259261
|
- |
|
autotrace_project
|
autotrace
|
Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the hea…
|
CWE-189
Numeric Errors
|
CVE-2013-1953
|
2013-12-13 14:14 |
2013-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259262
|
- |
|
novell
|
zenworks_configuration_management
|
The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows remote attackers to cond…
|
CWE-287
Improper Authentication
|
CVE-2013-1080
|
2013-12-13 14:12 |
2013-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259263
|
- |
|
mozilla
|
bugzilla
|
Cross-site scripting (XSS) vulnerability in show_bug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0.x before 4.0.10, 4.1.x and 4.2.x before 4.2.5, and 4.3.x and 4.4.x before 4.4rc2 allows remote attack…
|
CWE-79
Cross-site Scripting
|
CVE-2013-0785
|
2013-12-13 14:11 |
2013-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259264
|
- |
|
mozilla
|
bugzilla
|
The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 generates different error messages for invalid product queries depending on whet…
|
CWE-200
Information Exposure
|
CVE-2013-0786
|
2013-12-13 14:11 |
2013-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259265
|
- |
|
moinmo
|
moinmoin
|
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated us…
|
NVD-CWE-Other
|
CVE-2012-6081
|
2013-12-13 14:08 |
2013-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259266
|
- |
|
moinmo
|
moinmoin
|
Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type'
|
NVD-CWE-Other
|
CVE-2012-6081
|
2013-12-13 14:08 |
2013-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259267
|
- |
|
mozilla
|
bugzilla
|
Cross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value …
|
CWE-79
Cross-site Scripting
|
CVE-2012-4189
|
2013-12-13 14:04 |
2012-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259268
|
- |
|
mozilla
|
bugzilla
|
The User.get method in Bugzilla/WebService/User.pm in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1 has a different outcome for a groups reque…
|
CWE-200
Information Exposure
|
CVE-2012-4198
|
2013-12-13 14:04 |
2012-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259269
|
- |
|
gnu
|
emacs
|
lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remot…
|
NVD-CWE-noinfo
|
CVE-2012-3479
|
2013-12-13 14:03 |
2012-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259270
|
- |
|
google
|
tunnelblick
|
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via…
|
CWE-20
Improper Input Validation
|
CVE-2012-3485
|
2013-12-13 14:03 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|