30833 matches found
CVE-2013-1751
The CVE affects TWiki before 5.1.4. A crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters allows remote attackers to execute arbitrary shell commands. The vulnerability is a command-injection in MAKETEXT handling, enabling remote code execution with the web server user priv...
CVE-2013-1751
TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT%' parameter value containing Perl backtick characters...
CVE-2013-1429
Summary of CVE-2013-1429 : The vulnerability affects Lintian prior to 2.5.12, wherein crafted symlinks can allow an attacker to gather information about the host system. This is a local issue (per CVSSv3: LOCAL) with a base score of 6.3 and a partial confidentiality impact (per CVSSv2: 4.3; per C...
CVE-2013-1425
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...
DEBIAN-CVE-2013-1425
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...
CVE-2013-1425
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...
CVE-2013-1426
Cross-site Scripting XSS in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor...
CVE-2013-1426
Cross-site Scripting XSS in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor...
CVE-2013-1425
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...
CVE-2013-1425
CVE-2013-1425 affects ldap-git-backup; vulnerable versions are prior to 1.0.4. The root cause is incorrect directory permissions that allow exposure of password hashes. Impact stated is partial confidentiality loss (password hashes exposed). No exploitation details or active exploit status are pr...
Adobe ColdFusion RDS Authentication Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Adobe ColdFusion RDS Authentication Bypass', 'Description' = %q Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass...
CVE-2013-5123
The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...
DEBIAN-CVE-2013-5123
The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...
CVE-2013-5123
The CVE-2013-5123 issue affects Python-pip prior to 1.5, where the mirroring support (-M/--use-mirrors) performs insecure DNS queries and lacks proper authenticity checks, enabling MITM-like download tampering. Connected advisories confirm this vulnerability and describe the fix as removing the m...
CVE-2013-5123
The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...
CVE-2013-6275
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...
CVE-2013-5661
Cache Poisoning issue exists in DNS Response Rate Limiting...
CVE-2013-6275
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...