Provide references for further information: Can you share references or external links related to CVE-2013-0629?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-03.html'}, {'name': '57165', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57165'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa13-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0629?


Explain the CVE ID: What does the identifier CVE-2013-0630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0630.

Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0630?

{'name': 'openSUSE-SU-2013:0168', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-01/msg00059.html'}, {'name': 'openSUSE-SU-2013:0121', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-01/msg00012.html'}, {'name': 'SUSE-SU-2013:0033', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00003.html'}, {'name': 'RHSA-2013:0149', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0149.html'}, {'name': 'openSUSE-SU-2013:0364', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-02/msg00084.html'}, {'name': 'openSUSE-SU-2013:0128', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-01/msg00019.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0630?


Explain the CVE ID: What does the identifier CVE-2013-0631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0631.

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0631?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-03.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa13-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0631?


Explain the CVE ID: What does the identifier CVE-2013-0632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0632.

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0632?

{'name': '30210', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/30210'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-03.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa13-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0632?


Explain the CVE ID: What does the identifier CVE-2013-0633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0633.

Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0633?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-04.html'}, {'name': 'RHSA-2013:0243', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0243.html'}, {'name': 'openSUSE-SU-2013:0279', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00004.html'}, {'name': 'SUSE-SU-2013:0288', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00007.html'}, {'name': 'openSUSE-SU-2013:0284', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0633?


Explain the CVE ID: What does the identifier CVE-2013-0634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0634.

Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0634?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0634?


Explain the CVE ID: What does the identifier CVE-2013-0635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0635.

Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0635?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-06.html'}, {'name': 'TA13-043A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043A.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0635?


Explain the CVE ID: What does the identifier CVE-2013-0636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0636.

Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0636?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0636?


Explain the CVE ID: What does the identifier CVE-2013-0637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0637.

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to obtain sensitive information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0637?

{'name': 'SUSE-SU-2013:0296', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html'}, {'name': 'RHSA-2013:0254', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0254.html'}, {'name': 'openSUSE-SU-2013:0295', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html'}, {'name': 'openSUSE-SU-2013:0298', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html'}, {'name': 'TA13-043A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-05.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0637?


Explain the CVE ID: What does the identifier CVE-2013-0638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0638.

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0647.


Provide references for further information: Can you share references or external links related to CVE-2013-0638?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0638?


Explain the CVE ID: What does the identifier CVE-2013-0639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0639.

Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0639?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0639?


Explain the CVE ID: What does the identifier CVE-2013-0640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0640.

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0640?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html'}, {'name': 'VU#422807', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/422807'}, {'name': 'openSUSE-SU-2013:0335', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html'}, {'name': 'openSUSE-SU-2013:0342', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html'}, {'name': 'oval:org.mitre.oval:def:16406', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16406'}, {'name': 'RHSA-2013:0551', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0551.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-07.html'}, {'name': 'SUSE-SU-2013:0349', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa13-02.html'}, {'name': 'GLSA-201308-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201308-03.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0640?


Explain the CVE ID: What does the identifier CVE-2013-0641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0641.

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0641?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html'}, {'name': 'VU#422807', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/422807'}, {'name': 'openSUSE-SU-2013:0335', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html'}, {'name': 'openSUSE-SU-2013:0342', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html'}, {'name': 'RHSA-2013:0551', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0551.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-07.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit'}, {'name': 'SUSE-SU-2013:0349', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html'}, {'name': 'oval:org.mitre.oval:def:16296', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa13-02.html'}, {'name': 'GLSA-201308-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201308-03.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0641?


Explain the CVE ID: What does the identifier CVE-2013-0642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0642.

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.


Provide references for further information: Can you share references or external links related to CVE-2013-0642?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0642?


Explain the CVE ID: What does the identifier CVE-2013-0643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0643.

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0643?

{'name': 'RHSA-2013:0574', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0574.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-08.html'}, {'name': 'SUSE-SU-2013:0373', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html'}, {'name': 'openSUSE-SU-2013:0359', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.html'}, {'name': 'openSUSE-SU-2013:0360', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0643?


Explain the CVE ID: What does the identifier CVE-2013-0644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0644.

