|
259861
|
- |
|
siemens
|
comos
|
Per: https://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf
AC:M for "Mitigating factors:
The attacker must have local access to the system as authentic…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-6840
|
2013-12-13 02:11 |
2013-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259862
|
- |
|
cisco
|
scientific_atlanta_dpc\/epc2100
scientific_atlanta_dpc\/epc2202
scientific_atlanta_dpc\/epc2203
scientific_atlanta_dpc\/epc2325
scientific_atlanta_dpc\/epc2425
scientific_atlanta_dpc\/…
|
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecifi…
|
CWE-79
Cross-site Scripting
|
CVE-2012-3047
|
2013-12-13 01:56 |
2013-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259863
|
- |
|
novell
|
suse_lifecycle_management_server
|
SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attackers to defeat intended cryptographic protection mechanisms b…
|
CWE-310
Cryptographic Issues
|
CVE-2013-3710
|
2013-12-13 00:18 |
2013-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259864
|
- |
|
enorth
|
webpublisher_cms
|
SQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter.
|
CWE-89
SQL Injection
|
CVE-2013-6985
|
2013-12-12 04:22 |
2013-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259865
|
- |
|
cmsmadesimple
|
cms_made_simple
|
Cross-site scripting (XSS) vulnerability in admin/editevent.php in CMS Made Simple (CMSMS) 1.11.9 allows remote authenticated users with the "Modify Events" permission to inject arbitrary web script …
|
CWE-79
Cross-site Scripting
|
CVE-2013-3929
|
2013-12-11 06:14 |
2013-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259866
|
- |
|
ffmpeg
|
ffmpeg
|
Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-4351
|
2013-12-11 02:04 |
2013-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259867
|
- |
|
djangoproject
|
django
|
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_…
|
CWE-22
Path Traversal
|
CVE-2013-4315
|
2013-12-10 15:05 |
2013-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259868
|
- |
|
debian
|
adequate
|
Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-6409
|
2013-12-10 05:52 |
2013-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259869
|
- |
|
twibright
|
links
|
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
|
CWE-189
Numeric Errors
|
CVE-2013-6050
|
2013-12-10 05:02 |
2013-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
259870
|
- |
|
supmua
|
sup
|
Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment.
|
CWE-94
Code Injection
|
CVE-2013-4478
|
2013-12-10 02:54 |
2013-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
