|
260391
|
- |
|
cotonti
|
cotonti_siena
|
SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php.
|
CWE-89
SQL Injection
|
CVE-2013-4789
|
2013-08-14 03:45 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260392
|
- |
|
ioserver
|
ioserver
|
The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service (infinite loop) via crafted DNP3 packets to TCP port 20000.
|
CWE-20
Improper Input Validation
|
CVE-2013-2790
|
2013-08-14 03:39 |
2013-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260393
|
- |
|
wordpress
|
wordpress
|
The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) issue, a similar vuln…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-2199
|
2013-08-14 02:21 |
2013-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260394
|
- |
|
wordpress
|
wordpress
|
WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspeci…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-2200
|
2013-08-14 02:21 |
2013-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260395
|
- |
|
tinymce
wordpress
|
media
wordpress
|
moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a # (pound sign) character during extracti…
|
CWE-20
Improper Input Validation
|
CVE-2013-2204
|
2013-08-14 02:21 |
2013-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260396
|
- |
|
cisco
|
ios
ios_xe
asa_5500
pix_firewall_software
fwsm
nx-os
staros
|
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly valid…
|
NVD-CWE-noinfo
|
CVE-2013-0149
|
2013-08-14 02:18 |
2013-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260397
|
- |
|
ruby-lang
|
ruby
|
The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by ch…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-1005
|
2013-08-14 02:00 |
2011-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260398
|
- |
|
o-dyn
|
collabtive
|
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to ma…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5284
|
2013-08-14 01:58 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260399
|
- |
|
open-emr
|
openemr
|
Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) start or (2) end parameter to interface/reports/custom_report_ra…
|
CWE-89
SQL Injection
|
CVE-2013-4619
|
2013-08-13 23:05 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260400
|
- |
|
open-emr
|
openemr
|
Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the note parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2013-4620
|
2013-08-13 22:56 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
