Code injection

The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors...

CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

Code injection

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

CVE-2013-1813

CVE-2013-1813 affects BusyBox where util-linux/mdev.c creates intermediate /dev/ directories with 0777 permissions when nesting (/dev/dir1/dir2/...), allowing local users to exploit the improper permission handling. The linked Nessus/OpenVAS entries (e.g., MiracleLinux AXSA advisory referencing B...

CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

busybox: insecure directory permissions in /dev

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

Xxe

GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity XXE issue...

CVE-2013-6822

CVE-2013-6822 affects the SAP NetWeaver component GRMGApp and is tied to an XML External Entity (XXE) issue. The available description states a remote impact but does not specify exact vulnerable versions, attack vectors, or concrete remediation. Several connected records reference SAP advisories...

CVE-2013-6345

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 has unknown impact and attack vectors related to an "Application Exception."...

OpenJDK: AWT hardening fixes (AWT, 7163201)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate...

Google, FireEye Demand Change from Vulna Ad Network

An Android ad library containing a maliciously potent cocktail of features and vulnerabilities is less of a danger to Android users today after Google and the ad network made a series of changes spurred by security firm FireEye’s insistence. Despite fixes from the ad network, updates implemented ...

CVE-2013-5446

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

CVE-2013-5446

The issue affects IBM WebSphere DataPower XC10 appliances (2.1.0 and 2.5.0). The console does not properly process logoff actions, potentially enabling exploitation of admin-related functionality with remote access and causing denial of service, as described across multiple sources. Vendor patche...

CVE-2013-5393

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

CVE-2013-4767

Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors...

CVE-2013-4767

Technical details about CVE-2013-4767 are not publicly provided in the connected documents. Monitor for updates; current records only note an unspecified vulnerability in Eucalyptus before 3.3.2 with unknown impact.

CVE-2013-4362

WEB-DAV Linux File System davfs2 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in 1 kernelinterface.c and 2 mountdavfs.c, related to the "system" function...