30833 matches found
CVE-2013-4868
CVE-2013-4868 affects Karotz API 12.07.19.00 and is described as a Session Token Information Disclosure. The connected documents confirm the product/version and the impact is information disclosure of session tokens; no root-cause or code-level details are provided in the supplied sources. No exp...
CVE-2013-4867
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...
CVE-2013-4859
INSTEON Hub 2242-222 lacks Web and API authentication...
CVE-2013-4859
The CVE-2013-4859 entry refers to INSTEON Hub 2242-222 that suffers a lack of Web and API authentication. The vulnerability targets the Hub’s web/API interfaces, enabling unauthorized access when the device is exposed to the Internet (e.g., via port forwarding). The base information indicates a h...
CVE-2013-4796
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request...
CVE-2013-4796
CVE-2013-4796 concerns ReviewBoard 1.6.17. According to the Red Hat security entry and related sources in the connected documents, the issue enables code execution by attaching PHP scripts to a review request. The material does not provide vendor-specific affected versions beyond 1.6.17, nor does...
CVE-2013-4621
Magnolia CMS before 4.5.9 contains multiple access bypass vulnerabilities that let a non-admin user access and execute administrative functionality via direct URLs. Affected versions include Magnolia CMS
CVE-2013-4743
Static HTTP Server 1.0 has a documented Local/Buffer Overflow vulnerability. The issue stems from memory operations performed without proper data boundary validation, leading to potential reads/writes beyond allocated memory (buffer/heap overflow). Impacts cited include memory corruption and cras...
CVE-2013-4743
Static HTTP Server 1.0 has a Local Overflow...
CVE-2013-4693
WordPress Xorbin Digital Flash Clock 1.0 has XSS...
CVE-2013-4665
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4764
CVE-2013-4764 describes a vulnerability in Samsung Galaxy S3/S4 where a built-in component (sCloudBackupProvider.apk) exposes unprotected components that an unprivileged app can abuse to send arbitrary SMS texts to arbitrary destinations without permission. The root cause involves triggering a se...
CVE-2013-4692
CVE-2013-4692 corresponds to a cross-site scripting vulnerability in the Xorbin Analog Flash Clock extension for Joomla and related WordPress/XORBin clocks. The root cause is unsanitized input in the widgetUrl/urlWindow parameters from external input, enabling user-controllable script execution i...
CVE-2013-4692
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS...
CVE-2013-4695
CVE-2013-4695 affects Winamp 5.63, with an invalid pointer dereference in gen_ff.dll when processing links.xml, leading to arbitrary code execution. This is documented in multiple sources (NVD entry and Red Hat/Redundant CVE listings) confirming the affected product and the underlying cause. Expl...
CVE-2013-4693
CVE-2013-4693 affects the WordPress plugin Xorbin Digital Flash Clock 1.0. The vulnerability is a Flash-based XSS in the plugin’s frontend due to the xorDigitalClock.swf component, where the external input taken from the widgetUrl parameter is passed into getURL. This causes injected script execu...
CVE-2013-4665
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4665
CVE-2013-4665 affects SPBAS (SPBAS Business Automation Software) 2012 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. The connected documents corroborate a CSRF issue but do not provide further technical details such as affected components, exact root cause, exploit scenari...
CVE-2013-4664
The connected records (RH:CVE-2013-4664, NVD, PRION, Red Hat, CVELIST, PRION) consistently identify SPBAS Business Automation Software 2012 as vulnerable to XSS (CVE-2013-4664). The initial description states the same. Details beyond that are not provided in these documents (no explicit impact, a...