CVE-2013-2739

MiniDLNA has heap-based buffer overflow...

CVE-2013-2738

CVEs overview : The affected software is MiniDLNA (minidlna). The entry CVE-2013-2738 describes a SQL Injection vulnerability that may allow retrieval of arbitrary files. Multiple connected records corroborate that this issue targets MiniDLNA and can lead to file disclosure (CVE-2013-2738, with r...

CVE-2013-2600

CVE-2013-2600 concerns MiniUPnPd, where the vulnerability arises from improper use of snprintf in SSDP response construction. Versions 1.8 and earlier are affected. An attacker can trigger an information disclosure by sending a crafted SSDP request with a long ST header; if the header is long eno...

CVE-2013-2075

CVE-2013-2075 describes multiple buffer overflows in Chicken (up to 4.8.0.3) affecting the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures. The issue enables a denial-of-service (crash) when a file descriptor with a large integer value is opened, and is noted as stemming...

CVE-2013-1945

ruby193 uses an insecure LDLIBRARYPATH setting...

CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

CVE-2013-1931

A cross-site scripting XSS vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version...

CVE-2013-1930

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

CVE-2013-2024

In Chicken, CVE-2013-2024 describes an OS command injection vulnerability in the qs procedure from the utils module, affecting versions before 4.9.0. The root cause is unsafely handling or composing OS commands within that path, enabling an attacker to execute arbitrary commands on the host. The ...

CVE-2013-2012

The CVE-2013-2012 entry affects autojump prior to 21.5.8. Local privilege escalation is possible when a Trojan horse named custom_install in the current working directory is exploited, granting elevated privileges to local users. The vulnerability is due to improper handling of a directory in the...

CVE-2013-1951

CVE-2013-1951 affects MediaWiki: specific XSS vulnerability where an attacker can inject arbitrary script/HTML via Lua function names. Affected software includes MediaWiki prior to 1.19.5 and 1.20.x prior to 1.20.4; the underlying issue is triggered through Lua function name handling. The public ...

CVE-2013-1945

ruby193 uses an insecure LDLIBRARYPATH setting...

CVE-2013-1945

Technical details for CVE-2013-1945 (ruby193 with insecure LD_LIBRARY_PATH) are not publicly available in the provided documents. Monitor for updates.

CVE-2013-1910

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository...

CVE-2013-1934

The CVE-2013-1934 issue affects MantisBT 1.2.0rc1 and earlier, where the configuration report page adm_config_report.php allows remote authenticated users to inject arbitrary script/HTML via a complex value, enabling cross-site scripting. Root cause: insufficient input sanitization on the adm_con...

CVE-2013-1932

CVE-2013-1932 affects MantisBT 1.2.13. The OpenVAS entries and NVD description confirm a cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) that allows remote authenticated users to inject arbitrary script/HTML via the project name. The Nessus NASL i...

CVE-2013-1931

The CVE-2013-1931 entry describes a cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 that allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version. The connected documents confirm the affected product/version and the XSS nature but do ...

CVE-2013-1930

CVE-2013-1930 affects MantisBT 1.2.12 prior to 1.2.15, enabling authenticated users to bypass the workflow restriction and close issues. Root cause details are not provided beyond the bypass of workflow checks. Impact is limited to issue state manipulation by authenticated users; no exploitation ...

CVE-2013-1910

CVE-2013-1910 affects the yum package, where improper handling of bad metadata can cause a denial of service and potentially other unspecified impact via a Trojan horse file in the metadata of a remote repository. The vulnerability is documented with high/critical severity (CVSS 2.0/3.1) and is r...