260111
|
- |
|
apple
|
mac_os_x
|
Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-1033
|
2013-09-18 22:59 |
2013-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260112
|
- |
|
apple
|
mac_os_x
|
The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service (panic) via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser.
|
CWE-20
Improper Input Validation
|
CVE-2013-1029
|
2013-09-18 22:56 |
2013-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260113
|
- |
|
apple
|
mac_os_x
|
mdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process.
|
CWE-200
Information Exposure
|
CVE-2013-1030
|
2013-09-18 22:54 |
2013-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260114
|
- |
|
apple
|
mac_os_x
|
Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote attackers to execute…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-1027
|
2013-09-18 22:41 |
2013-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260115
|
- |
|
ni
|
labview labwindows measurementstudio teststand
|
Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products all…
|
CWE-22
Path Traversal
|
CVE-2013-5022
|
2013-09-18 12:30 |
2013-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260116
|
- |
|
ni
|
lookout
|
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download o…
|
NVD-CWE-noinfo
|
CVE-2013-5026
|
2013-09-18 12:30 |
2013-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260117
|
- |
|
juniper
|
ive_os
|
Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3…
|
CWE-79
Cross-site Scripting
|
CVE-2013-5649
|
2013-09-18 12:30 |
2013-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260118
|
- |
|
imagemagick
|
imagemagick
|
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF i…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-4298
|
2013-09-18 12:29 |
2013-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260119
|
- |
|
apple
|
safari iphone_os
|
Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Jav…
|
CWE-362
Race Condition
|
CVE-2012-3748
|
2013-09-18 12:22 |
2012-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260120
|
- |
|
dahuasecurity
|
dvr0404hd-a dvr0404hd-l dvr0404hd-s dvr0404hd-u dvr0404hf-a-e dvr0404hf-al-e dvr0404hf-s-e dvr0404hf-u-e dvr0804 dvr0804hd-l dvr0804hd-s dvr0804hf-a-e dvr0804hf-al…
|
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.
|
CWE-255
Credentials Management
|
CVE-2013-3615
|
2013-09-18 03:37 |
2013-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|