Provide references for further information: Can you share references or external links related to CVE-2013-1730?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=851353'}, {'name': 'openSUSE-SU-2013:1491', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html'}, {'name': '62473', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62473'}, {'name': 'FEDORA-2013-16992', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html'}, {'name': 'openSUSE-SU-2013:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html'}, {'name': 'FEDORA-2013-17074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html'}, {'name': 'USN-1952-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1952-1'}, {'name': 'USN-1951-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1951-1'}, {'name': 'openSUSE-SU-2013:1633', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html'}, {'name': 'oval:org.mitre.oval:def:19022', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19022'}, {'name': 'FEDORA-2013-17047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html'}, {'name': 'openSUSE-SU-2013:1493', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html'}, {'name': 'openSUSE-SU-2013:1499', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-88.html'}, {'name': 'RHSA-2013:1268', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1268.html'}, {'name': 'RHSA-2013:1269', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1269.html'}, {'name': 'DSA-2762', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2762'}, {'name': 'openSUSE-SU-2013:1495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1730?


Explain the CVE ID: What does the identifier CVE-2013-1731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1731.

Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows attackers to execute arbitrary code via a Trojan horse .so file in a world-writable directory.


Provide references for further information: Can you share references or external links related to CVE-2013-1731?

{'name': 'FEDORA-2013-16992', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html'}, {'name': 'FEDORA-2013-17074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html'}, {'name': 'FEDORA-2013-17047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-87.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=899702'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1731?


Explain the CVE ID: What does the identifier CVE-2013-1732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1732.

Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via crafted use of lists and floats within a multi-column layout.


Provide references for further information: Can you share references or external links related to CVE-2013-1732?

{'name': 'openSUSE-SU-2013:1491', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=883514'}, {'name': 'FEDORA-2013-16992', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html'}, {'name': 'openSUSE-SU-2013:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html'}, {'name': 'FEDORA-2013-17074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html'}, {'name': 'USN-1952-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1952-1'}, {'name': 'USN-1951-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1951-1'}, {'name': 'openSUSE-SU-2013:1633', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html'}, {'name': 'FEDORA-2013-17047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html'}, {'name': '62469', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62469'}, {'name': 'openSUSE-SU-2013:1493', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html'}, {'name': 'openSUSE-SU-2013:1499', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html'}, {'name': 'oval:org.mitre.oval:def:18520', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18520'}, {'name': 'RHSA-2013:1268', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1268.html'}, {'name': 'RHSA-2013:1269', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1269.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-89.html'}, {'name': 'DSA-2762', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2762'}, {'name': 'openSUSE-SU-2013:1495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1732?


Explain the CVE ID: What does the identifier CVE-2013-1733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1733.

Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token.


Provide references for further information: Can you share references or external links related to CVE-2013-1733?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=911593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security/4.0.10/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1733?


Explain the CVE ID: What does the identifier CVE-2013-1734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1734.

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that commit an attachment change via an update action.


Provide references for further information: Can you share references or external links related to CVE-2013-1734?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=913904'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security/4.0.10/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1734?


Explain the CVE ID: What does the identifier CVE-2013-1735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1735.

Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors related to image-document scrolling.


Provide references for further information: Can you share references or external links related to CVE-2013-1735?

{'name': 'openSUSE-SU-2013:1491', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html'}, {'name': 'FEDORA-2013-16992', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html'}, {'name': 'openSUSE-SU-2013:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html'}, {'name': '62479', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62479'}, {'name': 'FEDORA-2013-17074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html'}, {'name': 'USN-1952-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1952-1'}, {'name': 'USN-1951-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1951-1'}, {'name': 'oval:org.mitre.oval:def:18443', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18443'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-90.html'}, {'name': 'openSUSE-SU-2013:1633', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html'}, {'name': 'FEDORA-2013-17047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html'}, {'name': 'openSUSE-SU-2013:1493', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html'}, {'name': 'openSUSE-SU-2013:1499', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html'}, {'name': 'RHSA-2013:1268', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1268.html'}, {'name': 'RHSA-2013:1269', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1269.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=898871'}, {'name': 'DSA-2762', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2762'}, {'name': 'openSUSE-SU-2013:1495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1735?


