30837 matches found
CVE-2013-1242
Memory leak in the web framework in the server in Cisco Unified Presence CUP allows remote attackers to cause a denial of service memory consumption via malformed TCP packets, aka Bug ID CSCug38080...
CVE-2013-1009
WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2013-1023...
CVE-2013-4176
mysecureshell 1.31: Local Information Disclosure Vulnerability...
CVE-2013-2181
Cross-site scripting XSS vulnerability in the Directory Listing plugin in Monkey HTTP Daemon monkeyd 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name...
CVE-2013-4101
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness...
CVE-2013-3573
HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors...
CVE-2013-5647
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2013-0182
The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments...
CVE-2013-2791
MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...
CVE-2013-5177
The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service panic via an invalid iovec structure...
CVE-2013-7478
The events-manager plugin before 5.5 for WordPress has XSS via EMTicket::getpost...
CVE-2013-2743
importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentication via a crafted integer in the step parameter...
CVE-2013-5816
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote attackers to affect availability via unknown vectors related to Metro...
CVE-2013-4955
Open redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the service parameter...
CVE-2013-3636
ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag...
CVE-2013-4167
Cross-site scripting XSS vulnerability in CMS Made Simple CMSMS before 1.11.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-2109
WordPress plugin wp-cleanfix has Remote Code Execution...
CVE-2013-3096
D-Link DIR865L v1.03 suffers from an "Unauthenticated Hardware Linking" vulnerability...