Skip to content
OpenAdvisories

Archive

29 July 2013

Vulnerabilities first published on this day (UTC), newest first.

32 results · Feed

  • Unscored —
    CVE-2013-4950 Public exploit

    Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2013-4949 Public exploit

    Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2013-4951 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web scr…

  • Unscored —

    Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have…

  • Unscored —
    CVE-2013-4948 Public exploit

    SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2013-4953 Public exploit

    SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2013-4952 Public exploit

    SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2013-4954 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin befor…

  • Unscored —
    CVE-2013-4946 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers …

  • Unscored —
    CVE-2013-4945 Public exploit

    Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute ar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote …

  • Unscored —

    Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to ca…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPres…

  • Unscored —
    CVE-2013-3515 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows a…

  • Unscored —

    Multiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM A Common dissector in Wireshark 1.8.x b…

  • Unscored —

    Memory leak in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISyst…

  • Unscored —

    Off-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c in the Radiotap dissec…

  • Unscored —

    epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not …

  • Unscored —

    epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of serv…

  • Unscored —

    Integer signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissect…

  • Unscored —

    Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.…

  • Unscored —

    The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x befor…

  • Unscored —

    The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and …

  • Unscored —

    epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not …

  • Unscored —

    The dissect_dvbci_tpdu_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before…

  • Unscored —

    The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8…

  • Unscored —

    Integer signedness error in the dissect_headers function in epan/dissectors/packet-btobex.c in the Bluetooth OBEX disse…

  • Unscored —

    The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x befor…

  • Unscored —

    The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote …

  • Unscored —

    The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x bef…

  • Unscored —

    Double free vulnerability in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in …