13 December 2013

27 results · Feed

• Unscored —
  CVE-2013-7093

  SAP Network Interface Router (SAProuter) 39.3 SP4 allows remote attackers to bypass authentication and modify the confi…

  Dec 13, 2013
• Unscored —
  CVE-2013-7096

  Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via …

  Dec 13, 2013
• Unscored —
  CVE-2013-7095

  The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack v…

  Dec 13, 2013
• Unscored —
  CVE-2013-7094

  SQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows remote attackers to ex…

  Dec 13, 2013
• Unscored —
  CVE-2013-0348

  thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which all…

  Dec 13, 2013
• Unscored —
  CVE-2013-7091 Public exploit Scanner template EPSS 86%

  Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zi…

  Dec 13, 2013
• Unscored —
  CVE-2013-7050

  The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows re…

  devscripts Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-7092

  Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authe…

  Dec 13, 2013
• Unscored —
  CVE-2013-4567

  Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x …

  mediawiki Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-4568

  Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x …

  mediawiki Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-4569

  The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group cha…

  Dec 13, 2013
• Unscored —
  CVE-2013-6394

  Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for lo…

  Dec 13, 2013
• Unscored —
  CVE-2013-6957

  Cross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP allows remote attackers to …

  Dec 13, 2013
• Unscored —
  CVE-2013-6958

  Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allows remote …

  Dec 13, 2013
• Unscored —
  CVE-2013-6956

  Cross-site scripting (XSS) vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secu…

  Dec 13, 2013
• Unscored —
  CVE-2012-5394

  Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before…

  Dec 13, 2013
• Unscored —
  CVE-2013-7038

  The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive informat…

  libmicrohttpd Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-7039

  Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNE…

  libmicrohttpd Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-6359

  Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection …

  munin Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-6048

  The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a den…

  munin Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-6809

  Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (cr…

  Dec 13, 2013
• Unscored —
  CVE-2013-6400

  Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses …

  xen Debian
  Dec 13, 2013
• Medium —
  CVE-2013-5676 Public exploit

  Jenkins SonarQube Plugin Stores Passwords in Cleartext

  The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.

  org.jenkins-ci.plugins:sonar Maven
  Dec 13, 2013
• Unscored —
  CVE-2012-6151 Public exploit

  Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote a…

  net-snmp Debian
  Dec 13, 2013
• Unscored —
  CVE-2013-4988 Public exploit EPSS 67%

  Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCou…

  Dec 13, 2013
• Unscored —
  CVE-2013-6839 Public exploit

  SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary S…

  Dec 13, 2013
• Unscored —
  CVE-2013-6005

  Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web s…

  Dec 13, 2013