19 November 2013

29 results · Feed

• Unscored —
  CVE-2013-4560

  Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentati…

  lighttpd Debian
  Nov 19, 2013
• Unscored —
  CVE-2013-4487

  Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.…

  Nov 19, 2013
• Unscored —
  CVE-2013-4495

  The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resourc…

  Nov 19, 2013
• Unscored —
  CVE-2013-4386

  Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attac…

  Nov 19, 2013
• Unscored —
  CVE-2013-4466

  Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x b…

  Nov 19, 2013
• Unscored —
  CVE-2013-4559 EPSS 11%

  lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which…

  lighttpd Debian
  Nov 19, 2013
• Unscored —
  CVE-2013-6817

  Heap-based buffer overflow in SAP Network Interface Router (SAProuter) 7.30 allows remote attackers to cause a denial o…

  Nov 19, 2013
• Unscored —
  CVE-2013-6819

  Cross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arb…

  Nov 19, 2013
• Unscored —
  CVE-2013-6814

  The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sit…

  Nov 19, 2013
• Unscored —
  CVE-2013-6816

  Multiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2) DataCollector servlets in SAP Ne…

  Nov 19, 2013
• Unscored —
  CVE-2013-6818

  SAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended access restrictions v…

  Nov 19, 2013
• Unscored —
  CVE-2013-6823

  GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors.

  Nov 19, 2013
• Unscored —
  CVE-2013-6815

  The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows rem…

  Nov 19, 2013
• Unscored —
  CVE-2013-6822

  GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML Exter…

  Nov 19, 2013
• Unscored —
  CVE-2013-6826 Public exploit

  cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate t…

  Nov 19, 2013
• Unscored —
  CVE-2013-6821

  Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read a…

  Nov 19, 2013
• Unscored —
  CVE-2013-6820

  Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers t…

  Nov 19, 2013
• Unscored —
  CVE-2013-4579 Public exploit EPSS 10%

  The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12…

  linux Debian
  Nov 19, 2013
• Unscored —
  CVE-2013-4591

  Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows lo…

  linux Debian
  Nov 19, 2013
• Unscored —
  CVE-2013-4507

  Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attack…

  Nov 19, 2013
• Unscored —
  CVE-2013-4588

  Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_…

  Nov 19, 2013
• Unscored —
  CVE-2013-4563

  The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offlo…

  linux Debian
  Nov 19, 2013
• Unscored —
  CVE-2013-4592

  Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local …

  linux Debian
  Nov 19, 2013
• Unscored —
  CVE-2013-6074

  Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-…

  Nov 19, 2013
• High 8.8
  CVE-2013-6282 Exploited Public exploit EPSS 40%

  The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

  linux Debian
  Nov 19, 2013

  KEV Sep 15, 2022
• Unscored —
  CVE-2013-3095 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05…

  Nov 19, 2013
• Unscored —
  CVE-2013-5215

  Cross-site scripting (XSS) vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows r…

  Nov 19, 2013
• Unscored —
  CVE-2013-5966

  Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web …

  Nov 19, 2013
• Unscored —
  CVE-2013-5730 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remo…

  Nov 19, 2013