CVE-2013-7081: Undefined Security Weakness

The old Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restrictions via unspecified vectors...

CVE-2013-6877

Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote attackers to execute arbitrary code via a long string in the TRACKID element of an RMP file, a different vulnerability than CVE-2013-7260...

CVE-2013-7103

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a 1 TestFile XML element or the 2 hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

Command injection

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a 1 Command or 2 Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

PT-2013-6275

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway version 7.6 Description The issue allows remote authenticated administrators to execute arbitrary commands. This can be achieved by using shell metacharacters in the value attribute in a TestFile XML element or the hostnam...

PT-2013-6276

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway version 7.6 Description The issue allows remote authenticated administrators to execute arbitrary commands. This can be achieved by specifying the commands in the value attribute within a Command or Script XML element...

CVE-2013-7104: Improper Neutralization of Special Elements used in an OS Command

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a 1 Command or 2 Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands...

Design/Logic Flaw

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site...

CVE-2013-5614

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site...

CVE-2013-5404

Cross-site scripting XSS vulnerability in the search implementation in IBM Rational Quality Manager RQM 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to...

CVE-2013-5404

Cross-site scripting XSS vulnerability in the search implementation in IBM Rational Quality Manager RQM 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to...

CVE-2013-5404: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search implementation in IBM Rational Quality Manager RQM 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to...

PT-2013-5683

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23 Description The issue allows remote attackers to bypass intended sandbox restrictions via a crafted web site, due to improper consideration of the sandbox attribute of an...

PT-2013-5519

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 2.0 through 2.0.1.1 IBM Rational Quality Manager versions 3.x before 3.0.1.6 iFix 1 IBM Rational Quality Manager versions 4.x before 4.0.5 Description A cross-site scripting XSS issue exists in the search...

CVE-2013-6639

CVE-2013-6639 affects Google V8 (before 3.22.24.7) as used in Google Chrome before 31.0.1650.63. The DehoistArrayIndex function in hydrogen-dehoist.cc (hydrogen.cc) can trigger an out-of-bounds write via crafted array indices, potentially leading to a denial of service. The public records indicat...

CVE-2013-6639

Removed by vendor...

Tape library and drives are shown as separate devices

Challenge Tape library and drives are shown as separate devices in console or loading tape into TapeDrive0 moves the tape into TapeDrive1 etc. Shown here, the Tape Library has no Tape Drive listed Shown here, the Tape Drive is separate from the Tape Library. Cause The tape library is not reportin...

Buffer overflow

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file...

CVE-2013-6937: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file...

PT-2013-6195

Name of the Vulnerable Software and Affected Versions VideoCharge Software Watermark Master version 2.2.23 Description A buffer overflow issue allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file. Recommendations For versi...