258941
|
- |
|
cisco
|
ironport_encryption_appliance
|
Additional information can be found at:
http://www.secureworks.com/research/advisories/SWRX-2012-001/
|
CWE-79
Cross-site Scripting
|
CVE-2012-0340
|
2013-10-4 02:56 |
2012-02-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258942
|
- |
|
enea emerson
|
ose roc_800l_remote_terminal_unit roc_800_remote_terminal_unit dl_8000_remote_terminal_unit
|
The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote at…
|
CWE-94
Code Injection
|
CVE-2013-0689
|
2013-10-4 02:40 |
2013-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258943
|
- |
|
enea emerson
|
ose dl_8000_remote_terminal_unit roc_800l_remote_terminal_unit roc_800_remote_terminal_unit
|
The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM…
|
CWE-255
Credentials Management
|
CVE-2013-0694
|
2013-10-4 02:13 |
2013-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258944
|
- |
|
baramundi
|
management_suite
|
An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging …
|
CWE-255
Credentials Management
|
CVE-2013-3625
|
2013-10-4 02:01 |
2013-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258945
|
- |
|
cisco
|
unified_computing_system
|
The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug …
|
CWE-20
Improper Input Validation
|
CVE-2012-4109
|
2013-10-4 00:58 |
2013-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258946
|
- |
|
baramundi
|
management_suite
|
Baramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and (2) data storage, which allows remote attackers to obtain sensitive information by sniffing the netwo…
|
CWE-310
Cryptographic Issues
|
CVE-2013-3593
|
2013-10-4 00:25 |
2013-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258947
|
- |
|
cisco
|
unified_computing_system
|
The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka…
|
CWE-20
Improper Input Validation
|
CVE-2012-4102
|
2013-10-3 23:48 |
2013-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258948
|
- |
|
mozilla
|
firefox
|
Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS) attacks or obtain password or cookie information, by usin…
|
CWE-79
Cross-site Scripting
|
CVE-2013-1727
|
2013-10-3 12:38 |
2013-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258949
|
- |
|
mozilla
|
firefox
|
The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element.
|
CWE-200
Information Exposure
|
CVE-2013-1729
|
2013-10-3 12:38 |
2013-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258950
|
- |
|
mozilla
|
firefox
|
Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows attackers to execute arbitrary code via a Trojan horse .so file in a world-writabl…
|
CWE-20
Improper Input Validation
|
CVE-2013-1731
|
2013-10-3 12:38 |
2013-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|