257731
|
- |
|
olat
|
olat
|
Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote attackers to inject arbitrary web script or HTML via the (1) event name or (2) d…
|
CWE-79
Cross-site Scripting
|
CVE-2013-6793
|
2013-11-22 02:57 |
2013-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257732
|
- |
|
olat
|
olat
|
Cross-site scripting (XSS) vulnerability in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allows remote attackers to inject arbitrary web script or HTML via the Location field. NOTE: the proven…
|
CWE-79
Cross-site Scripting
|
CVE-2013-6794
|
2013-11-22 02:55 |
2013-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257733
|
- |
|
tylertech
|
taxweb
|
Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to hijack the authentication of arbitrary users for requests that change a p…
|
CWE-352
Origin Validation Error
|
CVE-2013-6018
|
2013-11-22 02:54 |
2013-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257734
|
- |
|
tylertech
|
taxweb
|
Cross-site scripting (XSS) vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to inject arbitrary web script or HTML via the accountNum parameter to an unspecified component.
|
CWE-79
Cross-site Scripting
|
CVE-2013-6019
|
2013-11-22 02:54 |
2013-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257735
|
- |
|
tylertech
|
taxweb
|
passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-recovery requests depending on whether the user account exists, which allows remot…
|
CWE-200
Information Exposure
|
CVE-2013-6020
|
2013-11-22 02:54 |
2013-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257736
|
- |
|
canonical
|
ubuntu_linux maas
|
Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current wo…
|
CWE-20
Improper Input Validation
|
CVE-2013-1057
|
2013-11-22 02:50 |
2013-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257737
|
- |
|
tylertech
|
taxweb
|
The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obtain sensitive query-structure information via an invalid search request, a differ…
|
CWE-200
Information Exposure
|
CVE-2013-6285
|
2013-11-22 02:50 |
2013-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257738
|
- |
|
mediawiki
|
mediawiki
|
Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an …
|
NVD-CWE-Other
|
CVE-2013-2114
|
2013-11-22 02:32 |
2013-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257739
|
- |
|
mediawiki
|
mediawiki
|
CWE-434: Unrestricted Upload of File with Dangerous Type per http://cwe.mitre.org/data/definitions/434.html
|
NVD-CWE-Other
|
CVE-2013-2114
|
2013-11-22 02:32 |
2013-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257740
|
- |
|
gnu
|
gnutls
|
Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of service (memory corruptio…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-4466
|
2013-11-22 02:06 |
2013-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|