|
260591
|
- |
|
project-redcap
|
redcap
|
REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule.
|
CWE-20
Improper Input Validation
|
CVE-2012-6567
|
2013-06-17 20:38 |
2013-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260592
|
- |
|
softbank
willcom-inc
|
wi-fi_spot_configuration_software
mobile_wi-fi_router
nec_3g_handset
panasonic_3g_handset
samsung_3g_handset
sharp_3g_handset
wi-fi_application
android_smartphone
wisprclient<…
|
SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi router…
|
CWE-287
Improper Authentication
|
CVE-2013-2310
|
2013-06-17 13:00 |
2013-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260593
|
- |
|
ioserver
|
ioserver
|
The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service (infinite loop) or obtain unspecified control via crafted data to TCP port 20000.
|
CWE-20
Improper Input Validation
|
CVE-2013-2783
|
2013-06-17 13:00 |
2013-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260594
|
- |
|
adgjm
|
angel_browser
|
The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earlier for Android 3.0 through 4.0.3, and 1.76b and earlier fo…
|
CWE-200
Information Exposure
|
CVE-2013-3642
|
2013-06-17 13:00 |
2013-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260595
|
- |
|
adgjm
|
galapagos_browser
|
The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
|
CWE-200
Information Exposure
|
CVE-2013-3643
|
2013-06-17 13:00 |
2013-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260596
|
- |
|
siemens
|
simatic_pcs7
wincc
|
SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows remote attackers to e…
|
CWE-89
SQL Injection
|
CVE-2013-3957
|
2013-06-17 13:00 |
2013-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260597
|
- |
|
siemens
|
simatic_pcs7
wincc
|
The login implementation in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, has a hardcoded account, which makes it easier for …
|
CWE-255
Credentials Management
|
CVE-2013-3958
|
2013-06-17 13:00 |
2013-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260598
|
- |
|
siemens
|
simatic_pcs7
wincc
|
The Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, exhibits different behavior for NetBIOS user names depending on whether the use…
|
CWE-200
Information Exposure
|
CVE-2013-3959
|
2013-06-17 13:00 |
2013-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260599
|
- |
|
orchardproject
|
orchard
|
Cross-site scripting (XSS) vulnerability in the Orchard.Comments module in Orchard before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2013-3645
|
2013-06-15 00:12 |
2013-06-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260600
|
- |
|
hp
|
insight_diagnostics
|
hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/front…
|
CWE-20
Improper Input Validation
|
CVE-2013-3575
|
2013-06-15 00:00 |
2013-06-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
