVE request -- qxl: synchronous io guest DoS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/30/3'}, {'name': 'qxl-virtual-spice-dos(81704)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81704'}, {'name': '52021', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52021'}, {'name': '[oss-security] 20130130 Re: CVE request -- qxl: synchronous io guest DoS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/30/4'}, {'name': 'USN-1714-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1714-1'}, {'name': 'RHSA-2013:0218', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0218.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0036'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0241?


Explain the CVE ID: What does the identifier CVE-2013-0242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0242.

Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.


Provide references for further information: Can you share references or external links related to CVE-2013-0242?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0008.html'}, {'name': 'glibc-extendbuffers-dos(81707)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81707'}, {'name': 'RHSA-2013:1605', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1605.html'}, {'name': '55113', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55113'}, {'name': 'USN-1991-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1991-1'}, {'name': '57638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57638'}, {'name': '89747', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89747'}, {'name': '51951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51951'}, {'name': '1028063', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028063'}, {'name': '[oss-security] 20130130 Re: CVE Request -- glibc: DoS due to a buffer overrun in regexp matcher by processing multibyte characters', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/30/5'}, {'name': 'GLSA-201503-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201503-04'}, {'name': '[libc-alpha] 20130129 [PATCH] Fix buffer overrun in regexp matcher', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://sourceware.org/ml/libc-alpha/2013-01/msg00967.html'}, {'name': 'RHSA-2013:0769', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0769.html'}, {'name': 'MDVSA-2013:163', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:163'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceware.org/bugzilla/show_bug.cgi?id=15078'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0242?


Explain the CVE ID: What does the identifier CVE-2013-0243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0243.

haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections


Provide references for further information: Can you share references or external links related to CVE-2013-0243?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-0243'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2013-0243'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/01/30/6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0243?


Explain the CVE ID: What does the identifier CVE-2013-0244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0244.

Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows remote attackers to inject arbitrary web script or HTML via vectors involving unspecified Javascript functions that are used to select DOM elements.


Provide references for further information: Can you share references or external links related to CVE-2013-0244?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html'}, {'name': '[oss-security] 20130130 Re: CVE', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q1/211'}, {'name': '89306', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89306'}, {'name': 'DSA-2776', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2776'}, {'name': '20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Jan/120'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/SA-CORE-2013-001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0244?


Explain the CVE ID: What does the identifier CVE-2013-0245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0245.

The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows remote authenticated users with the "access printer-friendly version" permission to read node titles and possibly node content via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0245?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html'}, {'name': '[oss-security] 20130130 Re: CVE', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q1/211'}, {'name': '89305', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89305'}, {'name': 'DSA-2776', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2776'}, {'name': 'drupal-book-title-security-bypass(81380)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81380'}, {'name': '20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Jan/120'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/SA-CORE-2013-001'}, {'name': '51717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51717'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0245?


Explain the CVE ID: What does the identifier CVE-2013-0246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0246.

The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0246?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html'}, {'name': '[oss-security] 20130130 Re: CVE', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q1/211'}, {'name': '20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Jan/120'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/SA-CORE-2013-001'}, {'name': '51717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51717'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0246?


Explain the CVE ID: What does the identifier CVE-2013-0247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0247.

OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.


Provide references for further information: Can you share references or external links related to CVE-2013-0247?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=906171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/keystone/+bug/1098307'}, {'name': 'FEDORA-2013-2168', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.html'}, {'name': 'RHSA-2013:0253', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0253.html'}, {'name': 'USN-1715-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1715-1'}, {'name': '57747', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57747'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0247?


Explain the CVE ID: What does the identifier CVE-2013-0248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0248.

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.


Provide references for further information: Can you share references or external links related to CVE-2013-0248?

{'name': '58326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58326'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': '20130306 [SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '90906', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/90906'}, {'name': 'GLSA-202107-39', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202107-39'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0248?


Explain the CVE ID: What does the identifier CVE-2013-0249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0249.

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.


Provide references for further information: Can you share references or external links related to CVE-2013-0249?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120170/Slackware-Security-Advisory-curl-Updates.html'}, {'name': '57842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57842'}, {'name': 'APPLE-SA-2013-10-22-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html'}, {'name': '24487', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24487'}, {'name': 'USN-1721-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1721-1'}, {'name': 'FEDORA-2013-2098', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099140.html'}, {'name': '1028093', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028093'}, {'name': '89988', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/89988'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120147/cURL-Buffer-Overflow.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.volema.com/curl-rce.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/docs/adv_20130206.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://nakedsecurity.sophos.com/2013/02/10/anatomy-of-a-vulnerability-curl-web-download-toolkit-holed-by-authentication-bug/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0249?