Explain the CVE ID: What does the identifier CVE-2013-1736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1736.

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.


Provide references for further information: Can you share references or external links related to CVE-2013-1736?

{'name': 'openSUSE-SU-2013:1491', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html'}, {'name': '62478', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62478'}, {'name': 'FEDORA-2013-16992', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html'}, {'name': 'openSUSE-SU-2013:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html'}, {'name': 'FEDORA-2013-17074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html'}, {'name': 'USN-1952-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1952-1'}, {'name': 'USN-1951-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1951-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-90.html'}, {'name': 'openSUSE-SU-2013:1633', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html'}, {'name': 'FEDORA-2013-17047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html'}, {'name': 'openSUSE-SU-2013:1493', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=906301'}, {'name': 'openSUSE-SU-2013:1499', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html'}, {'name': 'oval:org.mitre.oval:def:18856', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18856'}, {'name': 'RHSA-2013:1268', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1268.html'}, {'name': 'RHSA-2013:1269', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1269.html'}, {'name': 'DSA-2762', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2762'}, {'name': 'openSUSE-SU-2013:1495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1736?


Explain the CVE ID: What does the identifier CVE-2013-1737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1737.

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass intended access restrictions via vectors involving an expando object.


Provide references for further information: Can you share references or external links related to CVE-2013-1737?

{'name': 'openSUSE-SU-2013:1491', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html'}, {'name': 'FEDORA-2013-16992', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html'}, {'name': 'openSUSE-SU-2013:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00060.html'}, {'name': 'FEDORA-2013-17074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html'}, {'name': 'USN-1952-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1952-1'}, {'name': 'USN-1951-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1951-1'}, {'name': 'openSUSE-SU-2013:1633', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00005.html'}, {'name': 'oval:org.mitre.oval:def:18789', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18789'}, {'name': 'FEDORA-2013-17047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html'}, {'name': 'openSUSE-SU-2013:1493', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html'}, {'name': '62475', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62475'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=907727'}, {'name': 'openSUSE-SU-2013:1499', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-91.html'}, {'name': 'RHSA-2013:1268', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1268.html'}, {'name': 'RHSA-2013:1269', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1269.html'}, {'name': 'DSA-2762', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2762'}, {'name': 'openSUSE-SU-2013:1495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1737?


Explain the CVE ID: What does the identifier CVE-2013-1738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1738.

Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code by leveraging incorrect garbage collection in situations involving default compartments and frame-chain restoration.


Provide references for further information: Can you share references or external links related to CVE-2013-1738?

{'name': 'openSUSE-SU-2013:1491', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00055.html'}, {'name': 'FEDORA-2013-16992', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115907.html'}, {'name': 'oval:org.mitre.oval:def:18766', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18766'}, {'name': 'FEDORA-2013-17074', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116610.html'}, {'name': 'USN-1952-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1952-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=887334'}, {'name': 'USN-1951-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1951-1'}, {'name': 'FEDORA-2013-17047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117526.html'}, {'name': 'openSUSE-SU-2013:1493', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00057.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=882897'}, {'name': 'openSUSE-SU-2013:1499', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00061.html'}, {'name': '62466', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62466'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-92.html'}, {'name': 'openSUSE-SU-2013:1495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-09/msg00059.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1738?


Explain the CVE ID: What does the identifier CVE-2013-1739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1739.

Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a decryption failure.