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0649 and CVE-2013-1374.


Provide references for further information: Can you share references or external links related to CVE-2013-0644?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0644?


Explain the CVE ID: What does the identifier CVE-2013-0645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0645.

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.


Provide references for further information: Can you share references or external links related to CVE-2013-0645?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0645?


Explain the CVE ID: What does the identifier CVE-2013-0646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0646.

Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0646?

{'name': 'openSUSE-SU-2013:0464', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00021.html'}, {'name': 'openSUSE-SU-2013:0459', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00019.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-09.html'}, {'name': 'SUSE-SU-2013:0458', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00018.html'}, {'name': 'HPSBMU02948', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=139455789818399&w=2'}, {'name': 'RHSA-2013:0643', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0643.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0646?


Explain the CVE ID: What does the identifier CVE-2013-0647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0647.

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638.


Provide references for further information: Can you share references or external links related to CVE-2013-0647?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0647?


Explain the CVE ID: What does the identifier CVE-2013-0648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0648.

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.


Provide references for further information: Can you share references or external links related to CVE-2013-0648?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0648?


Explain the CVE ID: What does the identifier CVE-2013-0649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0649.

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-1374.


Provide references for further information: Can you share references or external links related to CVE-2013-0649?

{'name': 'SUSE-SU-2013:0296', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00010.html'}, {'name': 'RHSA-2013:0254', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0254.html'}, {'name': 'openSUSE-SU-2013:0295', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html'}, {'name': 'openSUSE-SU-2013:0298', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00011.html'}, {'name': 'TA13-043A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb13-05.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0649?


Explain the CVE ID: What does the identifier CVE-2013-0650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0650.

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0650?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0650?


Explain the CVE ID: What does the identifier CVE-2013-0651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0651.

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.


Provide references for further information: Can you share references or external links related to CVE-2013-0651?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0651?


Explain the CVE ID: What does the identifier CVE-2013-0652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0652.

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call.


Provide references for further information: Can you share references or external links related to CVE-2013-0652?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0652?


Explain the CVE ID: What does the identifier CVE-2013-0653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0653.

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0653?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0653?


Explain the CVE ID: What does the identifier CVE-2013-0654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0654.

CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service (daemon crash) via a crafted packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0654?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0654?


Explain the CVE ID: What does the identifier CVE-2013-0655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0655.

The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80.


Provide references for further information: Can you share references or external links related to CVE-2013-0655?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0655?


Explain the CVE ID: What does the identifier CVE-2013-0656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0656.

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2013-0656?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-099741.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICSA-13-014-01.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0656?


Explain the CVE ID: What does the identifier CVE-2013-0657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0657.

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol.


Provide references for further information: Can you share references or external links related to CVE-2013-0657?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICSA-13-018-01.pdf'}, {'name': '45218', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45218/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://igss.schneider-electric.com/igss/igssupdates/v100/progupdatesv100.zip'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://igss.schneider-electric.com/igss/igssupdates/v90/progupdatesv90.zip'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0657?


Explain the CVE ID: What does the identifier CVE-2013-0658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0658.

Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2013-0658?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-043-01.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0658?


Explain the CVE ID: What does the identifier CVE-2013-0659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0659.

The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbitrary code via a crafted packet to UDP port 17185.


Provide references for further information: Can you share references or external links related to CVE-2013-0659?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-628113.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-084-01.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0659?


Explain the CVE ID: What does the identifier CVE-2013-0662 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0662.

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.


Provide references for further information: Can you share references or external links related to CVE-2013-0662?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202013-070-01'}, {'name': '45219', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45219/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-14-086-01'}, {'name': '66500', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/66500'}, {'name': '45220', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45220/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0662?


Explain the CVE ID: What does the identifier CVE-2013-0663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0663.

Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary users for requests that execute commands, as demonstrated by modifying HTTP credentials.


Provide references for further information: Can you share references or external links related to CVE-2013-0663?

