260201
|
- |
|
gomlab
|
gom_player
|
Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-5715
|
2013-10-9 00:51 |
2013-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260202
|
- |
|
marketpress
|
backwpup_plugin
|
Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php.
|
CWE-79
Cross-site Scripting
|
CVE-2013-4626
|
2013-10-8 23:22 |
2013-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260203
|
- |
|
apple
|
iphone_os
|
Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by making a series of…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-5160
|
2013-10-8 06:04 |
2013-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260204
|
- |
|
apple
|
iphone_os
|
Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement, and open the Camera app or rea…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-5161
|
2013-10-8 05:53 |
2013-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260205
|
- |
|
cisco
|
ios
|
The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted TCP port-1723 packets, aka Bug ID C…
|
CWE-20
Improper Input Validation
|
CVE-2013-5481
|
2013-10-8 05:36 |
2013-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260206
|
- |
|
verizon
|
fios_actiontec_mi424wr-gen31_router_firmware fios_actiontec_mi424wr-gen31_router
|
Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication o…
|
CWE-352
Origin Validation Error
|
CVE-2013-0126
|
2013-10-8 05:31 |
2013-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260207
|
- |
|
cisco
|
ios ios_xe
|
Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload)…
|
CWE-399
Resource Management Errors
|
CVE-2013-5473
|
2013-10-8 05:26 |
2013-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260208
|
- |
|
graphite_project
|
graphite
|
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a …
|
CWE-94
Code Injection
|
CVE-2013-5093
|
2013-10-8 05:25 |
2013-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260209
|
- |
|
cisco
|
ios
|
The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attackers to cause a denial of service (device reload or …
|
CWE-20
Improper Input Validation
|
CVE-2013-5476
|
2013-10-8 05:18 |
2013-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260210
|
- |
|
graphite_project
|
graphite
|
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) st…
|
CWE-94
Code Injection
|
CVE-2013-5942
|
2013-10-8 05:17 |
2013-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|