CVE-2013-2773

Nitro Pro / Nitro PDF Toolkit vulnerability CVE-2013-2773 is documented with concrete details: Nitro Pro 8.5.0.26 and older are affected by an insecure library loading (DLL hijacking) issue. The root cause is insecure DLL loading, enabling arbitrary code execution when a user opens a specially cr...

Description of the security update for Excel 2013: January 14, 2020

Description of the security update for Excel 2013: January 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...

Description of the security update for Office 2013: January 14, 2020

Description of the security update for Office 2013: January 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Office software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microso...

Microsoft Excel CVE-2020-0651 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

CVE-2013-6225

CVE-2013-6225 affects LiveZilla 5.0.1.4 and corresponds to a Remote Code Execution (RCE) vulnerability, with local file inclusion components documented by Curesec. Public advisories and databases corroborate an attacker could exploit the issue over the network to execute arbitrary code on the ser...

CVE-2013-7380

The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...

CVE-2013-6231

SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script...

CVE-2013-6430

CVE-2013-6430 affects Spring Framework (Spring MVC) via the JavaScriptUtils.javaScriptEscape method, which fails to escape certain characters, enabling XSS via line/paragraph separators and angle brackets. The issue is documented for Spring Framework versions before 3.2.2. Connected advisories (D...

CVE-2013-6430

The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting XSS attacks via a 1 line separator or 2 paragraph separator Unicod...

CVE-2013-7380

The Etherpad Lite ep_imageconvert Plugin for Etherpad Lite is affected by a Remote Command Injection vulnerability. Affected: ep_imageconvert

CVE-2013-6231

CVE-2013-6231 affects SpagoBI (primarily SpagoBI 4.0). The vulnerability is a privilege-escalation flaw in the AdapterHTTP servlet (ACTION_NAME=MANAGE_USER_ACTION) that can be triggered by crafted input, enabling a remote attacker to gain Administrator privileges after authenticating. Remediation...

openSUSE: Security Advisory for the Linux Kernel (openSUSE-SU-2019:1479-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2013-5638

Transcend WiFiSD 1.8 has persistent XSS...

CVE-2013-5658

AultWare pwStore 2010.8.30.0 has XSS...

CVE-2013-5637

PQI AirCard has persistent XSS...

CVE-2013-5638

Transcend WiFiSD 1.8 has persistent XSS...

CVE-2013-5637

PQI AirCard has persistent XSS...

CVE-2013-5658

CVE-2013-5658 affects AultWare pwStore 2010.8.30.0 with a Cross-Site Scripting (XSS) vulnerability. Reported impact per CVSS: CVSS v2 base 4.3 (Medium) with no confidentiality/availability impact, but partial integrity impact; CVSS v3.1 base 6.1 (Medium) with network attack vector, low attack com...

CVE-2013-5657

AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request...

CVE-2013-5657

CVE-2013-5657 affects AultWare pwStore 2010.8.30.0, which is vulnerable to a Denial of Service via an empty HTTP request. The issue is documented across multiple feeds (NVD, Red Hat, CVE lists) with CVSS v2/3 impact indicating Availability impact (PARTIAL–HIGH) and network access with no authenti...