30833 matches found
CVE-2013-3725
IPB (Invision Power Board) versions up to 3.x are affected by CVE-2013-3725, with vulnerability described as an admin account takeover that leads to code execution. Affected component: admin/auth flow enabling unauthorized admin access, enabling remote code execution. Root cause not elaborated in...
CVE-2013-7286
CVE-2013-7286 affects MobileIron VSP < 5.9.1 and Sentry
CVE-2013-6236
IZON IP 2.0.2: hard-coded password vulnerability...
CVE-2013-1924
Commerce Skrill Formerly Moneybookers has an Access bypass vulnerability in all versions prior to 7.x-1.2...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-1938
Zimbra 2013 has XSS in aspell.php...
CVE-2013-2097
ZPanel through 10.1.0 has Remote Command Execution...
CVE-2013-3685
A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
Design/Logic Flaw
Zimbra 2013 has XSS in aspell.php...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-2637
CVE-2013-2637 describes a cross-site scripting (XSS) vulnerability in OTRS ITSM. The NVD/NVD-related entries state that an attacker could exploit an XSS via changes, workorder items, and FAQ articles, enabling a remote attacker to execute arbitrary code in affected systems. The vulnerability affe...
CVE-2013-6681
CVE-2013-6681 affects Tube Map Live Underground for Android prior to version 3.0.22. The vulnerability is information disclosure with partial confidentiality impact (CVSS2: 4.3; CVSS3.1: 5.9). Attack vector is Network with no authentication and no user interaction required per the provided metric...
CVE-2013-6236
IZON IP 2.0.2: hard-coded password vulnerability...
CVE-2013-6236
CVE-2013-6236 affects Stem Innovation IZON IP cameras (Firmware 2.0.2). The vulnerability arises from hard-coded credentials in the device’s Linux distribution and hidden web application, enabling unauthenticated access to the camera via Telnet/HTTP and exposing streams and configuration data. Po...
CVE-2013-3685
CVE-2013-3685 describes a local privilege-escalation via a race condition in Sprite Software’s spritebud daemon (on LG Android smartphones) affecting Spritebud 1.3.24/1.3.28 and Backup 2.5.4105/2.5.4108. The race condition could allow a local attacker to obtain root privileges. Publicly provided ...
CVE-2013-1924
The CVE-2013-1924 vulnerability affects the Commerce Skrill (Formerly Moneybookers) contributed module for Drupal, with an access bypass in the IPN processing that could allow forged notifications to be accepted. It affects all versions prior to 7.x-1.2; Drupal core is not affected. The fix is to...
CVE-2013-4395
CVE-2013-4395 affects Simple Machines Forum (SMF) up to version 2.0.5, with a cross-site scripting (XSS) vulnerability. The connected records confirm the product and vulnerability class but do not provide technical details such as vulnerable components, exploit vectors, affected configurations, r...
UBUNTU-CVE-2013-7381
libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify...
CVE-2013-3494
The CVE-2013-3494 entry affects UMPlayer 0.98, specifically the wintab32.dll component. The root cause is insufficient path restrictions when loading external libraries, enabling a local attacker to execute arbitrary code. The vulnerability aligns with a local attack vector and high impact (confi...