30833 matches found
CVE-2013-6360
CVE-2013-6360 concerns the TRENDnet TS-S402 device, which the connected documents indicate has a backdoor to enable TELNET. The NVD entry describes a backdoor mechanism, implying network-accessible risk with potential integrity impact. CVSS vectors (2.0/3.1) show a base medium to high severity, w...
CVE-2013-6362
Xerox ColorCube and WorkCenter devices (2013) are affected by a vulnerability due to hardcoded FTP and shell user accounts. The issue arises from embedded credentials that cannot be changed, enabling potential unauthorized access or abuse of these services on affected models. The connected record...
CVE-2013-6362
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...
CVE-2013-6927
CVE-2013-6927 : Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account. The available documents confirm the local-access impact but do not provide product version affected, root cause, or concrete remediation steps. No exploitation d...
CVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 is vulnerable to a heap overflow when MTU is increased on reconnection. Affected component: OpenConnect/GnuTLS stack prior to 5.02. Root cause: heap overflow due to MTU handling on reconnect. Impact is high in affected deployments per CVSS data. Reme...
CVE-2013-7173
CVE-2013-7173 affects Belkin n750 routers with a reported buffer overflow. Public data in the connected documents state the vulnerability exists in Belkin n750 devices and provide CVSS metrics (3.1, CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicating high impact to confidentiality, integrit...
CVE-2013-7173
Belkin n750 routers have a buffer overflow...
CVE-2013-7287
The CVE-2013-7287 entry concerns MobileIron VSP < 5.9.1 and Sentry
CVE-2013-1634
CVE-2013-1634 describes a denial-of-service condition in some Intel e1000e/82574L network controller motherboard implementations. The issue occurs when the device attempts to parse 32, 33, or 34 hex byte values at offset 0x47f, which can bring the NIC into a non-processing state. Intel’s follow-u...
CVE-2013-1401
Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...
CVE-2013-1400
CVE-2013-1400 affects Cardoza WordPress Poll plugin (34.05) / Cardoza WordPress Poll plugin 34.05. The vulnerability is in CWPPoll.js (viewPollResults and userlogs) where the poll_id pollid parameter is not sanitized, allowing remote SQL injections. This can enable manipulation of backend data or...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0342. Reason: This candidate is a duplicate of ID. Notes: All CVE users should reference CVE-2013-0342 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2013-0295
CVE-2013-0295 is rejected and not used; reference CVE-2013-0342 instead.
CVE-2013-6022
A Cross-Site Scripting XSS vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user execute arbitrary code...
CVE-2013-5106
A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19...
CVE-2013-6022
A Cross-Site Scripting XSS vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user execute arbitrary code...
CVE-2013-6022
The CVE-2013-6022 entry describes a cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 11.0 (and possibly earlier) exposed via the ZeroClipboard.swf file parameter id. The root cause is improper neutralization of input in web page generation (CWE-79), allowing a remote attacker t...
CVE-2013-5106
CVE-2013-5106 describes a Code Execution vulnerability in select.py when using python-mode 2012-12-19. The affected component is select.py within python-mode, and the root cause is not explicitly detailed beyond this file and version. The connected records reiterate the same description without p...