30833 matches found
CVE-2013-4752
The CVE-2013-4752 issue affects Symfony’s HttpFoundation component across Symfony 2.0.x up to 2.0.24, 2.1.x up to 2.1.12, 2.2.x up to 2.2.5, and 2.3.x up to 2.3.3. The vulnerability arises because the Host header can be manipulated when the framework generates an absolute URL, enabling a remote a...
CVE-2013-4532
CVE-2013-4532 affects QEMU 1.1.2+dfsg through 2.1+dfsg. The issue is a buffer overrun that could allow arbitrary code execution on the host with the QEMU process privileges. The connected resources corroborate the same impact. The provided materials do not specify a fixed version or remediation; ...
CVE-2013-4532
Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...
CVE-2013-3936
CVE-2013-3936 involves multiple cross-site scripting (XSS) vulnerabilities in Opsview prior to 4.4.1 and Opsview Core prior to 20130522, allowing remote attackers to inject arbitrary web script or HTML via the vulnerable web UI. The affected products are Opsview/Open-source Opsview Core (pre-4.4....
CVE-2013-4161
creationtimestamp| type| source ---|---|--- 2019-12-31 22:56:32+00:00| seen| https://t.me/cibsecurity/8934...
CVE-2013-4357
creationtimestamp| type| source ---|---|--- 2019-12-31 22:56:32+00:00| seen| https://t.me/cibsecurity/8933...
CVE-2013-7071
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7071
CVE-2013-7071 affects Monitorix prior to 3.4.0. The vulnerability is a Cross-site Scripting (XSS) in the handle_request function of lib/HTTPServer.pm, exploitable via PATH_INFO to inject arbitrary web scripts or HTML. Remediation in the connected data shows Fedora/monitorix updates (e.g., monitor...
CVE-2013-7071
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7070
CVE-2013-7070 affects Monitorix prior to version 3.3.1. The handle_request function in lib/HTTPServer.pm allows remote attackers to execute arbitrary commands via shell metacharacters in the URI. Documented impact is remote code execution with high confidentiality, integrity, and availability imp...
CVE-2013-4161
gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue...
CVE-2013-4357
CVE-2013-4357 affects the eglibc package prior to 2.14, where getaddrinfo() is mishandled. This can allow a network-based attacker to cause a denial of service (availability impact: HIGH per CVSSv3.1; base score 7.5). Root cause: incorrect handling in getaddrinfo(). No explicit mitigation or patc...
CVE-2013-4161
The connected CNVD entry identifies gksu-polkit version 0.0.3-6.fc18 as vulnerable due to a permissive PolicyKit policy configuration that allows privilege escalation to administrative level. This CVE (CVE-2013-4161) is linked to CVE-2012-5617; the documents do not provide a concrete fixed versio...
Photon OS 2.0: Yum PHSA-2019-2.0-0190
An update of the yum package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132535;...
CVE-2013-2016
A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...
CVE-2013-2016
CVE-2013-2016 affects qemu v1.3.0 and later (virtio-rng). The issue arises from how addresses are validated when a guest accesses the config space of a virtio device; when the device has a very small or zero-sized config space, a privileged guest could access the host’s qemu address space and pot...
CVE-2013-0264
CVE-2013-0264 affects Cumin. The issue is an import error introduced during code refactoring (r5310) that causes server certificate validation to be always disabled when connecting to Aviary servers, even if the system packages support it. This creates a potential integrity risk (partial) and, pe...
CVE-2013-4621
creationtimestamp| type| source ---|---|--- 2019-12-27 20:40:38+00:00| seen| https://t.me/cibsecurity/8902 2024-03-17 15:21:48+00:00| seen| https://t.me/ctinow/209956...