Provide references for further information: Can you share references or external links related to CVE-2013-1739?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1012656'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0012.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://developer.mozilla.org/en-US/docs/NSS/NSS_3.15.2_release_notes'}, {'name': 'DSA-2790', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2790'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534161/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=894370'}, {'name': 'GLSA-201406-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201406-19.xml'}, {'name': 'USN-2030-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2030-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-93.html'}, {'name': 'oval:org.mitre.oval:def:19254', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19254'}, {'name': 'RHSA-2013:1791', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1791.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761'}, {'name': 'SUSE-SU-2013:1678', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00014.html'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Dec/23'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html'}, {'name': 'openSUSE-SU-2013:1539', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-10/msg00013.html'}, {'name': '62966', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/62966'}, {'name': 'RHSA-2013:1829', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1829.html'}, {'name': 'openSUSE-SU-2013:1542', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-10/msg00016.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1739?


Explain the CVE ID: What does the identifier CVE-2013-1740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1740.

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.


Provide references for further information: Can you share references or external links related to CVE-2013-1740?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'name': 'openSUSE-SU-2014:0212', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0012.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://developer.mozilla.org/docs/NSS/NSS_3.15.4_release_notes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '64944', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64944'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534161/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html'}, {'name': 'mozilla-nss-cve20131740-info-disc(90394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90394'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1053725'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Dec/23'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html'}, {'name': 'USN-2088-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2088-1'}, {'name': 'openSUSE-SU-2014:0213', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=919877'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=498172'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1740?


Explain the CVE ID: What does the identifier CVE-2013-1741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1741.

Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value.


Provide references for further information: Can you share references or external links related to CVE-2013-1741?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204941'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://developer.mozilla.org/docs/NSS/NSS_3.15.3_release_notes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0012.html'}, {'name': 'DSA-2994', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2994'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534161/100/0/threaded'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=925100'}, {'name': '63736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/63736'}, {'name': 'GLSA-201504-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-01'}, {'name': 'GLSA-201406-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201406-19.xml'}, {'name': 'USN-2030-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2030-1'}, {'name': 'USN-2031-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2031-1'}, {'name': 'USN-2032-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2032-1'}, {'name': 'RHSA-2013:1791', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1791.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html'}, {'name': 'SUSE-SU-2013:1807', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204942'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Dec/23'}, {'name': 'APPLE-SA-2015-06-30-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2013/mfsa2013-103.html'}, {'name': 'openSUSE-SU-2013:1732', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html'}, {'name': 'RHSA-2013:1829', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1829.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1741?


Explain the CVE ID: What does the identifier CVE-2013-1742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1742.

Multiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) sortkey parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-1742?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=924802'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security/4.0.10/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1742?


Explain the CVE ID: What does the identifier CVE-2013-1743 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1743.

Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the (1) summary or (2) real name field.  NOTE: this issue exists because of an incomplete fix for CVE-2012-4189.


Provide references for further information: Can you share references or external links related to CVE-2013-1743?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=924932'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security/4.0.10/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1743?


Explain the CVE ID: What does the identifier CVE-2013-1744 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1744.

IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2013-1744?

{'tags': ['x_refsource_MISC'], 'url': 'http://infosecabsurdity.wordpress.com/research/isa-2013-002/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1744?


Explain the CVE ID: What does the identifier CVE-2013-1747 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1747.

channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for a user who is not on the associated channel.


Provide references for further information: Can you share references or external links related to CVE-2013-1747?

{'name': '91836', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.com/show/osvdb/91836'}, {'name': 'FEDORA-2013-4593', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101706.html'}, {'name': '[ngIRCd-ML] 20130217 ngIRCd 20.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://arthur.barton.de/pipermail/ngircd-ml/2013-February/000625.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git%3Bh=0e63fb3fa7ac4ca048e8c2b648d2be3fd0572311'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ngircd.barton.de/doc/NEWS'}, {'name': '52982', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52982'}, {'name': '[ngIRCd-ML] 20130215 ngIRCd 20.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://arthur.barton.de/pipermail/ngircd-ml/2013-February/000623.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1747?


Explain the CVE ID: What does the identifier CVE-2013-1748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1748.

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php.  NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered by CVE-2008-2565.2.


Provide references for further information: Can you share references or external links related to CVE-2013-1748?

