Lucene search
K

6 matches found

VulnCheck KEV
VulnCheck KEV
added 2019/12/13 12:0 a.m.0 views

VulnCheck KEV: CVE-2013-5912

VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action...

10CVSS6.2AI score0.34623EPSS
Exploits0References1
NVD
NVD
added 2013/11/28 4:37 a.m.11 views

CVE-2013-5912

VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action...

10CVSS7.6AI score0.34623EPSS
Exploits0References1
CVE
CVE
added 2013/11/28 2:0 a.m.37 views

CVE-2013-5912

Vuln CVE-2013-5912 affects Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995. The VhttpdMgr importFile function accepts a fileName parameter in a URL to trigger remote code execution of arbitrary code with system privileges. Exploitation remotely via crafted importFile URL ...

10CVSS7.8AI score0.34623EPSS
Exploits0References1Affected Software1
CERT
CERT
added 2013/11/22 12:0 a.m.48 views

Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.9.4 build 2995 contains a code injection vulnerability

Overview Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.94 build 2995 and possibly earlier versions contain a code injection vulnerability CWE-94. Description CWE-94:Improper Control of Generation of Code 'Code Injection' Thomson Reuters Velocity Analytics Vhayu Analytic Serve...

10CVSS7.8AI score0.34623EPSS
Exploits0References3
exploitpack
exploitpack
added 2013/11/22 12:0 a.m.22 views

Thomson Reuters Velocity Analytics - Remote Code Injection

Thomson Reuters Velocity Analytics - Remote Code Injection source: https://www.securityfocus.com/bid/63880/info Thomson Reuters Velocity Analytics is prone to a vulnerability that lets attackers inject and execute arbitrary code. Successfully exploiting this issue may allow an attacker to upload...

0.5AI score
Exploits0
Exploit DB
Exploit DB
added 2013/11/22 12:0 a.m.78 views

Thomson Reuters Velocity Analytics - Remote Code Injection

source: https://www.securityfocus.com/bid/63880/info Thomson Reuters Velocity Analytics is prone to a vulnerability that lets attackers inject and execute arbitrary code. Successfully exploiting this issue may allow an attacker to upload and execute arbitrary code with SYSTEM privileges. Thomson...

7.4AI score
Exploits0
Rows per page
Query Builder