260101
|
- |
|
apple
|
mac_os_x
|
Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restric…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-1031
|
2013-09-20 00:02 |
2013-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260102
|
- |
|
alienwp
|
hatch
|
Cross-site scripting (XSS) vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any artic…
|
CWE-79
Cross-site Scripting
|
CVE-2013-4138
|
2013-09-19 10:10 |
2013-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260103
|
- |
|
emc
|
rsa_archer_egrc
|
Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2013-3277
|
2013-09-19 10:03 |
2013-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260104
|
- |
|
videowhisper
|
live_streaming_integration_plugin
|
Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject…
|
CWE-79
Cross-site Scripting
|
CVE-2013-5714
|
2013-09-19 09:31 |
2013-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260105
|
- |
|
eucalyptus
|
eustore
|
Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 2425352071, and EMI 1347115203, which allows local users to gain privileges via unspe…
|
CWE-255
Credentials Management
|
CVE-2013-2297
|
2013-09-19 05:11 |
2013-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260106
|
- |
|
eucalyptus
|
eucalyptus
|
Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authentica…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-2296
|
2013-09-19 04:52 |
2013-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260107
|
- |
|
eucalyptus
|
eucalyptus
|
Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-lo…
|
CWE-399
Resource Management Errors
|
CVE-2012-4067
|
2013-09-19 04:51 |
2013-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260108
|
- |
|
subnet
|
substation_server
|
The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a denial of service (unhandled exception and process crash) via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2013-2788
|
2013-09-19 04:49 |
2013-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260109
|
- |
|
eucalyptus
|
eucalyptus
|
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
|
CWE-200
Information Exposure
|
CVE-2013-4766
|
2013-09-19 01:54 |
2013-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260110
|
- |
|
apple
|
airport_base_station_firmware
|
Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths, which allows remote attackers to cause a denial of service (device crash) by associating with the ac…
|
CWE-189
Numeric Errors
|
CVE-2013-5132
|
2013-09-19 00:30 |
2013-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|