CVE-2013-2294

CVE-2013-2294 concerns ViewGit, with XSS vulnerabilities in the web UI prior to 0.0.7. The issues are triggered when a remote repository user injects malicious data via git branch or tag names, affecting the Shortlog table in templates/shortlog.php and the Heads table in plates/summary.php. The v...

CVE-2013-4241

CVE-2013-4241 (HMS Testimonials plugin for WordPress) : The NVD and related records describe multiple XSS vulnerabilities in the HMS Testimonials plugin for WordPress, fixed in versions before 2.0.11. The affected vectors include the Testimonial form fields (name, image, url, testimonial) and sev...

CVE-2013-1352

Verax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive...

CVE-2013-1867

Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability...

CVE-2013-0739

Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script...

Design/Logic Flaw

Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability...

CVE-2013-0739

Summary: CVE-2013-0739 affects Chamilo 1.9.4 and involves an XSS vulnerability in the chat.php script caused by improper validation of user-supplied input. Affected component: Chamilo 1.9.4, specifically the chat.php feature. Root cause: Improper validation of input in the chat functionality enab...

CVE-2013-1631

Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action...

CVE-2013-1631

CVE-2013-1631 affects Verax NMS prior to 2.1.0. According to the provided documents, the vulnerability causes leakage of connection details when any user executes a Repair Table action. The Red Hat and NVD records reflect this description and assign a moderate impact (CVSS v2 base score 5.0, CVSS...

CVE-2013-1352

CVE-2013-1352 affects Verax NMS prior to 2.1.0, where an encryption key is hardcoded in a JAR archive. This creates a potential confidentiality risk if the key is exposed; CVSS v3.1 indicates a HIGH impact on confidentiality (network access, no privileges required). The provided connected documen...

CVE-2013-1351

CVE-2013-1351 affects all Verax NMS versions prior to 2.1.0. The vulnerability arises from a client-side RSA-based password encryption in the login flow (clientMain.swf) where private/public keys are hardcoded, allowing an attacker to capture and replay the encrypted password against the service....

CVE-2013-1350

CVE-2013-1350 affects Verax NMS prior to 2.1.0. The vulnerability arises from authentication/authorization flaws that allow remote attackers to add/delete users, change passwords, and access sensitive data via unauthenticated service calls (e.g., userService/getAllUsers). Impact is authenticated ...

CVE-2013-1350

Verax NMS prior to 2.1.0 has multiple security bypass vulnerabilities...

CVE-2013-1867

Technical details (affected product/version, root cause, impact, fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2013-1867

Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability...

CVE-2013-1866

CVE-2013-1866 affects OpenSC OpenSC.tokend, with an Arbitrary File Creation/Overwrite vulnerability. Descriptions in multiple sources confirm the issue but do not provide concrete exploitation details, affected versions, or specific root-cause code paths. The connected documents do not specify mi...

CVE-2013-0725

CVE-2013-0725 affects ERDAS ER Viewer 13.0. The vulnerability involves the libraries dwmapi.dll and irml.dll , enabling arbitrary code execution. The CVE is referenced across NVD/Red Hat entries with the same description. Documented impact indicates potential code execution with local access; CVS...

CVE-2013-0291

CVE-2013-0291 concerns the WordPress plugin NextGEN Gallery (versions 1.9.10 and 1.9.11). Multiple connected sources confirm a Path Disclosure vulnerability , i.e., exposure of sensitive server paths through the plugin. OpenVAS lists the affected scope as WordPress NextGEN Gallery Plugin 1.9.10

CVE-2013-3316

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg"...

CVE-2013-3321

NetApp OnCommand System Manager 2.1 and earlier is affected by CVE-2013-3321 via a Local File Inclusion path exposed in the SnapMirror log/diagnostic area. Exploitation requires authentication as root to change the diagnostic path and read arbitrary files from the file system. The vulnerability i...