|
260971
|
- |
|
cisco
|
ios
ios_xe
asa_5500
pix_firewall_software
fwsm
nx-os
staros
|
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly valid…
|
NVD-CWE-noinfo
|
CVE-2013-0149
|
2013-08-14 02:18 |
2013-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260972
|
- |
|
ruby-lang
|
ruby
|
The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by ch…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-1005
|
2013-08-14 02:00 |
2011-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260973
|
- |
|
o-dyn
|
collabtive
|
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to ma…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5284
|
2013-08-14 01:58 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260974
|
- |
|
open-emr
|
openemr
|
Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) start or (2) end parameter to interface/reports/custom_report_ra…
|
CWE-89
SQL Injection
|
CVE-2013-4619
|
2013-08-13 23:05 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260975
|
- |
|
open-emr
|
openemr
|
Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the note parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2013-4620
|
2013-08-13 22:56 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260976
|
- |
|
silverstripe
|
silverstripe
|
Multiple cross-site scripting (XSS) vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName,…
|
CWE-79
Cross-site Scripting
|
CVE-2012-6458
|
2013-08-13 22:10 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260977
|
- |
|
selinc
|
sel-2241
sel-3505
sel-3530
sel-3530-4
|
Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow physically proximate attackers to cause a denial of service (infinite loop) via crafted input over…
|
CWE-20
Improper Input Validation
|
CVE-2013-2798
|
2013-08-13 05:23 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260978
|
- |
|
schneider-electric
|
citectscada
powerlogic_scada
vijeo_citect
|
Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet se…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-2796
|
2013-08-13 05:21 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260979
|
- |
|
schneider-electric
|
citectscada
powerlogic_scada
vijeo_citect
|
Per: http://ics-cert.us-cert.gov/advisories/ICSA-13-217-02
"This vulnerability is not exploitable remotely."
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-2796
|
2013-08-13 05:21 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
260980
|
- |
|
selinc
|
sel-2241
sel-3505
sel-3530
sel-3530-4
|
Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service (infinite loop) via a crafted DNP3 TCP packet.
|
CWE-20
Improper Input Validation
|
CVE-2013-2792
|
2013-08-13 05:00 |
2013-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
