CVE-2013-3320

NetApp OnCommand System Manager prior to 2.2 is affected by CVE-2013-3320 (XSS) via the full-name and comment fields. The SEC Consult advisory indicates vulnerable versions are <= 2.1 and

CVE-2013-3317

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak key...

CVE-2013-3317

CVE-2013-3317 affects Netgear WNR1000v3 firmware prior to 1.0.2.60. The issue is an authentication bypass via the NtgrBak key, enabling bypass of login controls. CVSS3.1 scores indicate a critical, network-based vulnerability with high impact on confidentiality, integrity, and availability (C/H/I...

CVE-2013-3316

Issue summary: Netgear WNR1000v3 firmware prior to 1.0.2.60 contains an authentication bypass caused by the web server skipping checks for URLs containing a ".jpg" string. Affected product/version: NETGEAR WNR1000v3 with firmware before 1.0.2.60. Cause: Authentication logic flaw in URL handling (...

CVE-2013-2574

The CVE-2013-2574 affects FOSCAM FI8620 IP Cameras, due to improper access restrictions that let remote attackers browse /tmpfs/ and /log/ directories without authentication, potentially exposing configuration and credentials (e.g., plaintext Wi‑Fi config and admin/passwords). Public references d...

CVE-2013-2573

TP-Link IP cameras with firmware v1.6.18P12 and below (TL-SC 3130, TL-SC 3130G, TL-SC 3171G, TL-SC 4171G) are affected by CVE-2013-2573 due to an OS command injection in /cgi-bin/mft/wireless_mft.cgi (parameter ap) that can be exploited using hard-coded credentials in Boa Web Server. This allows ...

CVE-2013-2573

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

CVE-2013-2572

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files...

CVE-2013-2572

CVE-2013-2572 / CVE-2013-2573 affect TP-Link IP cameras based on firmware v1.6.18P12 and earlier (TL-SC 3130, TL-SC 3130G, TL-SC 3171G, TL-SC 4171G). Root cause: hard-coded credentials in the administrative web interface (Boa http server) enabling bypass of authentication and, for CVE-2013-2573, ...

CVE-2013-3215

CVE-2013-3215 affects vtiger CRM 5.4.0 and earlier. Root cause: authentication bypass due to improper validation in validateSession. CVSS v3.1 base score 9.8 (CRITICAL; NETWORK, LOW attack complexity, PR:N; privileges NONE; UI:N; C/H/I/H/A/H). Public details in NVD/CVE records indicate high-risk ...

CVE-2013-3215

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function...

CVE-2013-2569

A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream...

CVE-2013-2569

CVE-2013-2569 affects Zavio IP Cameras (firmware ≤ 1.6.03) where RTSP authentication is disabled by default, allowing remote unauthenticated access to the live video stream. Core Security advisory describes mitigations (enable RTSP authentication, review CGI access) but does not specify an exact ...

CVE-2013-0161

Havalite CMS 1.1.7 has a stored XSS vulnerability...

CVE-2013-0161

CVE-2013-0161 concerns Havalite CMS 1.1.7, which is affected by a stored XSS vulnerability. The available records identify the vulnerable component as the CMS itself (Havalite CMS 1.1.7) and describe the issue as a stored cross-site scripting flaw. The NVD metrics place the impact at low to mediu...

CVE-2013-1602

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.04US, DCS-1130 1.03/1.04US , DCS-2102 1.05RU/1.06/1.06FR/1.05TESCO, DCS-2121...

CVE-2013-1603

Summary of CVE-2013-1603 and related D-Link IP Camera vulnerabilities (CVE‑2013‑1599, -1600, -1601, -1602, -1603): Core Security’s CORE-2013-0303 advisory documents OS command injection, several authentication issues, information leakage, and hard-coded credentials affecting D‑Link IP cameras (mo...

CVE-2013-3071

NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass...

CVE-2013-3214

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'...

CVE-2013-1600

An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-2121 1.06FR, 1.06, and 1.05RU, DCS-2102 1.06FR. 1.06, and 1.05RU, which could let a malicious user obtain sensitive information...