30833 matches found
CVE-2013-2159
CVE-2013-2159 affects Monkey HTTP Daemon with a broken user name authentication mechanism. The NVD notes a CVSSv2 base score of 7.5 (HIGH) and CVSSv3.1 base score of 9.8 (CRITICAL), indicating high impact on confidentiality, integrity, and availability. Connected records reaffirm the same issue, ...
CVE-2013-2095
rubygem-openshift-origin-controller: API can be used to create applications via cartridgecache.rb URI.prase to perform command injection...
CVE-2013-2095
CVE-2013-2095 affects rubygem openshift-origin-controller. The vulnerability allows command injection through the API by crafting a cartridge_cache.rb URI.parse() payload to create applications. PoC demonstrates the exploit; multiple advisories confirm the issue. Remediation: there is no fixed ve...
CVE-2013-1793
CVE-2013-1793 concerns openstack-utils and openstack-db with insecure password creation. The available connected documents confirm the affected components but do not provide remediation details. NVD metrics indicate a Network attack vector with no authentication required, and a high impact on con...
CVE-2013-0293
oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation...
CVE-2013-0293
The CVE-2013-0293 entry concerns oVirt Node. The issue occurs when the lock screen accepts F2 to drop to a shell, enabling local privilege escalation from a non-privileged state to a higher-privilege level. Per NVD, the vulnerability is local with low attack complexity and no authentication, and ...
Description of the security update for PowerPoint 2013: December 10, 2019
Description of the security update for PowerPoint 2013: December 10, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft PowerPoint software if the software does not correctly handle objects in memory. To learn more about the vulnerability, se...
Description of the security update for Word 2013: December 10, 2019
Description of the security update for Word 2013: December 10, 2019 Summary This security update resolves a denial of service vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Comm...
Description of the security update for Office 2013: December 10, 2019
Description of the security update for Office 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Excel 2013: December 10, 2019
Description of the security update for Excel 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel imcorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
CVE-2013-4184
CVE-2013-4184 affects the Perl module Data::UUID from CPAN version 1.219, vulnerable to symlink attacks due to a fragile handling of temporary files. Multiple connected sources show vendor advisories and distro patches (e.g., Fedora advisory FEDORA-2024-3da8ed5be3 and Mageia/OpenVAS notices) conf...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
EulerOS 2.0 SP2 : libpng (EulerOS-SA-2019-2383)
According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...
Microsoft Access CVE-2019-1463 Information Disclosure Vulnerability
Description Microsoft Access is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 32-bit edition SP2 Microsoft Office 2010 64-bit edition SP2 Microsoft...
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...
Security feature bypass
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...
CVE-2013-0342
CVE-2013-0342 affects the pyrad library: the CreateID function in packet.py prior to 2.1 uses sequential packet IDs, making it easier for remote attackers to spoof RADIUS packets by predicting the next ID. This vulnerability is described in related sources (e.g., Nessus plugin references) as a se...