30833 matches found
CVE-2013-0286
CVE-2013-0286 relates to a cross-site scripting (XSS) vulnerability in the Pinboard 1.0.6 WordPress theme. Multiple sources (NVD, Red Hat, CVE list, WPVulnDB) indicate an XSS in the theme, with WPVulnDB specifying it as a vulnerability in an includes/theme-options.php tab Parameter XSS. The vulne...
CVE-2013-5659
CVE-2013-5659 affects Wiz version 5.0.3 and is described as a user mode write access violation. Connected sources corroborate Wiz 5.0.3 as vulnerable; no details on root cause, affected components, or patches are provided in the documents. CVSS v3.1 base score is 7.5 (HIGH) with network attack ve...
CVE-2013-5659
Wiz 5.0.3 has a user mode write access violation...
CVE-2013-4462
The connected data confirms a concrete issue: Portable phpMyAdmin WordPress plugin has an authentication bypass vulnerability described as a Multiple Script Direct Request Authentication Bypass. Affected product: Portable phpMyAdmin WordPress plugin (evidence from WPVulnDB entry citing version 1....
CVE-2013-4462
WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability...
CVE-2013-6056
OSSIM prior to version 4.3.3.1 is affected by a directory traversal vulnerability in tele_compress.php (timestamp parameter) that could allow a remote attacker to download arbitrary files, subject to web server privileges. This CVE (CVE-2013-6056) is documented across multiple sources (NVD entry ...
CVE-2013-1744
Technical details are not publicly provided in the supplied documents; monitor for updates. Current descriptions indicate a remote command execution vulnerability in IRIS citations management tool up to version 1.3, with no further specifics in the connected sources.
CVE-2013-1598
Vivotek PT7135 IP cameras with firmware 0300a and 0400a are affected by CVE-2013-1598, an OS command injection in the binary farseer.out via the system.ntp parameter that lets an attacker execute arbitrary commands. The vulnerability spans pre-auth (0300a) and post-auth (0400a) access in the admi...
CVE-2013-1597
CVE-2013-1597 is a path-traversal vulnerability in Vivotek PT7135 IP Cameras (firmware 0300a and 0400a) allowing an attacker to dump memory and extract user credentials. The CoreLabs advisory and related references describe exploit chains that can retrieve credentials from /../../../../../../../....
CVE-2013-1596
CVE-2013-1596 is an RTSP authentication bypass affecting Vivotek PT7135 IP Camera firmware 0300a and 0400a, exploitable via specially crafted RTSP packets sent to TCP port 554, enabling an unauthenticated remote attacker to access the video stream. The Core Security CoreLabs advisory and related ...
CVE-2013-1595
CVE-2013-1595 is a remote buffer overflow in Vivotek PT7135 IP Camera firmware 0300a/0400a. Exploitation requires sending a crafted RTSP packet with an inflated Authorization header to the RTSP service (port 554), which can overwrite the instruction pointer and allow remote code execution or caus...
CVE-2013-1594
Vivotek PT7135 IP cameras with firmware 0300a/0400a are affected by CVE-2013-1594 and related vulnerabilities involving information leakage via GET requests. CoreLabs describes that wireless keys and third‑party credentials are stored in clear text (FTP, share, SMTP, WEP/WPA keys, DynDNS, etc.), ...
CVE-2013-3960
Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...
CVE-2013-4333
OpenPNE 3.x (versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5) is affected by an XXE/External Entity Injection vulnerability. The connected documents corroborate that the issue is tied to OpenPNE’s vulnerable handling of external entities, but do not provide detailed root-cause analysis, affect...
CVE-2013-3960
Technical details for CVE-2013-3960 are not publicly provided in the supplied documents; available references only reiterate a security bypass in Easytime Studio Easy File Manager 1.1. Monitor for updates.
CVE-2013-3960
Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...
CVE-2013-1592
A Buffer Overflow vulnerability exists in the Message Server service MsJ2EEAddStatistics function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user...
CVE-2013-1592
SAP NetWeaver Message Server contains CVE-2013-1592 (and related CVE-2013-1593) buffer-overflow vulnerabilities in the Message Server module. The flaw resides in _MsJ2EE_AddStatistics(), where the attacker-controlled MSJ2EE_HEADER.serviceid is used to index the global j2ee_stat_services array wit...
CVE-2013-1592
A Buffer Overflow vulnerability exists in the Message Server service MsJ2EEAddStatistics function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user...