Archive
1 October 2013
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Unscored —
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderM…
-
Unscored —
The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a…
-
Unscored —CVE-2013-3539 Public exploit
Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100…
-
Unscored —CVE-2013-3963 Public exploit
Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601H…
-
Unscored —CVE-2013-5745 Public exploit
The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8…
-
Unscored —
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt dur…
-
Unscored —CVE-2013-5572 Public exploit
Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console acce…