|
258231
|
- |
|
ubercart
|
ubercart
|
Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote at…
|
CWE-287
Improper Authentication
|
CVE-2013-7302
|
2014-04-30 23:04 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258232
|
- |
|
malcolm_nooning
|
pirpc
|
The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it …
|
CWE-94
Code Injection
|
CVE-2013-7284
|
2014-04-30 22:56 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258233
|
- |
|
gnome
|
gnome_display_manager
|
GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a …
|
NVD-CWE-noinfo
|
CVE-2013-7273
|
2014-04-30 22:32 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258234
|
- |
|
google
|
android
|
Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within mu…
|
CWE-200
Information Exposure
|
CVE-2013-7373
|
2014-04-30 21:57 |
2014-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258235
|
- |
|
simplemachines
|
simple_machines_forum
|
Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
|
CWE-20
Improper Input Validation
|
CVE-2013-7236
|
2014-04-30 20:21 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258236
|
- |
|
gnome
|
gnome-shell
|
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute ar…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-7221
|
2014-04-30 04:03 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258237
|
- |
|
gnome
|
gnome-shell
|
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus o…
|
NVD-CWE-Other
|
CVE-2013-7220
|
2014-04-30 03:53 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258238
|
- |
|
gnome
|
gnome-shell
|
Per: https://cwe.mitre.org/data/definitions/77.html
"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"
|
NVD-CWE-Other
|
CVE-2013-7220
|
2014-04-30 03:53 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258239
|
- |
|
phusion
|
juvia
|
Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cook…
|
CWE-255
Credentials Management
|
CVE-2013-7134
|
2014-04-30 03:13 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258240
|
- |
|
basespace_ruby_sdk_project
|
basespace_ruby_sdk
|
The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to…
|
CWE-200
Information Exposure
|
CVE-2013-7111
|
2014-04-30 02:59 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
