30833 matches found
CVE-2013-7062
Multiple cross-site scripting XSS vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unspecified input in the 1 browseridmanager or 2...
CVE-2013-3937
CVE-2013-3937 is a heap-based buffer overflow in XnView's xnview.exe prior to 2.13 that allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. Affected product: XnView (Windows). Root cause: inadequate bounds checking when processing BMP data. Impact: arbitrary ...
CVE-2013-3939
XnView vulnerability CVE-2013-3939: Multiple connected sources confirm a heap-based buffer overflow in XnView’s RGB handling, caused by improper processing of RLE strip lengths. The issue exists in xnview.exe prior to version 2.13 (and cited variants reference older versions, e.g., 2.04), enablin...
CVE-2013-3941
CVE-2013-3941 affects XnView before 2.13. The vulnerability is in Xjp2.dll (JPEG2000 handling): (1) Csiz parameter in a SIZ marker triggers incorrect memory allocation, and (2) lqcd field in a QCD marker causes a heap-based buffer overflow. This can enable remote code execution. Remediation: upgr...
CVE-2013-3935
creationtimestamp| type| source ---|---|--- 2020-01-02 18:49:10+00:00| seen| https://t.me/cibsecurity/8946...
CVE-2013-3936
creationtimestamp| type| source ---|---|--- 2020-01-02 18:49:09+00:00| seen| https://t.me/cibsecurity/8945 2020-01-08 16:32:29+00:00| seen| https://t.me/cibsecurity/9038...
CVE-2013-4532
creationtimestamp| type| source ---|---|--- 2020-01-02 18:49:07+00:00| seen| https://t.me/cibsecurity/8943...
CVE-2013-3944
CVE-2013-3944 affects the IrfanView MrSID plugin (MrSID.dll) prior to version 4.37. The vulnerability is a stack-based buffer overflow in the handling of the IMAGE tag, which can allow an attacker to execute arbitrary code on a vulnerable host. This CVE is referenced in related advisories indicat...
CVE-2013-3945
The CVE-2013-3945 entry concerns the IrfanView MrSID plugin (MrSID.dll) prior to version 4.37. The vulnerability arises from improper validation of the nband tag, enabling an attacker to remotely execute arbitrary code via processing a crafted SID file. Impact is arbitrary code execution with pot...
CVE-2013-3946
CVE-2013-3946 affects the IrfanView MrSID plugin (MrSID.dll) prior to version 4.37. A heap-based buffer overflow is triggered via the levels header in a SID file, enabling remote attackers to execute arbitrary code. The vulnerability is exploitable remotely; impact is arbitrary code execution. Re...
CVE-2013-7062
CVE-2013-7062 concerns multiple cross-site scripting (XSS) vulnerabilities in Zope used by Plone 3.3.x–3.3.6, 4.0.x–4.0.9, 4.1.x–4.1.6, 4.2.x–4.2.7, and 4.3–4.3.2. The issue arises from input that is not properly filtered in two components: (1) browser_id_manager and (2) OFS.Image, enabling remot...
CVE-2013-3620
Hardcoded WSMan credentials in Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before 3.15 SMTX9315 and firmware for Supermicro X8 generation motherboards before SMT X8 312...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-3607. Reason: This candidate is a reservation duplicate of CVE-2013-3607. Notes: All CVE users should reference CVE-2013-3607 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2013-6242
CVE-2013-6242 describes a cross-site scripting (XSS) flaw in the frontend of Open-Xchange (OX) AppSuite. It affects Open-Xchange AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12, where an attacker can inject arbitrary script/HTML via the subject of an email sent to the frontend. ...
CVE-2013-7486
Open-Xchange AppSuite contains a Cross-Site Scripting (XSS) vulnerability in the backend that allows remote attackers to inject script or HTML via the body of an email. Affected versions for this CVE-2013-7486 are Open-Xchange AppSuite 7.2.x prior to 7.2.2-rev27 and 7.4.x prior to 7.4.0-rev20. Th...
CVE-2013-7486
Cross-site scripting XSS vulnerability in the backend in Open-Xchange OX AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or HTML via the body of an email. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects...
CVE-2013-7485
CVE-2013-7485 is an XSS in the backend of Open-Xchange AppSuite. Affected: 7.2.x prior to 7.2.2-rev26 and 7.4.x prior to 7.4.0-rev16. Vulnerability arises from improper handling of the publication name in error messages, enabling remote attackers to inject arbitrary script/HTML. Mitigation: apply...
CVE-2013-3620
Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) firmware affect Supermicro X9 generation motherboards (before 3.15, SMT_X9_315) and Supermicro X8 generation motherboards (before SMT X8 312). Root cause: credentials stored in firmware expose remote management access...
CVE-2013-3619
CVE-2013-3619 affects Supermicro IPMI firmware on X9 generation (before SMT_X9_317) and X8 generation (before SMT_X8_312). The root cause is hardcoded private encryption keys used by the Lighttpd SSL interface and the Dropbear SSH daemon within the IPMI firmware, enabling potential impersonation,...