Skip to content
OpenAdvisories

Archive

30 December 2013

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2013-7209 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attac…

  • Unscored —
    CVE-2013-7233 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPr…

  • Unscored —
    CVE-2013-4858 Public exploit EPSS 13%

    Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service (applic…

  • Unscored —
    CVE-2013-5038 Public exploit

    The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP …

  • Unscored —
    CVE-2013-5219 Public exploit

    Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2013-5220 Public exploit

    goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device…

  • Unscored —
    CVE-2013-5218 Public exploit

    Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to injec…

  • Unscored —
    CVE-2013-5039 Public exploit

    Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.…

  • Unscored —
    CVE-2013-5037 Public exploit

    The HOT HOTBOX router with software 2.1.11 has a default WPS PIN of 12345670, which makes it easier for remote attacker…