|
260221
|
- |
|
corporater
|
epm_suite
|
Cross-site request forgery (CSRF) vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwor…
|
CWE-352
Origin Validation Error
|
CVE-2013-3583
|
2013-08-29 21:58 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260222
|
- |
|
redhat
|
enterprise_virtualization
|
Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application Provisioning Tool (RHEV-APT) in the rhev-guest-tools-iso package 3.2 allows local users to gain privile…
|
CWE-399
Resource Management Errors
|
CVE-2013-2176
|
2013-08-29 21:51 |
2013-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260223
|
- |
|
zoneminder
|
zoneminder
|
includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packa…
|
NVD-CWE-noinfo
|
CVE-2013-0232
|
2013-08-29 15:46 |
2013-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260224
|
- |
|
rtomayko
|
rack-cach
|
The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified …
|
NVD-CWE-Other
|
CVE-2012-2671
|
2013-08-28 15:47 |
2012-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260225
|
- |
|
hp
|
intelligent_management_center
|
Stack-based buffer overflow in img.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-1848
|
2013-08-28 15:36 |
2011-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260226
|
- |
|
netartmedia
|
iboutique
|
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
|
CWE-89
SQL Injection
|
CVE-2010-5020
|
2013-08-28 15:31 |
2011-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260227
|
- |
|
greendesktiny
|
green_desktiny
|
SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2009-4456
|
2013-08-28 15:14 |
2009-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260228
|
- |
|
backup_manager
|
backup_manager
|
backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtai…
|
CWE-255
CWE-310
CWE-200
Credentials Management
Cryptographic Issues
Information Exposure
|
CVE-2007-4656
|
2013-08-28 14:37 |
2007-09-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260229
|
- |
|
netbsd
|
netbsd
|
Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an unknown impact. NOTE: …
|
NVD-CWE-Other
|
CVE-2007-1523
|
2013-08-28 14:28 |
2007-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260230
|
- |
|
bestpractical
|
rt
|
Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permissio…
|
CWE-255
Credentials Management
|
CVE-2012-4733
|
2013-08-28 02:16 |
2013-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
