CVE-2013-7055

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

CVE-2013-7054

CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...

CVE-2013-7053

CVE-2013-7053 concerns a CSRF vulnerability in the CLI CGI endpoint (cli.cgi) of the D-Link DIR-100 router with firmware 4.03B07. The intrinsic cause is cross-site request forgery to that endpoint, enabling an attacker to induce state-changing requests without user interaction. Public references ...

CVE-2013-7052

D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...

CVE-2013-7052

CVE-2013-7052 affects D-Link DIR-100 with firmware 4.03B07, where an error in the cliget.cgi script enables a security bypass. The vulnerability is network-exposed, requires no authentication, and can grant elevated access due to improper validation. Red Hat/NVD/OpenVAS details align on the vulne...

CVE-2013-7051

CVE-2013-7051 affects D-Link DIR-100 with firmware 4.03B07. The issue is a security bypass in the cli.cgi module caused by failure to check authentication parameters, enabling unauthorized access through the CLI path. Public references describe multiple vulnerabilities for this device (CVE-2013-7...

CVE-2013-7051

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

CVE-2013-1422

webcalendar before 1.2.7 shows the reason for a failed login e.g., "no such user"...

CVE-2013-1422

CVE-2013-1422 affects webCalendar (WebCalendar) prior to version 1.2.7. The flaw is that failed-login responses leak the reason (e.g., “no such user”), enabling user enumeration by an attacker via authentication attempts. The vulnerability is tied to the login error messaging rather than a fully ...

CVE-2013-2674

CVE-2013-2674 affects Brother MFC-9970CDW devices with firmware around 1.10 L, where an information-disclosure vulnerability arises from inadequate handling of HTTP referrer headers, allowing remote attackers to view sensitive data from referrer logs. The available documents identify the affected...

CVE-2013-2646

TP-LINK TL-WR1043ND V1120405 devices contain an unspecified denial of service vulnerability...

CVE-2013-2673

CVE-2013-2673 affects Brother MFC-9970CDW firmware L (1.10) and is described as a security bypass that allows physically proximate attackers to gain unauthorized access. The NVD metrics indicate a local/physical access exploit with partial confidentiality, integrity, and availability impact, but ...

CVE-2013-2672

CVE-2013-2672 affects Brother MFC-9970CDW devices running firmware 0D, where passwords may be submitted in cleartext. The NVD entry documents a network-remote risk with cleartext credential exposure (CVSS v3.1 base score 7.5, high impact on confidentiality; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). N...

CVE-2013-2646

CVE-2013-2646 affects TP-LINK TL-WR1043ND V1_120405 devices, described as an unspecified denial-of-service vulnerability. The provided documents do not disclose the underlying cause, affected firmware versions, attack vectors, exploit availability, or remediation steps. CVSS data (NVD) is present...

CVE-2013-2646

TP-LINK TL-WR1043ND V1120405 devices contain an unspecified denial of service vulnerability...

CVE-2013-2621

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL...

CVE-2013-2622

Cross-site Scripting XSS in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selectedtheme" parameter in error.php...

CVE-2013-2623

Cross-site Scripting XSS in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "femail" parameter in index.php...

CVE-2013-2631

The CVE-2013-2631 issue affects TinyWebGallery (TWG) versions

CVE-2013-2623

CVE-2013-2623 corresponds to a Cross-site Scripting (XSS) flaw in Telaen (UebiMiau fork) versions before 1.3.1. The vulnerability is triggered via the f_email parameter on index.php, allowing an attacker to inject arbitrary HTML/JavaScript in the victim’s browser. The same advisory set describes ...