Explain the CVE ID: What does the identifier CVE-2013-0250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0250.

The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0250?

{'name': '52037', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52037'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/corosync/corosync/commit/b3f456a8ceefac6e9f2e9acc2ea0c159d412b595'}, {'name': '[oss-security] 20130201 Re: CVE Request -- Corosync (X < 2.0.3): Remote DoS due improper HMAC initialization and improper junk filtering when different encryption keys used', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q1/213'}, {'name': '[oss-security] 20130201 Re: Re: CVE Request -- Corosync (X < 2.0.3): Remote DoS due improper HMAC initialization and improper junk filtering when different encryption keys used', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q1/214'}, {'name': '[oss-security] 20130201 CVE Request -- Corosync (X < 2.0.3): Remote DoS due improper HMAC initialization and improper junk filtering when different encryption keys used', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q1/212'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0250?


Explain the CVE ID: What does the identifier CVE-2013-0251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0251.

Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the llogin version.


Provide references for further information: Can you share references or external links related to CVE-2013-0251?

{'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699625'}, {'name': '[oss-security] 20130205 Re: CVE id request: latd', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/2'}, {'name': '[oss-security] 20130203 Re: CVE id request: latd', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/04/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0251?


Explain the CVE ID: What does the identifier CVE-2013-0252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0252.

boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.


Provide references for further information: Can you share references or external links related to CVE-2013-0252?

{'name': 'FEDORA-2013-2448', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html'}, {'name': '57675', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57675'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=907481'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://svn.boost.org/trac/boost/ticket/7743'}, {'name': '[oss-security] 20130203 Re: CVE id request: boost', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/04/2'}, {'name': 'FEDORA-2013-2420', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099103.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.boost.org/users/news/boost_locale_security_notice.html'}, {'name': 'USN-1727-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1727-1'}, {'name': 'MDVSA-2013:065', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:065'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0252?


Explain the CVE ID: What does the identifier CVE-2013-0253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0253.

The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.


Provide references for further information: Can you share references or external links related to CVE-2013-0253?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://maven.apache.org/security.html'}, {'name': 'RHSA-2013:0700', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0700.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=917084'}, {'name': '[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0253?


Explain the CVE ID: What does the identifier CVE-2013-0254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0254.

The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.


Provide references for further information: Can you share references or external links related to CVE-2013-0254?

{'name': 'openSUSE-SU-2013:0404', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00015.html'}, {'name': 'RHSA-2013:0669', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0669.html'}, {'name': 'openSUSE-SU-2013:0403', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00014.html'}, {'name': '[qt-announce] 20130205 [Announce] [CVE-2013-0254] Qt Project Security Advisory: System V shared memory segments created world-writeable', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.qt-project.org/pipermail/announce/2013-February/000023.html'}, {'name': 'openSUSE-SU-2013:0411', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00019.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=907425'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0254?


Explain the CVE ID: What does the identifier CVE-2013-0255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0255.

PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.


Provide references for further information: Can you share references or external links related to CVE-2013-0255?

{'name': 'FEDORA-2013-2123', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html'}, {'name': 'DSA-2630', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2630'}, {'name': 'openSUSE-SU-2013:0319', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html'}, {'name': 'openSUSE-SU-2013:0318', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/docs/8.4/static/release-8-4-16.html'}, {'name': 'MDVSA-2013:142', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:142'}, {'name': 'postgresql-enumrecv-dos(81917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=907892'}, {'name': '51923', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51923'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/docs/9.1/static/release-9-1-8.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '57844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57844'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blogs.oracle.com/sunsecurity/entry/cve_2013_0255_array_index'}, {'name': 'USN-1717-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1717-1'}, {'name': '1028092', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1028092'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/docs/8.3/static/release-8-3-23.html'}, {'name': '89935', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89935'}, {'name': 'RHSA-2013:1475', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1475.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/docs/9.2/static/release-9-2-3.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postgresql.org/docs/9.0/static/release-9-0-12.html'}, {'name': '52819', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52819'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0255?


