Archive
July 2013
Vulnerabilities first published in this month (UTC), newest first.
81 results · Clear filters · Feed
-
Unscored —
The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of ser…
-
Unscored —
The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbi…
-
Unscored —CVE-2013-3956 Public exploit
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP…
-
Unscored —
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users …
-
Unscored —
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit per…
-
Unscored —
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote…
-
Unscored —
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resou…
-
Unscored —CVE-2013-5020 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to in…
-
Unscored —
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to exec…
-
Unscored —CVE-2013-5006 Public exploit
main_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C…
-
Unscored —CVE-2013-4950 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2013-4949 Public exploit
Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2013-4951 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2013-4948 Public exploit
SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2013-4953 Public exploit
SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2013-4952 Public exploit
SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2013-4954 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin befor…
-
Unscored —CVE-2013-4946 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers …
-
Unscored —CVE-2013-4945 Public exploit
Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute ar…
-
Unscored —CVE-2013-3515 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject…
-
Unscored —
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…
-
Unscored —
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…
-
Unscored —
Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…
-
Unscored —CVE-2013-4015 Public exploit
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected M…
-
Unscored —CVE-2013-3430 Public exploit
Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive,…
-
Unscored —CVE-2013-3431 Public exploit
Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages…
-
Unscored —
Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attack…
-
High —
Missing XML Validation in Apache Xerces2
XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u6…
-
Unscored —CVE-2013-4890 Public exploit
The DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial of service (daemon cra…
-
High —
Remote code execution due to insecure deserialization
ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat…
-
Unscored —CVE-2013-4882 Public exploit
Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (…
-
Unscored —CVE-2013-4883 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Exten…
-
Unscored —CVE-2012-3414 Public exploit
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before…
-
Unscored —CVE-2013-4011 Public exploit
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, …
-
Unscored —
The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has …
-
Unscored —
Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allo…
-
Unscored —
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to ca…
-
Critical 9.8
Code injection in Apache Struts
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
KEV Mar 25, 2022 -
Medium —
Open redirect in Apache Struts
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.
-
Unscored —CVE-2013-3803 Public exploit
Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1…