{'name': '44678', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44678/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.schneider-electric.com/download/ww/en/details/35081317-Vulnerability-Disclosure-for-Quantum-Premium-and-M340/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.schneider-electric.com/download/ww/en/file/36555639-SEVD-2013-023-01.pdf/?fileName=SEVD-2013-023-01.pdf&reference=SEVD-2013-023-01&docType=Technical-paper'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-077-01A.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0663?


Explain the CVE ID: What does the identifier CVE-2013-0664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0664.

The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests.


Provide references for further information: Can you share references or external links related to CVE-2013-0664?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0664?


Explain the CVE ID: What does the identifier CVE-2013-0665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0665.

Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users to replace executable files, and consequently gain privileges, via standard filesystem operations.


Provide references for further information: Can you share references or external links related to CVE-2013-0665?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-079-01.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0665?


Explain the CVE ID: What does the identifier CVE-2013-0666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0666.

The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service (unhandled exception and application crash) via a TCP RST packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0666?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-106-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0666?


Explain the CVE ID: What does the identifier CVE-2013-0667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0667.

Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0667?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0667?


Explain the CVE ID: What does the identifier CVE-2013-0668 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0668.

Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0668?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0668?


Explain the CVE ID: What does the identifier CVE-2013-0669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0669.

The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2013-0669?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0669?


Explain the CVE ID: What does the identifier CVE-2013-0670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0670.

CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0670?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0670?


Explain the CVE ID: What does the identifier CVE-2013-0671 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0671.

Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-application source code and user-defined scripts via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0671?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0671?


Explain the CVE ID: What does the identifier CVE-2013-0672 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0672.

Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified data.


Provide references for further information: Can you share references or external links related to CVE-2013-0672?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0672?


Explain the CVE ID: What does the identifier CVE-2013-0673 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0673.

Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attackers to read and delete arbitrary files via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2013-0673?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0673?


Explain the CVE ID: What does the identifier CVE-2013-0674 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0674.

Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-0674?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-714398.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-079-02.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0674?


Explain the CVE ID: What does the identifier CVE-2013-0675 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0675.

Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to cause a denial of service via a crafted packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0675?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0675?


Explain the CVE ID: What does the identifier CVE-2013-0676 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0676.

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database containing WebNavigator credentials, which allows remote authenticated users to obtain sensitive information via a SQL query.


Provide references for further information: Can you share references or external links related to CVE-2013-0676?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0676?


Explain the CVE ID: What does the identifier CVE-2013-0677 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0677.

The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive information or cause a denial of service via a crafted project file.


Provide references for further information: Can you share references or external links related to CVE-2013-0677?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0677?


Explain the CVE ID: What does the identifier CVE-2013-0678 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0678.

Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in a database, which makes it easier for remote authenticated users to obtain sensitive information via a SQL query.


Provide references for further information: Can you share references or external links related to CVE-2013-0678?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0678?


Explain the CVE ID: What does the identifier CVE-2013-0679 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0679.

Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote authenticated users to read arbitrary files via vectors involving a query for a pathname.


Provide references for further information: Can you share references or external links related to CVE-2013-0679?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0679?


Explain the CVE ID: What does the identifier CVE-2013-0680 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0680.

Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2013-0680?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-095-01.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0680?


Explain the CVE ID: What does the identifier CVE-2013-0681 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0681.

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed data in a formatted text command.


Provide references for further information: Can you share references or external links related to CVE-2013-0681?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0681?


Explain the CVE ID: What does the identifier CVE-2013-0682 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0682.

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via malformed data in a formatted text command, leading to out-of-bounds access to (1) heap or (2) stack memory.


Provide references for further information: Can you share references or external links related to CVE-2013-0682?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0682?


Explain the CVE ID: What does the identifier CVE-2013-0683 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0683.

The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service (incorrect pointer access and client crash) via malformed data in a formatted text command.


Provide references for further information: Can you share references or external links related to CVE-2013-0683?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0683?


Explain the CVE ID: What does the identifier CVE-2013-0684 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0684.

SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0684?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-113-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0684?


Explain the CVE ID: What does the identifier CVE-2013-0685 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0685.

Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0685?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0685?


Explain the CVE ID: What does the identifier CVE-2013-0686 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0686.

Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.


Provide references for further information: Can you share references or external links related to CVE-2013-0686?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0686?


