Archive
26 April 2013
Vulnerabilities first published on this day (UTC), newest first.
10 results · Feed
-
Unscored —
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1p…
-
Unscored —
Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Troja…
-
Unscored —
The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted …
-
Unscored —
The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to s…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remot…
-
Unscored —
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows local users to gain privileges…
-
High 8.5CVE-2013-3239 Public exploit
phpMyAdmin Remote Code Execution
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file a…
-
Unscored —
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via …
-
Unscored —CVE-2013-3241 Public exploit
export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the c…
-
Unscored —CVE-2013-3240 Public exploit
Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated …