Skip to content
OpenAdvisories

Archive

28 June 2013

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —
    CVE-2013-4093 Public exploit

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to …

  • Unscored —
    CVE-2013-4094 Public exploit

    The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0…

  • Unscored —
    CVE-2013-4095 Public exploit

    plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 al…

  • Unscored —
    CVE-2013-4096 Public exploit

    ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrar…

  • Unscored —
    CVE-2013-4097 Public exploit

    ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information v…

  • Unscored —
    CVE-2013-4092 Public exploit

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent at…

  • Unscored —
    CVE-2013-4091 Public exploit

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autoco…

  • Unscored —
    CVE-2013-4098 Public exploit

    ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used,…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MAIL before 6.7, when Internet Explorer 7 or earlier is used,…

  • Unscored —

    Buffer overflow in the lsConnectionCached function in editcp in EDItran Communications Platform 4.1 R7 allows remote at…

  • Critical —
    CVE-2013-4660 Public exploit EPSS 17%

    Deserialization Code Execution in js-yaml

    The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.

  • Unscored —

    HP SQL/MX 3.2 and earlier on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to obtain…

  • Unscored —

    HP SQL/MX 3.0 through 3.2 on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to bypass…