Skip to content
OpenAdvisories

Archive

26 April 2013

Vulnerabilities first published on this day (UTC), newest first.

10 results · Feed

  • Unscored —
    CVE-2013-1428 Public exploit EPSS 61%

    Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1p…

  • Unscored —

    Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Troja…

  • Unscored —

    The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted …

  • Unscored —

    The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to s…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remot…

  • Unscored —

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows local users to gain privileges…

  • High 8.5
    CVE-2013-3239 Public exploit

    phpMyAdmin Remote Code Execution

    phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file a…

  • Unscored —
    CVE-2013-3238 Public exploit EPSS 29%

    phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via …

  • Unscored —
    CVE-2013-3241 Public exploit

    export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the c…

  • Unscored —
    CVE-2013-3240 Public exploit

    Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated …