15 November 2013

22 results · Feed

• Unscored —
  CVE-2013-0741

  Cross-site scripting (XSS) vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS a…

  Nov 15, 2013
• Unscored —
  CVE-2013-4519

  Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow r…

  Nov 15, 2013
• Unscored —
  CVE-2013-6631

  Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC,…

  Nov 15, 2013
• Unscored —
  CVE-2013-6042 Public exploit

  Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo befo…

  Nov 15, 2013
• Unscored —
  CVE-2013-6797 Public exploit

  Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin b…

  Nov 15, 2013
• Unscored —
  CVE-2013-6629

  The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome befo…

  libjpeg-turbo Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-6630

  The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and oth…

  libjpeg-turbo Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-2271 Public exploit

  The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers…

  Nov 15, 2013
• Medium 5.4
  CVE-2013-5223 Exploited Public exploit EPSS 51%

  Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated us…

  Nov 15, 2013

  KEV Mar 25, 2022
• Unscored —
  CVE-2013-1057

  Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitra…

  Nov 15, 2013
• Unscored —
  CVE-2013-4555

  Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attacke…

  spip Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-4480

  Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satell…

  Nov 15, 2013
• Unscored —
  CVE-2013-4557 Public exploit EPSS 25%

  The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, al…

  spip Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-4425

  The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "S…

  Nov 15, 2013
• High 7.5
  CVE-2013-4510

  Tryton Directory Traversal vulnerability

  Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

  trytond tryton tryton-client Debian PyPI
  Nov 15, 2013
• Unscored —
  CVE-2013-4551

  Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUN…

  xen Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-4556

  Cross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php) in SPIP before 2.1.24…

  spip Debian
  Nov 15, 2013
• Medium —
  CVE-2013-4204

  Improper Neutralization of Input During Web Page Generation in Google Web Toolkit

  Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  com.google.gwt:gwt Maven
  Nov 15, 2013
• Unscored —
  CVE-2013-2031

  MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks,…

  mediawiki Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-2061

  The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attacker…

  openvpn Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-2114

  Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.…

  mediawiki Debian
  Nov 15, 2013
• Unscored —
  CVE-2013-2032

  MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using bo…

  mediawiki Debian
  Nov 15, 2013