{'name': '[oss-security] 20130417 Multiple vulnerabilities in PHP Address Book v8.2.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/04/17/2'}, {'name': '[oss-security] 20130417 Re: Multiple vulnerabilities in PHP Address Book v8.2.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/04/17/5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1748?


Explain the CVE ID: What does the identifier CVE-2013-1749 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1749.

Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field.


Provide references for further information: Can you share references or external links related to CVE-2013-1749?

{'name': '[oss-security] 20130417 Multiple vulnerabilities in PHP Address Book v8.2.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/04/17/2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1749?


Explain the CVE ID: What does the identifier CVE-2013-1750 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1750.

Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code via a malformed MP4 file.


Provide references for further information: Can you share references or external links related to CVE-2013-1750?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/realplayer/security/03152013_player/en/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1750?


Explain the CVE ID: What does the identifier CVE-2013-1751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1751.

TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.


Provide references for further information: Can you share references or external links related to CVE-2013-1751?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1751'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securitytracker.com/id/1028149'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2013-1751'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1751?


Explain the CVE ID: What does the identifier CVE-2013-1752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1752.


Provide references for further information: Can you share references or external links related to CVE-2013-1752?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1752?


Explain the CVE ID: What does the identifier CVE-2013-1753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1753.

The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2013-1753?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.python.org/issue16043'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1753?


Explain the CVE ID: What does the identifier CVE-2013-1756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1756.

The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.


Provide references for further information: Can you share references or external links related to CVE-2013-1756?

{'name': 'dragonfly-ruby-code-exec(82476)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82476'}, {'name': '58225', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58225'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/markevans/dragonfly/commit/a8775aacf9e5c81cf11bec34b7afa7f27ddfe277'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/?fromgroups=#%21topic/dragonfly-users/3c3WIU3VQTo'}, {'name': '52380', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1756?


Explain the CVE ID: What does the identifier CVE-2013-1758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1758.

Cross-site scripting (XSS) vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pfad parameter to wp-admin/options-general.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2013-1758?

{'name': '52227', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52227'}, {'name': '90362', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90362'}, {'name': '20130218 Reflective XSS in Marekkis Watermark-Plugin Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-02/0084.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120378/WordPress-Marekkis-Watermark-Cross-Site-Scripting.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1758?


Explain the CVE ID: What does the identifier CVE-2013-1759 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1759.

Cross-site scripting (XSS) vulnerability in the Responsive Logo Slideshow plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the "URL and Image" field.


Provide references for further information: Can you share references or external links related to CVE-2013-1759?

{'name': '20130218 Reflective/Stored XSS in Responsive Logo Slideshow Plugin Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-02/0085.html'}, {'name': 'responsivelogoslideshow-url-image-xss(82164)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82164'}, {'name': 'wpresponsivelogoslideshow-url-image-xss(82165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82165'}, {'name': '90406', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90406'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/120379/WordPress-Responsive-Logo-Slideshow-Cross-Site-Scripting.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1759?


Explain the CVE ID: What does the identifier CVE-2013-1760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1760.

The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities


Provide references for further information: Can you share references or external links related to CVE-2013-1760?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/64004'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/89358'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/89360'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1760?


Explain the CVE ID: What does the identifier CVE-2013-1762 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1762.

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2013-1762?

{'name': 'MDVSA-2013:130', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:130'}, {'name': 'RHSA-2013:0714', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0714.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.stunnel.org/CVE-2013-1762.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0097'}, {'name': 'DSA-2664', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2664'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1762?


Explain the CVE ID: What does the identifier CVE-2013-1763 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1763.

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.


