Skip to content
OpenAdvisories

Archive

12 December 2013

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High —

    sprout Arbitrary Code Execution vulnerability

    The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.

  • High 7.3
    CVE-2013-7030 Public exploit

    The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sen…