30833 matches found
CVE-2013-7472
creationtimestamp| type| source ---|---|--- 2019-06-16 02:33:10+00:00| seen| https://t.me/cibsecurity/4932...
CVE-2013-7472
The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpdmetaboxes daytoshow parameter...
CVE-2013-7472
The CVE-2013-7472 issue affects the WordPress Count per Day plugin prior to version 3.2.6, where an XSS vulnerability can be triggered via the daytoshow parameter in wp-admin/?page=cpd_metaboxes. Impact details in connected records indicate cross-site scripting without authentication and with use...
Security Bulletin: API Connect V2018 is impacted by sensitive information leak (CVE-2018-2013)
Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-2013 DESCRIPTION: IBM API Connect could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. CVSS Base Score: 5.3 CVSS Temporal Score: S...
CVE-2013-7471
creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:27+00:00| seen| https://t.me/cibsecurity/4850 2025-03-03 10:15:47+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2025-03-04 04:19:36+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2026-07-16 12:15:02+00:00| seen|...
CVE-2013-7471
CVE-2013-7471 affects D-Link DIR-845 (pre-1.02b03), DIR-600 (pre-2.17b01), DIR-645 (pre-1.04b11), DIR-300 rev. B, and DIR-865. Root cause: command injection via shell metacharacters in the SOAP POST request fields NewInternalClient, NewExternalPort, or NewInternalPort of soap.cgi?service=WANIPCon...
Security Update for Microsoft Word 2013 (KB4464590) 32-Bit Edition
A security vulnerability exists in Microsoft Word 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Word 2013 (KB4464590) 64-Bit Edition
A security vulnerability exists in Microsoft Word 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Description of the security update for SharePoint Enterprise Server 2013: June 11, 2019
None None...
Description of the security update for SharePoint Foundation 2013: June 11, 2019
Description of the security update for SharePoint Foundation 2013: June 11, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for Word 2013: June 11, 2019
Description of the security update for Word 2013: June 11, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Microsoft Skype for Business and Lync Server CVE-2019-1029 Denial of Service Vulnerability
Description Microsoft Skype for Business and Lync Server are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Lync Server 2010 Microsoft Lync...
CVE-2013-1752
CVE-2013-1752 is a denial-of-service in Python readline usage within several network protocol modules (httplib, ftplib, imaplib, nntplib, poplib, smtplib). Remote attackers could exhaust memory via a long readline input. Connected advisories confirm fixes in various module releases: httplib fixed...
Null pointer dereference
In the tun subsystem in the Linux kernel before 4.13.14, devgetvalidname is not called before registernetdevice. This allows local users to cause a denial of service NULL pointer dereference and panic via an ioctlTUNSETIFF call with a dev name containing a / character. This is similar to...
CVE-2018-7191
In the tun subsystem in the Linux kernel before 4.13.14, devgetvalidname is not called before registernetdevice. This allows local users to cause a denial of service NULL pointer dereference and panic via an ioctlTUNSETIFF call with a dev name containing a / character. This is similar to...
Denial Of Service (DoS)
Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-25043)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
CVE-2013-7285
creationtimestamp| type| source ---|---|--- 2019-05-15 20:33:21+00:00| seen| https://t.me/cibsecurity/4332 2021-03-16 11:01:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2917 2026-09-01 17:00:58+00:00| seen| https://t.me/cissp/2547 2026-09-02 01:04:49+00:00| seen|...
CVE-2013-7285
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON...