Archive
November 2013
Vulnerabilities first published in this month (UTC), newest first.
52 results · Clear filters · Feed
-
Unscored —CVE-2013-5694 Public exploit
SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute ar…
-
Unscored —CVE-2011-5267 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, a…
-
Unscored —
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authent…
-
Unscored —
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute ar…
-
Unscored —CVE-2013-6366 Public exploit
The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary co…
-
Unscored —CVE-2013-4348 Public exploit
The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to …
-
Unscored —CVE-2013-6114 Public exploit
Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a deni…
-
Unscored —
Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote a…
-
Unscored —
The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML…
-
Unscored —
NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.…
-
Unscored —CVE-2013-5977 Public exploit
Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for Word…
-
Medium —
Moodle Authenticated Spelling Binary Remote Code Execution
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.