Explain the CVE ID: What does the identifier CVE-2013-0687 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0687.

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse executable file.


Provide references for further information: Can you share references or external links related to CVE-2013-0687?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-100-01.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.schneider-electric.com/files?p_File_Id=56543584&p_File_Name=SEVD-2013-087-01-MiCOM-S1-Studio-SW.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0687?


Explain the CVE ID: What does the identifier CVE-2013-0688 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0688.

Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0688?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0688?


Explain the CVE ID: What does the identifier CVE-2013-0689 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0689.

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0689?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-259-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0689?


Explain the CVE ID: What does the identifier CVE-2013-0690 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0690.


Provide references for further information: Can you share references or external links related to CVE-2013-0690?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0690?


Explain the CVE ID: What does the identifier CVE-2013-0691 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0691.


Provide references for further information: Can you share references or external links related to CVE-2013-0691?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0691?


Explain the CVE ID: What does the identifier CVE-2013-0692 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0692.

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to execute arbitrary code by connecting to the debug service.


Provide references for further information: Can you share references or external links related to CVE-2013-0692?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0692?


Explain the CVE ID: What does the identifier CVE-2013-0693 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0693.

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive information about device presence by listening for broadcast traffic.


Provide references for further information: Can you share references or external links related to CVE-2013-0693?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0693?


Explain the CVE ID: What does the identifier CVE-2013-0694 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0694.

The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM, which makes it easier for remote attackers to obtain shell access to the underlying OS by leveraging knowledge of the ROM contents from a product installation elsewhere.


Provide references for further information: Can you share references or external links related to CVE-2013-0694?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0694?


Explain the CVE ID: What does the identifier CVE-2013-0695 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0695.


Provide references for further information: Can you share references or external links related to CVE-2013-0695?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0695?


Explain the CVE ID: What does the identifier CVE-2013-0696 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0696.


Provide references for further information: Can you share references or external links related to CVE-2013-0696?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0696?


Explain the CVE ID: What does the identifier CVE-2013-0697 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0697.


Provide references for further information: Can you share references or external links related to CVE-2013-0697?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0697?


Explain the CVE ID: What does the identifier CVE-2013-0698 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0698.


Provide references for further information: Can you share references or external links related to CVE-2013-0698?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0698?


Explain the CVE ID: What does the identifier CVE-2013-0699 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0699.

The Galil RIO-47100 Pocket PLC allows remote attackers to cause a denial of service via a session that includes "repeated requests."


Provide references for further information: Can you share references or external links related to CVE-2013-0699?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-116-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.galilmc.com/support/downloads/firmware_rev/firm47xxx.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0699?


Explain the CVE ID: What does the identifier CVE-2013-0700 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0700.

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).


Provide references for further information: Can you share references or external links related to CVE-2013-0700?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-724606.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0700?


Explain the CVE ID: What does the identifier CVE-2013-0701 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0701.

SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary SQL commands by leveraging a logging privilege.


Provide references for further information: Can you share references or external links related to CVE-2013-0701?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/20130125up02.php'}, {'name': 'JVNDB-2013-000007', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000007'}, {'name': 'JVN#07629635', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN07629635/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0701?


Explain the CVE ID: What does the identifier CVE-2013-0702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0702.

Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 3.5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0702?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cs.cybozu.co.jp/information/20130125up01.php'}, {'name': 'JVN#95863326', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN95863326/index.html'}, {'name': 'JVNDB-2013-000008', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000008'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0702?


Explain the CVE ID: What does the identifier CVE-2013-0703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0703.

Cross-site scripting (XSS) vulnerability in imgboard.com imgboard before 1.22R6.1 u and 20xx before 2010u allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0703?

{'name': 'JVN#09223079', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN09223079/index.html'}, {'name': 'JVNDB-2013-000009', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000009'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.big.or.jp/~talk/t-club/soft/mini_r6/index.cgi'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0703?


Explain the CVE ID: What does the identifier CVE-2013-0704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0704.

Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications.


Provide references for further information: Can you share references or external links related to CVE-2013-0704?

