258011
|
- |
|
unrealircd
|
unrealircd
|
Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due t…
|
CWE-399
Resource Management Errors
|
CVE-2013-6413
|
2014-05-20 03:54 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258012
|
- |
|
mahara
|
mahara
|
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an e…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4431
|
2014-05-20 03:43 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258013
|
- |
|
mahara
|
mahara
|
Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML via the Host header to lib/…
|
CWE-79
Cross-site Scripting
|
CVE-2013-4430
|
2014-05-20 03:42 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258014
|
- |
|
mahara
|
mahara
|
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the (1) artefa…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4429
|
2014-05-20 03:40 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258015
|
- |
|
mahara
|
mahara
|
Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary folders (1) by leveraging an a…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4432
|
2014-05-20 03:40 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258016
|
- |
|
leon_weber
|
pyxtrlock
|
pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB library functions, which allows physically proximate attackers to gain access …
|
CWE-20
Improper Input Validation
|
CVE-2013-4427
|
2014-05-20 03:11 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258017
|
- |
|
leon_weber
|
pyxtrlock
|
pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash.
|
NVD-CWE-noinfo
|
CVE-2013-4426
|
2014-05-20 02:46 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258018
|
- |
|
quick_tabs_module_project
|
quicktabs
|
The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitiv…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4406
|
2014-05-20 02:10 |
2014-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258019
|
- |
|
apple
|
itunes
|
Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary u…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-1347
|
2014-05-20 01:52 |
2014-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258020
|
- |
|
florian_weber
|
spaces
|
The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the option to move to a new group, which causes t…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4498
|
2014-05-20 01:45 |
2014-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|