CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2013-4090

CVE-2013-4090 concerns the Varnish HTTP cache before 3.0.4, due to an ACL bug in the access control logic. Affected component is the Varnish ACL handling in versions prior to 3.0.4. The practical impact is an integrity issue (I:H in CVSS v3.1) with potentially improper access control, as indicate...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2013-2097

CVE-2013-2097 affects ZPanel up to version 10.1.0, with remote command execution reportedly possible without authentication. Multiple sources corroborate that the issue involves ZPanel and a vulnerable component (pChart), enabling an attacker to read files or execute code on the server. The Red H...

CVE-2013-2097

ZPanel through 10.1.0 has Remote Command Execution...

CVE-2013-1938

CVE-2013-1938 affects Zimbra Collaboration Server’s aspell.php dictionary parameter. The vulnerability is an XSS in the aspell.php script where user-supplied input to the dictionary parameter is not properly sanitized, allowing injection of arbitrary HTML/JS into a user’s browser. Documented refe...

CVE-2013-2010

CVE-2013-2010 affects WordPress W3 Total Cache Plugin up to version 0.9.2.8, enabling a remote PHP code execution via crafted input. The root cause is improper handling of macros (e.g., mfunc) in the plugin, allowing arbitrary PHP code execution on the server. Exploitation activity is evidenced b...

CVE-2013-7381

CVE-2013-7381 affects libnotify before 1.0.4 when used with Node.js. The root cause is input passed to libnotify.notify allowing shell/command injection, enabling remote command execution. Affected component: libnotify (Node.js binding), version pre-1.0.4. Impact per sources: potential arbitrary ...

CVE-2013-7381

libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify...

CVE-2013-7378

scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands...

CVE-2013-7378

scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands...

CVE-2013-7378

scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands...

CVE-2013-7378

CVE-2013-7378 affects hubot-scripts: the email.coffee script in hubot-scripts (Node.js) prior to version 2.4.4 allows remote command execution due to a command-injection flaw in hubot-scripts/package/src/scripts/email.coffee. Impact is high (remote attacker could run arbitrary commands). Affected...

Format string

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

Design/Logic Flaw

The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...

Microsoft Excel 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4484265)

This host is missing an important security update according to Microsoft KB4484265 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Outlook 2013 Service Pack 1 Security Feature Bypass Vulnerability (KB4484156)

This host is missing an important security update according to Microsoft KB4484156 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2013-4225

The RESTful Web Services restws module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resource node" and "create page content" permissions or equivalen...

CVE-2013-4225

The RESTful Web Services (RESTWS) module for Drupal is vulnerable in versions 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 due to insufficient restriction of access to entity write operations. This allows remote authenticated users with permissions such as "access resource node" and "create ...