Provide references for further information: Can you share references or external links related to CVE-2013-1763?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=915052'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0'}, {'name': '[oss-security] 20130225 Re: CVE Request: kernel - sock_diag: Fix out-of-bounds access to sock_diag_handlers[]', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2013/02/25/12'}, {'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'name': 'USN-1750-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1750-1'}, {'name': '33336', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/33336'}, {'name': '[oss-security] 20130224 Re: CVE Request: kernel - sock_diag: Fix out-of-bounds access to sock_diag_handlers[]', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/24/3'}, {'name': 'openSUSE-SU-2013:0395', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html'}, {'name': '24746', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24746'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.10'}, {'name': 'USN-1749-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1749-1'}, {'name': '24555', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24555'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e601a53566d84e1ffd25e7b6fe0b6894ffd79c0'}, {'name': 'USN-1751-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1751-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1763?


Explain the CVE ID: What does the identifier CVE-2013-1764 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1764.

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.


Provide references for further information: Can you share references or external links related to CVE-2013-1764?

{'name': '[oss-security] 20130225 Re: CVE Request: PackageKit"update" allows downgrade  of packages when using the "zypp" backend', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/25/20'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitorious.org/packagekit/packagekit/source/NEWS'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.freedesktop.org/show_bug.cgi?id=61231'}, {'name': 'openSUSE-SU-2013:0889', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=804983'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitorious.org/packagekit/packagekit/commit/d3d14631042237bcfe6fb30a60e59bb6d94af425'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1764?


Explain the CVE ID: What does the identifier CVE-2013-1765 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1765.

Multiple cross-site scripting (XSS) vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) link or (2) playerready parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-1765?

{'name': '[oss-security] 20130225 Re: CVE request: WordPress plugin smart-flv jwplayer.swf XSS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q1/446'}, {'name': '90606', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90606'}, {'name': '58135', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58135'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1765?


Explain the CVE ID: What does the identifier CVE-2013-1766 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1766.

libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1766?

{'name': '58178', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58178'}, {'name': 'DSA-2650', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2650'}, {'name': '52628', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52628'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1766?


Explain the CVE ID: What does the identifier CVE-2013-1767 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1767.

Use-after-free vulnerability in the shmem_remount_fs function in mm/shmem.c in the Linux kernel before 3.7.10 allows local users to gain privileges or cause a denial of service (system crash) by remounting a tmpfs filesystem without specifying a required mpol (aka mempolicy) mount option.


Provide references for further information: Can you share references or external links related to CVE-2013-1767?

{'name': 'openSUSE-SU-2013:0847', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html'}, {'name': 'USN-1796-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1796-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=915592'}, {'name': 'RHSA-2013:0882', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0882.html'}, {'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'name': 'USN-1797-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1797-1'}, {'name': 'USN-1788-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1788-1'}, {'name': 'USN-1793-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1793-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5f00110f7273f9ff04ac69a5f85bb535a4fd0987'}, {'name': 'RHSA-2013:0928', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0928.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/5f00110f7273f9ff04ac69a5f85bb535a4fd0987'}, {'name': 'USN-1792-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1792-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.10'}, {'name': 'USN-1794-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1794-1'}, {'name': 'RHSA-2013:0744', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0744.html'}, {'name': 'USN-1795-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1795-1'}, {'name': 'openSUSE-SU-2013:0925', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html'}, {'name': 'USN-1787-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1787-1'}, {'name': 'USN-1798-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1798-1'}, {'name': '[oss-security] 20130225 Re: kernel: tmpfs use-after-free', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/25/23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1767?


Explain the CVE ID: What does the identifier CVE-2013-1768 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1768.

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.


Provide references for further information: Can you share references or external links related to CVE-2013-1768?

{'name': 'RHSA-2013:1862', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1862.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462225'}, {'name': 'PM86780', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM86780'}, {'name': '20130612 [CVE-2013-1768] Apache OpenJPA security vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0099.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21635999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462488'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21644047'}, {'name': 'openjpa-cve20131768-command-execution(82268)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82268'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462328'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462558'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462512'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html'}, {'name': 'PM86786', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM86786'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462076'}, {'name': 'PM86788', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM86788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462318'}, {'name': '60534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60534'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1462268'}, {'name': 'PM86791', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM86791'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1768?


