Archive
30 September 2013
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Unscored —CVE-2013-2218 Public exploit
Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1…
-
Unscored —CVE-2013-5697 Public exploit
SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote a…
-
Unscored —CVE-2013-4362 Public exploit
WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (…
-
Unscored —CVE-2013-5693 Public exploit
Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2013-5692 Public exploit
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include an…
-
Medium —CVE-2013-4378 Public exploit
Improper Neutralization of Input During Web Page Generation in JavaMelody
Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.
-
Unscored —CVE-2013-5961 Public exploit
Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attacker…
-
Unscored —
Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 …