{'name': 'JVN#78601526', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN78601526/index.html'}, {'name': 'JVNDB-2013-000010', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000010'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0704?


Explain the CVE ID: What does the identifier CVE-2013-0705 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0705.

Directory traversal vulnerability in LSI 3ware Disk Manager (3DM) before 2 allows remote attackers to read arbitrary files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0705?

{'name': 'JVNDB-2013-000011', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000011'}, {'name': 'JVN#02596643', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN02596643/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN02596643/995349/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0705?


Explain the CVE ID: What does the identifier CVE-2013-0706 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0706.

NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0706?

{'name': 'JVNDB-2013-000012', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000012'}, {'name': 'JVN#75585394', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN75585394/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jpn.nec.com/security-info/secinfo/nv13-004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0706?


Explain the CVE ID: What does the identifier CVE-2013-0707 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0707.

Unspecified vulnerability in JustSystems Ichitaro 2006 and 2007, Ichitaro Government 2006 and 2007, Ichitaro Portable with oreplug, Hanako 2006 through 2013, Hanako Police, Hanako Police 3, and Hanako Police 2010 allows remote attackers to execute arbitrary code via a crafted file.


Provide references for further information: Can you share references or external links related to CVE-2013-0707?

{'name': 'JVNDB-2013-000015', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000015'}, {'name': 'JVN#16817324', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN16817324/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.justsystems.com/jp/info/js13001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0707?


Explain the CVE ID: What does the identifier CVE-2013-0708 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0708.

Cross-site scripting (XSS) vulnerability in dopvCOMET* 0009b allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.


Provide references for further information: Can you share references or external links related to CVE-2013-0708?

{'name': 'JVN#64756004', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN64756004/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tech.bayashi.net/dc/'}, {'name': 'JVNDB-2013-000013', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000013'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0708?


Explain the CVE ID: What does the identifier CVE-2013-0709 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0709.

Cross-site scripting (XSS) vulnerability in dopvSTAR* 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log.


Provide references for further information: Can you share references or external links related to CVE-2013-0709?

{'name': 'JVN#36339873', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN36339873/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tech.bayashi.net/ds/'}, {'name': 'JVNDB-2013-000014', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000014'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0709?


Explain the CVE ID: What does the identifier CVE-2013-0710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0710.

Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document.


Provide references for further information: Can you share references or external links related to CVE-2013-0710?

{'name': 'JVN#55924624', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN55924624/index.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kingsoft.jp/support/office/support_news/writer2010_2723'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN55924624/22479/index.html'}, {'name': 'JVNDB-2013-000016', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000016'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0710?


Explain the CVE ID: What does the identifier CVE-2013-0711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0711.

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via a crafted authentication request.


Provide references for further information: Can you share references or external links related to CVE-2013-0711?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN45545972/995359/index.html'}, {'name': 'JVN#45545972', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN45545972/index.html'}, {'name': 'JVNDB-2013-000018', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000018'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0711?


Explain the CVE ID: What does the identifier CVE-2013-0712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0712.

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted packet.


Provide references for further information: Can you share references or external links related to CVE-2013-0712?

{'name': 'JVN#01611135', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN01611135/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN01611135/995359/index.html'}, {'name': 'JVNDB-2013-000019', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000019'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0712?


Explain the CVE ID: What does the identifier CVE-2013-0713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0713.

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon outage) via a crafted pty request.


Provide references for further information: Can you share references or external links related to CVE-2013-0713?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01'}, {'name': 'JVN#52492830', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN52492830/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN52492830/995359/index.html'}, {'name': 'JVNDB-2013-000020', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0713?


Explain the CVE ID: What does the identifier CVE-2013-0714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0714.

IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service (daemon hang) via a crafted public-key authentication request.


Provide references for further information: Can you share references or external links related to CVE-2013-0714?

{'name': 'JVN#20671901', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN20671901/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01'}, {'name': 'JVNDB-2013-000021', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000021'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN20671901/995359/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0714?


Explain the CVE ID: What does the identifier CVE-2013-0715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0715.

The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session crash) via a crafted command string.


