31109 matches found
Solaris 10 (sparc) : 119783-45
Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...
CVE-2013-0802
This CVE-2013-0802 entry is rejected/not used and does not represent an active vulnerability.
VulnCheck KEV: CVE-2013-2578
cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...
Huawei EulerOS: Security Advisory for libsrtp (EulerOS-SA-2020-1787)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.0 : libsrtp (EulerOS-SA-2020-1787)
According to the version of the libsrtp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service crash via vector...
CVE-2013-4805
creationtimestamp| type| source ---|---|--- 2020-06-29 11:04:47+00:00| published-proof-of-concept| https://t.me/w2hack/112...
Vanilla Forums SQL Injection (CVE-2013-3527)
An SQL injection vulnerability exists in Vanilla Forums. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2013-7489
creationtimestamp| type| source ---|---|--- 2020-06-27 00:55:19+00:00| seen| https://t.me/cibsecurity/13090...
CVE-2013-7489
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution...
CVE-2013-7489
The Beaker library for Python (up to version 1.11.0) is affected by deserialization of untrusted data, which could lead to arbitrary code execution. Root cause: unsafe deserialization. Impact: potential code execution on affected hosts. Exploitation details are not provided in the available docum...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
This is a PoC exploit for CVE-2013-0001, a SQL injection vulnerability scanner written in Python. The target product/service is a web application, and the vulnerability class is SQL injection. The probable entry point is the sqliscanner.py script, which is invoked by running the script with the -...
EulerOS 2.0 SP2 : bzr (EulerOS-SA-2020-1648)
According to the version of the bzr package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The ssl.matchhostname function in CPython aka Python before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might all...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1626)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for bzr (EulerOS-SA-2020-1648)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Symphony CMS SQL Injection (CVE-2013-2559)
An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
rubygem-json: Unsafe object creation vulnerability in JSON
A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...
Microsoft Project 2013 Information Disclosure Vulnerability (KB4484369)
This host is missing an important security update according to Microsoft KB4484369 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Word 2013 Service Pack 1 Security Feature Bypass Vulnerability (KB4484361)
This host is missing an important security update according to Microsoft KB4484361 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...