|
258201
|
- |
|
gnu
|
a2ps
|
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink atta…
|
CWE-59
Link Following
|
CVE-2001-1593
|
2014-05-1 10:20 |
2014-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258202
|
- |
|
apache
google
|
harmony
android
|
The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache …
|
CWE-310
Cryptographic Issues
|
CVE-2013-7372
|
2014-04-30 23:23 |
2014-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258203
|
- |
|
ubercart
|
ubercart
|
Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote at…
|
CWE-287
Improper Authentication
|
CVE-2013-7302
|
2014-04-30 23:04 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258204
|
- |
|
malcolm_nooning
|
pirpc
|
The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it …
|
CWE-94
Code Injection
|
CVE-2013-7284
|
2014-04-30 22:56 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258205
|
- |
|
gnome
|
gnome_display_manager
|
GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a …
|
NVD-CWE-noinfo
|
CVE-2013-7273
|
2014-04-30 22:32 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258206
|
- |
|
google
|
android
|
Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within mu…
|
CWE-200
Information Exposure
|
CVE-2013-7373
|
2014-04-30 21:57 |
2014-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258207
|
- |
|
simplemachines
|
simple_machines_forum
|
Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
|
CWE-20
Improper Input Validation
|
CVE-2013-7236
|
2014-04-30 20:21 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258208
|
- |
|
gnome
|
gnome-shell
|
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute ar…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-7221
|
2014-04-30 04:03 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258209
|
- |
|
gnome
|
gnome-shell
|
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus o…
|
NVD-CWE-Other
|
CVE-2013-7220
|
2014-04-30 03:53 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258210
|
- |
|
gnome
|
gnome-shell
|
Per: https://cwe.mitre.org/data/definitions/77.html
"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"
|
NVD-CWE-Other
|
CVE-2013-7220
|
2014-04-30 03:53 |
2014-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