Provide references for further information: Can you share references or external links related to CVE-2013-0715?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01'}, {'name': 'JVNDB-2013-000022', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000022'}, {'name': 'JVN#65923092', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN65923092/index.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN65923092/995359/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0715?


Explain the CVE ID: What does the identifier CVE-2013-0716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0716.

The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI.


Provide references for further information: Can you share references or external links related to CVE-2013-0716?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-13-091-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jvn.jp/en/jp/JVN41022517/995359/index.html'}, {'name': 'JVNDB-2013-000023', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000023'}, {'name': 'JVN#41022517', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN41022517/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0716?


Explain the CVE ID: What does the identifier CVE-2013-0717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0717.

Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.


Provide references for further information: Can you share references or external links related to CVE-2013-0717?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://jvn.jp/en/jp/JVN59503133/6443/index.html'}, {'name': 'JVNDB-2013-000024', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://jpn.nec.com/security-info/secinfo/nv13-005.html'}, {'name': 'JVN#59503133', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN59503133/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0717?


Explain the CVE ID: What does the identifier CVE-2013-0718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0718.

The Simeji application 4.8.1 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.


Provide references for further information: Can you share references or external links related to CVE-2013-0718?

{'name': 'JVNDB-2013-000029', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000029'}, {'name': 'JVN#77360971', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN77360971/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0718?


Explain the CVE ID: What does the identifier CVE-2013-0719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0719.

The ArtIME Japanese Input application 1.1.2 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.


Provide references for further information: Can you share references or external links related to CVE-2013-0719?

{'name': 'JVN#80922020', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN80922020/index.html'}, {'name': 'JVNDB-2013-000026', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000026'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0719?


Explain the CVE ID: What does the identifier CVE-2013-0720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0720.

The COBIME application before 0.9.4 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.


Provide references for further information: Can you share references or external links related to CVE-2013-0720?

{'name': 'JVN#11249169', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN11249169/index.html'}, {'name': 'JVNDB-2013-000027', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/jvndb/JVNDB-2013-000027'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0720?


Explain the CVE ID: What does the identifier CVE-2013-0721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0721.

wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2013-0721?

{'name': 'wpphpwidget-wpphpwidget-path-disclosure(80906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/80906'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/88/wp-php-widget.txt'}, {'name': '88846', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/88846'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0721?


Explain the CVE ID: What does the identifier CVE-2013-0722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0722.

Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line.


Provide references for further information: Can you share references or external links related to CVE-2013-0722?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securation.com/files/2013/01/ec.patch'}, {'name': '23945', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/23945/'}, {'name': '51731', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51731'}, {'name': '57175', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57175'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=451198'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=894092'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0722?


Explain the CVE ID: What does the identifier CVE-2013-0723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0723.

Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a crafted spreadsheet file.


Provide references for further information: Can you share references or external links related to CVE-2013-0723?

{'name': '51418', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51418/'}, {'name': '1028713', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028713'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0723?


Explain the CVE ID: What does the identifier CVE-2013-0724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0724.

PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-0724?

{'name': '57768', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57768'}, {'name': 'wp-shopstyling-generatepdf-file-include(81931)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81931'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/plugins/wp-ecommerce-shop-styling/changelog/'}, {'name': '51707', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51707'}, {'name': '89921', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89921'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0724?


Explain the CVE ID: What does the identifier CVE-2013-0725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0725.

ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities


Provide references for further information: Can you share references or external links related to CVE-2013-0725?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/63862'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/89185'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0725?


Explain the CVE ID: What does the identifier CVE-2013-0726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0726.

Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 13.00.0001 allows remote attackers to execute arbitrary code via a crafted pathname in an ERS file.


Provide references for further information: Can you share references or external links related to CVE-2013-0726?

{'name': '51725', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51725'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0726?


Explain the CVE ID: What does the identifier CVE-2013-0727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0727.

Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .gmc, .gmg, .gmp, .gms, .gmw, or .opt file.


Provide references for further information: Can you share references or external links related to CVE-2013-0727?

{'name': '51510', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51510'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0727?


Explain the CVE ID: What does the identifier CVE-2013-0728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0728.

Multiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13.00.0001 for Internet Explorer, Firefox, and Chrome allow remote attackers to execute arbitrary code via a long property value.


