257481
|
- |
|
emc
|
replication_manager
|
Per: http://cwe.mitre.org/data/definitions/428.html
"CWE-428: Unquoted Search Path or Element"
|
NVD-CWE-Other
|
CVE-2013-6182
|
2014-01-8 13:42 |
2013-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257482
|
- |
|
hp
|
operations_orchestration
|
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2013-6191
|
2014-01-8 13:42 |
2013-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257483
|
- |
|
hp
|
operations_orchestration
|
Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
|
CWE-352
Origin Validation Error
|
CVE-2013-6192
|
2014-01-8 13:42 |
2013-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257484
|
- |
|
hp
|
color_laserjet_cm1312nfi_multifunction_printer color_laserjet_cm2320n_multifunction_printer color_laserjet_cp1515 color_laserjet_cp1518 color_laserjet_cp2025_printer color_laserjet_cp5…
|
Unspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw, CP1*, M121*, M1536dnf, and P1*; Color LaserJet CM* and CP*; and TopShot LaserJet Pro M275 printers al…
|
NVD-CWE-noinfo
|
CVE-2013-6193
|
2014-01-8 13:42 |
2013-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257485
|
- |
|
hp
|
system_management_homepage
|
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.
|
CWE-78
OS Command
|
CVE-2013-3576
|
2014-01-8 13:39 |
2013-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257486
|
- |
|
openstack
|
folsom grizzly havana
|
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by cr…
|
CWE-399
Resource Management Errors
|
CVE-2013-2096
|
2014-01-8 13:37 |
2013-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257487
|
- |
|
mini-stream
|
castripper
|
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long URL in the [playlist] section in a .pls file, a different vector than CVE-20…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-5137
|
2014-01-7 11:53 |
2014-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257488
|
- |
|
juniper
|
ive_os
|
Cross-site scripting (XSS) vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4…
|
CWE-79
Cross-site Scripting
|
CVE-2013-6956
|
2014-01-4 13:51 |
2013-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257489
|
- |
|
juniper
|
idp250 idp75 idp800 idp8200
|
Cross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web serve…
|
CWE-79
Cross-site Scripting
|
CVE-2013-6957
|
2014-01-4 13:51 |
2013-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257490
|
- |
|
juniper
|
screenos netscreen-5200 netscreen-5400
|
Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allows remote attackers to cause a denial of service via a crafted packet.
|
NVD-CWE-noinfo
|
CVE-2013-6958
|
2014-01-4 13:51 |
2013-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|