WordPress Spreadsheet - Cross-Site Scripting

WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/codebase/spreadsheet.php. id: CVE-2013-6281 info: name: WordPress Spreadsheet - Cross-Site Scripting author: random-robbie severity: medium description: | WordPress Spreadsheet plugin contai...

WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting

A cross-site scripting vulnerability in js/taloaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter." id: CVE-2013-3526 info: name: WordPress Plugin Traffic Analyzer - 'aoid'...

AVTECH DVR - Login Verification Code Bypass

AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...

python313-pymongo-4.17.0-1.1 on GA media (moderate)

python313-pymongo-4.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11478-1 Rating: moderate Cross-References: CVE-2013-2132 CVE-2024-21506 CVSS scores: CVE-2024-21506 SUSE : 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves 2...

CVE-2013-3821

creationtimestamp| type| source ---|---|--- 2026-08-07 11:00:20+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b5eb8264-164c-4d3e-b562-e6bfed5d81bd...

ROOT-OS-DEBIAN-13-CVE-2013-7445 CVE-2013-7445 in linux - Patched by Root

Root has patched CVE-2013-7445 in the linux package for Root:Debian:13. Multiple fixed versions available...

XStream <1.4.6/1.4.10 - Remote Code Execution

Xstream API before 1.4.6 and 1.4.10 is susceptible to remote code execution. If the security framework has not been initialized, an attacker can run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. This can allow an attacker to...

HP LaserJet Printers Denial of Service (CVE-2013-6193)

Unspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw, CP1, M121, M1536dnf, and P1; Color LaserJet CM and CP; and TopShot LaserJet Pro M275 printers allows remote attackers to cause a denial of service via unknown vectors. This plugin only works with...

HP LaserJet Printers Cryptographic Issues (CVE-2013-4828)

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via...

Brother MFC-9970CDW Printers Cross-site Scripting (CVE-2013-2671)

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...

CVE-2013-0808

creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:07+00:00| seen| https://t.me/KaitNews/3867 2026-07-27 00:01:47+00:00| seen| https://t.me/KaitNews/3867 2026-08-05 15:00:06+00:00| published-proof-of-concept| https://t.me/KaitNews/3867 2026-08-06 00:00:35+00:00|...

PYSEC-2026-862 OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors

The "create an instance" API in OpenStack Compute Nova Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:ispublic property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for...

PYSEC-2026-875 OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack

The security group extension in OpenStack Compute Nova Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664...

CVE-2013-6786

creationtimestamp| type| source ---|---|--- 2026-06-23 07:37:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116798275755976502 2026-06-23 07:37:37+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mowvekv7fx72...

HP LaserJet Printers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2013-4829)

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors. This plugin only...

Unity Linux 20.1070e Security Update: shadow (UTSA-2026-016733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016733 advisory. shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees Tenable has extracted the preceding description block directly from...

Astra Linux – Vulnerability in ffmpeg

In FFmpeg 4.4, the file libavcodec/dnxhddec.c does not check the return value of the initvlc function. This is a similar issue to CVE-2013-0868...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in xercesImpl

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in xercesImpl CVE-2009-2625, CVE-2012-0881, CVE-2013-4002, CVE-2020-14338, CVE-2022-23437. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2009-2625 DESCRIPTION: XMLScanner.java in Apache Xerces2...

samsung-exploits

Samsung Exynos 4412 Kernel Exploits Device: Samsung Galax...

CVE-2013-10075

creationtimestamp| type| source ---|---|--- 2026-05-08 09:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldgif6juy2p 2026-05-08 16:36:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mle5zmsfr22v...