Provide references for further information: Can you share references or external links related to CVE-2013-0728?

{'name': '51647', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51647'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0728?


Explain the CVE ID: What does the identifier CVE-2013-0729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0729.

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file.


Provide references for further information: Can you share references or external links related to CVE-2013-0729?

{'name': '57491', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57491'}, {'name': '51855', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51855'}, {'name': 'pdfxchange-viewer-bo(81427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/81427'}, {'name': '89442', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/89442'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tracker-software.com/company/news_press_events/view/123'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0729?


Explain the CVE ID: What does the identifier CVE-2013-0730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0730.

Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) language parameter to application/modules/admin/controllers/LanguagesController.php or (2) user parameter to application/modules/admin/controllers/UserController.php.


Provide references for further information: Can you share references or external links related to CVE-2013-0730?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.sourcefabric.org/discussion/15052/security-patch-released-for-newscoop-4-1'}, {'name': '51921', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51921'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/sourcefabric/Newscoop/commit/4f948ba3afaaeb616006cbabc85906ef3254169d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0730?


Explain the CVE ID: What does the identifier CVE-2013-0731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0731.

ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which allows remote attackers to modify plugin settings and conduct cross-site scripting (XSS) attacks by setting the wordpress_logged_in cookie.  NOTE: this is due to an incomplete fix for a similar issue that was fixed in 1.3.2.


Provide references for further information: Can you share references or external links related to CVE-2013-0731?

{'tags': ['x_refsource_MISC'], 'url': 'http://plugins.trac.wordpress.org/changeset?new=682420'}, {'name': '58467', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58467'}, {'name': '51917', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/extend/plugins/wp-mailup/changelog/'}, {'name': '91274', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/91274'}, {'name': 'mailup-ajaxfunctions-security-bypass(82847)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82847'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0731?


Explain the CVE ID: What does the identifier CVE-2013-0732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0732.

Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries.


Provide references for further information: Can you share references or external links related to CVE-2013-0732?

{'name': '51943', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51943'}, {'name': '60315', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60315'}, {'name': '93870', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/93870'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0732?


Explain the CVE ID: What does the identifier CVE-2013-0733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0733.

Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.


Provide references for further information: Can you share references or external links related to CVE-2013-0733?

{'name': '98163', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/98163'}, {'name': '53618', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53618'}, {'name': '62836', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62836'}, {'name': 'corel-paintshop-cve20130733-code-exec(87763)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/87763'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0733?


Explain the CVE ID: What does the identifier CVE-2013-0734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0734.

Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) search_words parameter in a search action to wpf.class.php or (2) togroupusers parameter in an add_user_togroup action to fs-admin/fs-admin.php.


Provide references for further information: Can you share references or external links related to CVE-2013-0734?

{'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2013-3'}, {'name': '52167', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52167'}, {'name': '90433', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90433'}, {'name': 'wp-mingleforum-index-admin-xss(82187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82187'}, {'name': '90432', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90432'}, {'name': '58059', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0734?


Explain the CVE ID: What does the identifier CVE-2013-0735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0735.

Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewtopic (1) remove_post, (2) sticky, or (3) closed action or (4) thread parameter in a postreply action to index.php.


Provide references for further information: Can you share references or external links related to CVE-2013-0735?

{'name': '52167', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52167'}, {'name': '90434', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90434'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2013-4'}, {'name': 'wp-mingleforum-index-sql-injection(82188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82188'}, {'name': '58059', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0735?


Explain the CVE ID: What does the identifier CVE-2013-0736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0736.

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-0736?

{'name': '62133', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62133'}, {'name': '96905', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/96905'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2013-6'}, {'name': '47687', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47687'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0736?


Explain the CVE ID: What does the identifier CVE-2013-0737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0737.

Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-0737?

{'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/84698'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0737?


Explain the CVE ID: What does the identifier CVE-2013-0738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0738.

Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.


Provide references for further information: Can you share references or external links related to CVE-2013-0738?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/58735'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83104'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0738?


Explain the CVE ID: What does the identifier CVE-2013-0739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0739.

Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.