CVE-2013-1760

The CVE-2013-1760 entry refers to The Bug Genie before version 3.2.6, which is reported to have multiple XSS and HTML injection vulnerabilities. The connected documents consistently identify the affected product and version, and classify the issue as XSS/HTML injection without providing specific ...

CVE-2013-1607

CVE-2013-1607 affects the Ruby PDFKit gem prior to 0.5.3. The vulnerability arises from improper input validation/handling during PDF generation, allowing potential remote code execution. Affected component: PDFKit Ruby gem; root cause: parameter handling/validation flaw; impact: remote code exec...

CVE-2013-0517

IBM Sterling External Authentication Server (SEAS) is affected by CVE-2013-0517: an OS command can be executed via the Command Line Adapter when an administrator configures a system command. Impact: local attacker with admin privileges could run arbitrary OS commands, compromising confidentiality...

CVE-2013-0803

Vulnerability summary: PolarBear CMS 2.5 contains a PHP file upload flaw in upload.php that could let an attacker execute arbitrary code. The root cause is improper handling of uploaded files, enabling remote code execution without authentication. Availability of public details: Public advisories...

CVE-2013-1360

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...

CVE-2013-4535

The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...

BELL-CVE-2013-4535 CVE-2013-4535 does not affect BellSoft software

Bulletin has no description...

CVE-2013-1360

This CVE affects DELL SonicWALL GMS, Analyzer, UMA, and ViewPoint products. A crafted request to the SGMS interface (/sgms/) allows an unauthenticated remote attacker to bypass authentication and gain full administrative access to the web interface, potentially compromising all managed appliances...

CVE-2013-4535

QEMU's virtqueue_map_sg in hw/virtio/virtio.c (affected: before 1.7.2) allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read. Root cause is in virtqueue handling; impact is arbitrary code execution with local access. Remediati...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4267. Reason: This issue was MERGED into CVE-2013-4267 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2013-4267...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4267. Reason: This issue was MERGED into CVE-2013-4267 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2013-4267...

Description of the security update for SharePoint Foundation 2013: February 11, 2020

Description of the security update for SharePoint Foundation 2013: February 11, 2020 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint...

Description of the security update for Excel 2013: February 11, 2020

Description of the security update for Excel 2013: February 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not handle objects in memory correctly. To learn more about the vulnerability, see Microsof...

Description of the security update for Outlook 2013: February 11, 2020

Description of the security update for Outlook 2013: February 11, 2020 Summary This security update resolves a security feature bypass vulnerability that exists in Microsoft Outlook software if it incorrectly handles the parsing of URI formats. To learn more about the vulnerability, see Microsoft...

CVE-2013-4268

CVE-2013-4267 affects Ajaxeplorer prior to 5.0.1. It enables remote command execution through shell metacharacters in multiple parameters: (1) archive_name to the Power FS module, (2) file name to getTrustSizeOnFileSystem in the File System (Standard) module, and (3) revision in the Subversion Re...

CVE-2013-4268

...

CVE-2013-4269

...

CVE-2013-4269

CVE-2013-4269 is not the active entry; related data show the actual vulnerability details exist under CVE-2013-4267. Affected software: Ajaxeplorer before 5.0.1. Vulnerable components/calls (as described for CVE-2013-4267): shell metacharacter handling in the Power FS module (archive_name), in ge...

CVE-2013-4267

Ajaxeplorer prior to 5.0.1 is affected by CVE-2013-4267, enabling remote command execution via shell metacharacters in three parameters: (1) archive_name for the Power FS module, (2) a file name to getTrustSizeOnFileSystem in the File System (Standard) module, and (3) revision in the Subversion R...

CVE-2013-5945

CVE-2013-5945 affects D-Link DSR router series (DSR-150, DSR-150N, DSR-250/250N, DSR-500/500N, DSR-1000/1000N). Vulnerable component: login.authenticate (share/lua/5.1/teamf1lualib/login.lua) and captivePortal.lua; root cause is SQL injection via the Users.Password parameter. Impact: remote attac...