259461
|
- |
|
cisco
|
wireless_lan_controller
|
The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, which allows remote authenticated users to cause a denial of service via a crafte…
|
CWE-20
Improper Input Validation
|
CVE-2013-6684
|
2013-11-15 04:31 |
2013-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259462
|
- |
|
justsystems
|
ichitaro_pro ichitaro_portable_with_oreplug ichitaro ichitaro_viewer
|
Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; I…
|
NVD-CWE-noinfo
|
CVE-2013-5990
|
2013-11-15 02:46 |
2013-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259463
|
- |
|
cisco
|
ios content_services_gateway
|
Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restri…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-5552
|
2013-11-14 22:32 |
2013-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259464
|
- |
|
cisco
|
ios content_services_gateway
|
Additional versions CISCO IOS are vulnerable per
http://tools.cisco.com/security/center/viewAlert.x?alertId=31715
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-5552
|
2013-11-14 22:32 |
2013-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259465
|
- |
|
qualcomm
|
quic_mobile_station_modem_kernel
|
goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly…
|
CWE-20
Improper Input Validation
|
CVE-2013-6122
|
2013-11-14 04:53 |
2013-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259466
|
- |
|
silverstripe
|
silverstripe
|
security/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which allows remote or local attackers to obtain sensitive information by reading web-server access logs, web…
|
CWE-200
Information Exposure
|
CVE-2013-6789
|
2013-11-14 04:45 |
2013-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259467
|
- |
|
tapbots
|
tweetbot
|
Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows remote attackers to automatically force the user to perform un…
|
CWE-352
Origin Validation Error
|
CVE-2013-5726
|
2013-11-14 00:49 |
2013-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259468
|
- |
|
silverstripe
|
silverstripe
|
security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote attackers to conduct phishing attacks without detection by the victim.
|
CWE-20
Improper Input Validation
|
CVE-2013-2653
|
2013-11-13 23:33 |
2013-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259469
|
- |
|
cisco
|
telepresence_vx_clinical_assistant
|
The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access…
|
CWE-255
Credentials Management
|
CVE-2013-5558
|
2013-11-9 03:43 |
2013-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
259470
|
- |
|
cisco
|
wide_area_application_services_mobile
|
Directory traversal vulnerability in the web-management interface in the server in Cisco Wide Area Application Services (WAAS) Mobile before 3.5.5 allows remote attackers to upload and execute arbitr…
|
CWE-22
Path Traversal
|
CVE-2013-5554
|
2013-11-9 03:24 |
2013-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|