CVE-2013-4521

CVE-2013-4521 affects the RichFaces deserialization path in Nuxeo Platform (versions 5.6.0 before HF27 and 5.8.0 before HF-01). The vulnerability arises because the implementation does not restrict which classes’ deserialization methods can be called, enabling a remote attacker to execute arbitra...

CVE-2013-4572

The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-Control header to cache session cookies when a user is autocreated, which allows remote attackers to authenticate as the created user...

CVE-2013-4572

The CVE-2013-4572 issue affects MediaWiki's CentralNotice extension and is caused by an incorrect Cache-Control header configuration that caches session cookies when a user is autocreated. Affected versions are MediaWiki CentralNotice before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3....

CVE-2013-4166

The CVE-2013-4166 issue affects GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier, where the function gpg_ctx_add_recipient in camel/camel-gpg-context.c does not correctly select the GPG key for email encryption. This could cause emails to be encrypted with the wrong k...

CVE-2013-2680

Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information...

CVE-2013-2682

CVE-2013-2682 affects Cisco Linksys E4200, firmware 1.0.05 Build 7. It describes a Clickjacking vulnerability that could allow remote attackers to obtain sensitive information. The provided connected documents confirm the affected product and vulnerability type, but there are no explicit remediat...

CVE-2013-2681

CVE-2013-2681 affects Cisco Linksys E4200 devices running firmware 1.0.05 Build 7, describing a Security Bypass Vulnerability that could allow remote attackers to gain unauthorized access. The connected documents consistently reference the same device and firmware context, noting a remote-access ...

CVE-2013-2680

Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information...

CVE-2013-5989

CVE-2013-5989 is rejected/not used; reference CVE-2011-4969 instead.

CVE-2013-5989

...

CVE-2013-2675

CVE-2013-2675 affects Brother MFC-9970CDW devices running Firmware L. The vulnerability is described as a Frameable response (Clickjacking) that could allow remote attackers to obtain sensitive information. Public materials in the provided documents identify the affected product and vulnerability...

CVE-2013-0507

CVE-2013-0507 affects IBM InfoSphere Information Server (versions 8.1, 8.5, 8.7, 9.1). The root cause is that the session identifier is not updated after successful authentication, enabling potential session fixation. The IBM Security Bulletin lists the affected platforms and versions, noting tha...

Security Bulletin: Multiple Vulnerabilities in Apache Commons Affect IBM Sterling B2B Integrator (CVE-2016-3092, CVE-2014-0050, CVE-2013-0248)

Summary Multiple vulnerabilities in Apache Commons exists in IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file upload requests, an...

Security Bulletin: WebSphere Application Server - Oracle CPU shipped with Rational Application Developer for WebSphere Software June 2013 (CVE-2013-1571)

Summary The IBM WebSphere Application Server shipped in Rational Application Developer for WebSphere Software includes an IBM Java SDK that is based on the Oracle JDK. Oracle has released June 2013 critical patch updates CPU which contain security vulnerability fixes and the IBM Java SDK has been...

CVE-2013-7055

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

CVE-2013-7053

D-Link DIR-100 4.03B07: cli.cgi CSRF...

CVE-2013-7052

D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...

CVE-2013-2678

CVE-2013-2678 affects Cisco Linksys E4200 devices running firmware 1.0.05 Build 7. The Local File Include vulnerability in the apply.cgi script (submit_type parameter) could allow remote attackers to obtain sensitive information or execute arbitrary code. Public references describe XSS/LFI vector...

CVE-2013-2676

CVE-2013-2676 affects Brother MFC-9970CDW with firmware L 1.10 (and related versions). The vulnerability is an information-disclosure issue that allows remote attackers to view private IP addresses and other sensitive information, impacting confidentiality. The NVD notes a CVSS2 base score of 5.0...

CVE-2013-7055

D-Link DIR-100 vulnerable on firmware 4.03B07 (hardware rev D1) to an information disclosure issue affecting PPTP and PoE data (CVE-2013-7055). This vulnerability is network-facing with risk of exposing sensitive information; vendor released a patched firmware (4.03B13) addressing the information...