Explain the CVE ID: What does the identifier CVE-2013-0256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0256.

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0256?

{'name': 'RHSA-2013:0701', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0701.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/'}, {'name': '52774', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52774'}, {'name': 'openSUSE-SU-2013:0303', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.segment7.net/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2'}, {'name': 'RHSA-2013:0728', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0728.html'}, {'name': 'RHSA-2013:0686', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0686.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60'}, {'name': 'RHSA-2013:0548', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0548.html'}, {'name': 'USN-1733-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1733-1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=907820'}, {'name': 'SUSE-SU-2013:0647', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0256?


Explain the CVE ID: What does the identifier CVE-2013-0257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0257.

The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read images of user email addresses and email fields.


Provide references for further information: Can you share references or external links related to CVE-2013-0257?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1903264'}, {'name': '[oss-security] 20130204 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0257?


Explain the CVE ID: What does the identifier CVE-2013-0258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0258.

The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username.


Provide references for further information: Can you share references or external links related to CVE-2013-0258?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1903282'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/ga_login.git/commitdiff/50b032d'}, {'name': '[oss-security] 20130204 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1902102'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0258?


Explain the CVE ID: What does the identifier CVE-2013-0259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0259.

Cross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with administer or edit boxes permissions to inject arbitrary web script or HTML via the subject parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-0259?

{'name': '57642', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57642'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1897016'}, {'name': '[oss-security] 20130204 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/boxes.git/commitdiff/456ff8e'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1903300'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0259?


Explain the CVE ID: What does the identifier CVE-2013-0260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0260.

Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credentials via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0260?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1903324'}, {'name': '[oss-security] 20130204 Re: CVE request for Drupal contributed modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/05/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0260?


Explain the CVE ID: What does the identifier CVE-2013-0261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0261.

(1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.


Provide references for further information: Can you share references or external links related to CVE-2013-0261?

{'name': 'RHSA-2013:0595', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0595.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=908101'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0261?


Explain the CVE ID: What does the identifier CVE-2013-0262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0262.

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."


Provide references for further information: Can you share references or external links related to CVE-2013-0262?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/rentzsch/4736940'}, {'name': '52033', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52033'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://rack.github.com/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=909071'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/rack/rack/commit/6f237e4c9fab649d3750482514f0fde76c56ab30'}, {'name': 'openSUSE-SU-2013:0462', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rack/rack/blob/master/lib/rack/file.rb#L56'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=909072'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0262?


Explain the CVE ID: What does the identifier CVE-2013-0263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0263.

Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.


Provide references for further information: Can you share references or external links related to CVE-2013-0263?

{'name': '52774', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52774'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/rack-devel/RnQxm6i13C4/xfakH81yWvgJ'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/rack/rack/commit/9a81b961457805f6d1a5c275d053068440421e11'}, {'name': '52033', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52033'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/rack/rack/commit/0cd7e9aa397f8ebb3b8481d67dbac8b4863a7f07'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://rack.github.com/'}, {'name': '52134', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52134'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/d/msg/rack-devel/xKrHVWeNvDM/4ZGA576CnK4J'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=909071'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/rack-devel/hz-liLb9fKE/8jvVWU6xYiYJ'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ'}, {'name': 'RHSA-2013:0686', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0686.html'}, {'name': 'openSUSE-SU-2013:0462', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://puppet.com/security/cve/cve-2013-0263'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/codahale/f9f3781f7b54985bee94'}, {'tags': ['x_refsource_MISC'], 'url': 'https://twitter.com/coda/statuses/299732877745197056'}, {'name': '89939', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/89939'}, {'name': 'DSA-2783', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2783'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0263?


Explain the CVE ID: What does the identifier CVE-2013-0264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0264.

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it.


Provide references for further information: Can you share references or external links related to CVE-2013-0264?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0264'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2013-0264'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0264?


Explain the CVE ID: What does the identifier CVE-2013-0265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0265.

The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log.


Provide references for further information: Can you share references or external links related to CVE-2013-0265?

{'name': '[oss-security] 20130206 Re: CVE request: Insecure default log file path in  xNBD', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/07/5'}, {'name': '90008', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/90008'}, {'name': '[oss-security] 20130206 CVE request: Insecure default log file path in xNBD', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/06/2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0265?


Explain the CVE ID: What does the identifier CVE-2013-0266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0266.

manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.