Archive
May 2013
Vulnerabilities first published in this month (UTC), newest first.
356 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to in…
-
Unscored —
The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remo…
-
Unscored —
Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execu…
-
Unscored —
The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive informa…
-
Unscored —
The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows…
-
Unscored —
html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 …
-
Unscored —
The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended ac…
-
Unscored —
The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of wr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR…
-
Unscored —
EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Fra…
-
Unscored —
EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass…
-
Unscored —
Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before …
-
Unscored —
Multiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management (ZDM) 7 through 7.1 might a…
-
High 8.8
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…
KEV Mar 3, 2022 -
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote…
-
Unscored —
The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allow…
-
Unscored —
Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessi…
-
Unscored —
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows r…
-
Unscored —
The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unsp…
-
Unscored —
EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Com…
-
Unscored —
The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitr…
-
Unscored —CVE-2013-1959 Public exploit
kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_…
-
Unscored —
The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (process restart) via cr…
-
Unscored —
The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache fil…
-
Unscored —
The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values duri…
-
Unscored —
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requi…
-
Unscored —CVE-2013-3242 Public exploit
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.…
-
Unscored —
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 all…
-
Unscored —
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestio…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 b…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2…
-
Unscored —
Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via u…
-
Unscored —
The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of servic…
-
Medium 4.3
Django Data leakage via admin history log
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.
-
Medium 5.3
Django is vulnerable to Denial of Service attack in formset
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a mod…