Explain the CVE ID: What does the identifier CVE-2013-1769 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1769.

A certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted message.


Provide references for further information: Can you share references or external links related to CVE-2013-1769?

{'name': '53779', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53779'}, {'name': '[Telepathy] 20130304 Announce: telepathy-gabble 0.16.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.freedesktop.org/archives/telepathy/2013-March/006377.html'}, {'name': '[Telepathy] 20130304 Announce: telepathy-gabble 0.17.3', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.freedesktop.org/archives/telepathy/2013-March/006378.html'}, {'name': 'USN-1873-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1873-1'}, {'name': 'openSUSE-SU-2013:0518', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00085.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1769?


Explain the CVE ID: What does the identifier CVE-2013-1770 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1770.

Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-1770?

{'name': '[oss-security] 20130226 Re: CVE request: XSS flaws fixed in ganglia', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/26/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ganglia/ganglia-web/commit/552965f33bf79d41ccbec3f1f26840c8bab54ad6'}, {'name': 'ganglia-viewsview-xss(82468)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82468'}, {'name': '[oss-security] 20130221 Re: CVE request: XSS flaws fixed in ganglia', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/21/12'}, {'name': '52673', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52673'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ganglia/ganglia-web/issues/160'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=892823'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1770?


Explain the CVE ID: What does the identifier CVE-2013-1771 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1771.

The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.


Provide references for further information: Can you share references or external links related to CVE-2013-1771?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2013-1771'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/26/10'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1771?


Explain the CVE ID: What does the identifier CVE-2013-1772 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1772.

The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.


Provide references for further information: Can you share references or external links related to CVE-2013-1772?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/ce0030c00f95cf9110d9cdcd41e901e1fb814417'}, {'name': 'openSUSE-SU-2013:1187', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html'}, {'name': '[oss-security] 20130226 Re: CVE request -- Linux kernel: call_console_drivers() Function Log Prefix Stripping buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/26/9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=916075'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.33'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1772?


Explain the CVE ID: What does the identifier CVE-2013-1773 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1773.

Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.


Provide references for further information: Can you share references or external links related to CVE-2013-1773?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=916115'}, {'name': 'RHSA-2013:0928', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0928.html'}, {'name': '[oss-security] 20130226 Re: CVE request - Linux kernel: VFAT slab-based buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/26/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/0720a06a7518c9d0c0125bd5d1f3b6264c55c3dd'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0720a06a7518c9d0c0125bd5d1f3b6264c55c3dd'}, {'name': '23248', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/23248/'}, {'name': 'RHSA-2013:0744', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0744.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.3.bz2'}, {'name': '58200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58200'}, {'name': '88310', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/88310'}, {'name': 'RHSA-2013:1026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1026.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1773?


Explain the CVE ID: What does the identifier CVE-2013-1774 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1774.

The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service (NULL pointer dereference and system crash) via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter.


Provide references for further information: Can you share references or external links related to CVE-2013-1774?

{'name': 'openSUSE-SU-2013:0847', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=916191'}, {'name': 'USN-1805-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1805-1'}, {'name': 'USN-1808-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1808-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1ee0a224bc9aad1de496c795f96bc6ba2c394811'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/1ee0a224bc9aad1de496c795f96bc6ba2c394811'}, {'name': 'SUSE-SU-2013:1474', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html'}, {'name': '[oss-security] 20130227 Re: CVE request: Linux kernel: USB: io_ti: NULL pointer dereference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/27/29'}, {'name': 'RHSA-2013:0744', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0744.html'}, {'name': 'openSUSE-SU-2013:0925', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html'}, {'name': 'SUSE-SU-2013:1182', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://xorl.wordpress.com/2013/05/18/cve-2013-1774-linux-kernel-edgeport-usb-serial-converter-null-pointer-dereference/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1774?


Explain the CVE ID: What does the identifier CVE-2013-1775 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1775.

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.


Provide references for further information: Can you share references or external links related to CVE-2013-1775?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'name': '58203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58203'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sudo.ws/repos/sudo/rev/ddf399e3e306'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sudo.ws/sudo/alerts/epoch_ticket.html'}, {'name': '90677', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90677'}, {'name': 'RHSA-2013:1701', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1701.html'}, {'name': 'DSA-2642', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2642'}, {'name': 'openSUSE-SU-2013:0495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html'}, {'name': 'USN-1754-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1754-1'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': 'APPLE-SA-2013-09-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html'}, {'name': 'SSA:2013-065-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440'}, {'name': '[oss-security] 20130227 CVE request: sudo authentication bypass when clock is reset', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/27/22'}, {'name': 'RHSA-2013:1353', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1353.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT205031'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5880'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1775?


Explain the CVE ID: What does the identifier CVE-2013-1776 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1776.

sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.


Provide references for further information: Can you share references or external links related to CVE-2013-1776?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'name': '58207', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58207'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839'}, {'name': 'DSA-2642', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2642'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sudo.ws/repos/sudo/rev/6b22be4d09f0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sudo.ws/repos/sudo/rev/632f8e028191'}, {'name': '[oss-security] 20130227 Re: CVE request: potential bypass of sudo tty_tickets  constraints', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/27/31'}, {'name': 'openSUSE-SU-2013:0495', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sudo.ws/sudo/alerts/tty_tickets.html'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': 'SSA:2013-065-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/87023'}, {'name': 'RHSA-2013:1353', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1353.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT205031'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=916365'}, {'name': 'sudo-ttytickets-sec-bypass(82453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1776?


Explain the CVE ID: What does the identifier CVE-2013-1777 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1777.

The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to execute arbitrary code by using the JMX connector to send a crafted serialized object.


Provide references for further information: Can you share references or external links related to CVE-2013-1777?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21643282'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/jira/browse/GERONIMO-6477'}, {'name': '20130701 [SECURITY] CVE-2013-1777: Apache Geronimo 3 RMI classloader exposure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2013-07/0008.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://geronimo.apache.org/30x-security-report.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1777?


Explain the CVE ID: What does the identifier CVE-2013-1778 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1778.

Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.


Provide references for further information: Can you share references or external links related to CVE-2013-1778?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/creative.git/commitdiff/465367c'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929474'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1929380'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1778?


Explain the CVE ID: What does the identifier CVE-2013-1779 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1779.

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1779?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1723316'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929482'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/fresh.git/commitdiff/08a3ccb'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1779?


Explain the CVE ID: What does the identifier CVE-2013-1780 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1780.

Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.


Provide references for further information: Can you share references or external links related to CVE-2013-1780?

{'name': '90690', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90690'}, {'name': '58213', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58213'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/best_responsive.git/commitdiff/5972126'}, {'name': '52421', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52421'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929484'}, {'name': 'bestresponsive-socialicon-xss(82469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82469'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1929390'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1780?


Explain the CVE ID: What does the identifier CVE-2013-1781 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1781.

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1781?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/professional_theme.git/commitdiff/e3fa6a2'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1730768'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/professional_theme.git/commitdiff/0640ddc'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929486'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1781?


Explain the CVE ID: What does the identifier CVE-2013-1782 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1782.

Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.


Provide references for further information: Can you share references or external links related to CVE-2013-1782?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929488'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/responsive_blog.git/commitdiff/ce47de9'}, {'name': '58218', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58218'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'name': '90688', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90688'}, {'name': '52423', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52423'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1929396'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1782?


Explain the CVE ID: What does the identifier CVE-2013-1783 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1783.

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1783?

{'name': '52424', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52424'}, {'name': '58216', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/58216'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929496'}, {'name': '90685', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/90685'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/business.git/commitdiff/02f081f'}, {'name': 'business-3slidegallery-xss(82460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/82460'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1723246'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1783?


Explain the CVE ID: What does the identifier CVE-2013-1784 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1784.

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1784?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1723532'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929500'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/clean_theme.git/commitdiff/ff2da6f'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/clean_theme.git/commitdiff/697f839'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1784?


Explain the CVE ID: What does the identifier CVE-2013-1785 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1785.

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1785?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929508'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/responsive.git/commitdiff/1c6fa91'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1730752'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/responsive.git/commitdiff/6b593ff'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1785?


Explain the CVE ID: What does the identifier CVE-2013-1786 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1786.

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1786?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/company.git/commitdiff/9ddac7e'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1724232'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/company.git/commitdiff/d9a99da'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929512'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1786?


Explain the CVE ID: What does the identifier CVE-2013-1787 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1787.

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1787?

{'tags': ['x_refsource_MISC'], 'url': 'http://drupal.org/node/1929514'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/1730786'}, {'name': '[oss-security] 20130227 Re: CVE Request for Drupal Contributed Modules', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupalcode.org/project/corporate.git/commitdiff/679a1d3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1787?


Explain the CVE ID: What does the identifier CVE-2013-1788 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1788.

poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.


Provide references for further information: Can you share references or external links related to CVE-2013-1788?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=957aa252912cde85d76c41e9710b33425a82b696'}, {'name': 'FEDORA-2013-3457', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html'}, {'name': 'MDVSA-2013:143', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:143'}, {'name': 'FEDORA-2013-3473', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html'}, {'name': 'USN-1785-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1785-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=917108'}, {'tags': ['x_refsource_MISC'], 'url': 'http://j00ru.vexillium.org/?p=1507'}, {'name': 'DSA-2719', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2719'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=0388837f01bc467045164f9ddaff787000a8caaa'}, {'name': '52846', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52846'}, {'name': '[oss-security] 20130228 Re: CVE Request: poppler 0.22.1 security fixes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/8'}, {'name': '[oss-security] 20130227 Re: CVE Request: poppler 0.22.1 security fixes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=e14b6e9c13d35c9bd1e0c50906ace8e707816888'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=bbc2d8918fe234b7ef2c480eb148943922cc0959'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=8b6dc55e530b2f5ede6b9dfb64aafdd1d5836492'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1788?


Explain the CVE ID: What does the identifier CVE-2013-1789 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1789.

splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1789?

{'name': 'FEDORA-2013-3457', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html'}, {'name': 'FEDORA-2013-3473', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html'}, {'name': 'USN-1785-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1785-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://j00ru.vexillium.org/?p=1507'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=917109'}, {'name': '52846', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52846'}, {'name': '[oss-security] 20130228 Re: CVE Request: poppler 0.22.1 security fixes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a205e71a2dbe0c8d4f4905a76a3f79ec522eacec'}, {'name': '[oss-security] 20130227 Re: CVE Request: poppler 0.22.1 security fixes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a9b8ab4657dec65b8b86c225d12c533ad7e984e2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1789?


Explain the CVE ID: What does the identifier CVE-2013-1790 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1790.

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.


Provide references for further information: Can you share references or external links related to CVE-2013-1790?

{'name': 'FEDORA-2013-3457', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html'}, {'name': 'MDVSA-2013:143', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:143'}, {'name': 'FEDORA-2013-3473', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html'}, {'name': 'USN-1785-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1785-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=917111'}, {'tags': ['x_refsource_MISC'], 'url': 'http://j00ru.vexillium.org/?p=1507'}, {'name': 'DSA-2719', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2719'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=b1026b5978c385328f2a15a2185c599a563edf91'}, {'name': '52846', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52846'}, {'name': '[oss-security] 20130228 Re: CVE Request: poppler 0.22.1 security fixes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/8'}, {'name': '[oss-security] 20130227 Re: CVE Request: poppler 0.22.1 security fixes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/02/28/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1790?


Explain the CVE ID: What does the identifier CVE-2013-1791 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1791.


Provide references for further information: Can you share references or external links related to CVE-2013-1791?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1791?


Explain the CVE ID: What does the identifier CVE-2013-1792 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1792.

Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.