CVE-2013-1437

The CVE-2013-1437 entry relates to the Perl Module-Metadata module: versions before 1.000015 evaluate the $Version value and can execute arbitrary Perl code, enabling remote code execution. Affected component: Module-Metadata (Perl). Impact: remote code execution with high severity. Remediation: ...

CVE-2013-1437

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value...

CVE-2013-2499

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'usermanager.php' via spoofing a cookie...

CVE-2013-2474

Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter...

CVE-2013-2499

CVE-2013-2499 affects SimpleHRM 2.3 and earlier. The vulnerability is an authentication bypass where remote attackers can bypass login in the file user_manager.php by spoofing a cookie. The description explicitly states the root cause as cookie spoofing enabling bypass of authentication, which co...

CVE-2013-2499

SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'usermanager.php' via spoofing a cookie...

CVE-2013-2474

AWS XMS 2.5 is affected by CVE-2013-2474, a directory traversal vulnerability in importer.php?what that allows remote attackers to read arbitrary files. The root cause is insufficient filtration of the what parameter before it is used in PHP file() (and related code paths), enabling access to sen...

CVE-2013-4770

creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:00+00:00| seen| https://t.me/cveNotify/465...

CVE-2013-4441

creationtimestamp| type| source ---|---|--- 2020-01-27 21:37:50+00:00| seen| https://t.me/cveNotify/457...

CVE-2013-7390

Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the webroot...

CVE-2013-4770

Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4770

The CVE-2013-4770 entry corresponds to a Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x, with exploitation possible before 4.0.1. The affected product is EMC within Eucalyptus 4.0.x line; the vulnerability allows remote attackers to inject arbitrary web scri...

CVE-2013-7390

CVE-2013-7390 describes an unrestricted file upload in ManageEngine Desktop Central’s AgentLogUploadServlet. A remote attacker can upload a JSP file to the webroot and access it directly to execute arbitrary code, affecting Desktop Central 7.x and 8.0.0 prior to build 80293. Multiple sources corr...

CVE-2013-4441

The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack...

CVE-2013-4441

Pwgen 2.06’s Phonemes mode produces predictable passwords, enabling context-dependent attackers to brute-force-guess passwords. Affected: Pwgen 2.06; root cause: predictability in Phonemes mode. Remediation/patch details are not provided in the connected documents.

CVE-2013-5659

Wiz 5.0.3 has a user mode write access violation...

CVE-2013-0286

Pinboard 1.0.6 theme for Wordpress has XSS...

CVE-2013-3486

The CVE-2013-3486 entry concerns IrfanView FlashPix Plugin. Affected component: FlashPix plugin (Fpx.dll) in IrfanView. Root cause: integer overflow in Summary Information Property Set handling, leading to a heap-based buffer overflow. Impact: potential denial of service or arbitrary code executi...

CVE-2013-3493

CVE-2013-3493 affects XnView 2.03 and is described as an integer overflow vulnerability. The connected documents confirm the affected product/version and the (root) cause as an overflow, with NVD listing both CVSS v2 (7.5, HIGH) and CVSS v3.1 (9.8, CRITICAL) metrics, indicating network attack vec...

CVE-2013-3492

The CVE-2013-3492 entry concerns XnView 2.03 and is documented to have a stack-based buffer overflow vulnerability in XnView. Affected software is XnView 2.03; the underlying cause is a stack-based overflow. The available connected documents confirm the vulnerability but do not provide specifics ...