Archive
August 2013
Vulnerabilities first published in this month (UTC), newest first.
45 results · Clear filters · Feed
-
Unscored —CVE-2013-5664 Public exploit
Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS be…
-
High 8.8
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…
KEV Mar 3, 2022 -
Unscored —CVE-2013-2072 Public exploit
Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local adm…
-
Unscored —
Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID …
-
Unscored —
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to…
-
Unscored —CVE-2013-3597 Public exploit
servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords …
-
Unscored —CVE-2013-5578 Public exploit
Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows re…
-
Unscored —CVE-2012-6587 Public exploit
Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Software allows…
-
Unscored —CVE-2012-6584 Public exploit
Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2012-6586 Public exploit
Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2012-6585 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitra…
-
Unscored —CVE-2012-6589 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arb…
-
Unscored —CVE-2012-6588 Public exploit
SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2010-5289 Public exploit
Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail …
-
Unscored —CVE-2013-1662 Public exploit
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, all…
-
Unscored —CVE-2013-2299 Public exploit
Cross-site scripting (XSS) vulnerability in Advantech WebAccess (formerly BroadWin WebAccess) before 7.1 2013.05.30 all…
-
Unscored —CVE-2013-0526 Public exploit
ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avoc…
-
Unscored —CVE-2013-5317 Public exploit
Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web scr…
-
Unscored —CVE-2013-5321 Public exploit
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remo…
-
Unscored —CVE-2013-5316 Public exploit
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication o…
-
Unscored —CVE-2013-5318 Public exploit
SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang pa…
-
Medium —
Missing XML Validation in Apache CXF
The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) n…
-
Medium —CVE-2012-5575 Public exploit
Inadequate Encryption Strength in Apache CXF
Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force…
-
Unscored —CVE-2013-5314 Public exploit
Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allow…
-
Unscored —CVE-2013-5312 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbi…
-
Unscored —CVE-2013-5311 Public exploit
Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2013-4881 Public exploit
Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earli…
-
Unscored —
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensiti…
-
Unscored —CVE-2013-1942 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf)…
-
Unscored —CVE-2013-5120 Public exploit
SQL injection vulnerability in PHPFox before 3.6.0 (build4) allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2013-5121 Public exploit
SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-4879 Public exploit
SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to e…
-
Unscored —CVE-2013-4880 Public exploit
Cross-site scripting (XSS) vulnerability in core/admin/modules/developer/modules/views/add.php in BigTree CMS 4.0 RC2 a…
-
Unscored —CVE-2013-4759 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 f…
-
Unscored —CVE-2013-4147 Public exploit
Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attacke…
-
Unscored —CVE-2013-4789 Public exploit
SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordP…
-
Unscored —CVE-2013-4620 Public exploit
Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remo…
-
Unscored —
Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.