Total
32234 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2013-7325 | 1 Debian | 2 Debian Linux, Devscripts | 2024-11-21 | 8.8 High |
An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball. | ||||
CVE-2013-4108 | 1 Cryptocat Project | 1 Cryptocat | 2024-11-21 | 9.8 Critical |
Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. | ||||
CVE-2013-3725 | 1 Invisioncommunity | 1 Invision Power Board | 2024-11-21 | 9.8 Critical |
Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution. | ||||
CVE-2013-2646 | 1 Tp-link | 2 Tl-wr1043nd, Tl-wr1043nd Firmware | 2024-11-21 | 7.5 High |
TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability. | ||||
CVE-2013-2258 | 1 Cryptocat Project | 1 Cryptocat | 2024-11-21 | 5.3 Medium |
Cryptocat before 2.0.22 has Nickname User Impersonation | ||||
CVE-2013-2097 | 1 Zpanel Project | 1 Zpanel | 2024-11-21 | 7.8 High |
ZPanel through 10.1.0 has Remote Command Execution | ||||
CVE-2013-20001 | 1 Openzfs | 1 Openzfs | 2024-11-21 | 7.5 High |
An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is allowed to everyone. IPv6 restrictions from the configuration are not applied. | ||||
CVE-2013-1753 | 2 Python, Redhat | 3 Python, Enterprise Linux, Rhel Software Collections | 2024-11-21 | 7.5 High |
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. | ||||
CVE-2013-1744 | 1 Iris Citations Management Tool Project | 1 Iris Citations Management Tool | 2024-11-21 | 9.8 Critical |
IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands. | ||||
CVE-2013-10007 | 1 Wp-print-friendly Project | 1 Wp Print Friendly | 2024-11-21 | 5.3 Medium |
A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unknown part of the file wp-print-friendly.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. Upgrading to version 0.5.3 is able to address this issue. The identifier of the patch is 437787292670c20b4abe20160ebbe8428187f2b4. It is recommended to upgrade the affected component. The identifier VDB-217269 was assigned to this vulnerability. | ||||
CVE-2012-6613 | 1 Dlink | 2 Dsr-250n, Dsr-250n Firmware | 2024-11-21 | 7.2 High |
D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account. | ||||
CVE-2012-6345 | 1 Novell | 1 Zenworks Configuration Management | 2024-11-21 | 7.5 High |
Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information. | ||||
CVE-2012-6309 | 1 Arctic Torrent Project | 1 Arctic Torrent | 2024-11-21 | 7.5 High |
A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling, which could let a malicious user cause a Denial of Service. | ||||
CVE-2012-6307 | 1 Impulseadventure | 1 Jpegsnoop | 2024-11-21 | 8.8 High |
A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code | ||||
CVE-2012-6306 | 1 Hcview Project | 1 Hcview | 2024-11-21 | 9.8 Critical |
A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file. | ||||
CVE-2012-6277 | 3 Hp, Ibm, Symantec | 7 Autonomy Keyview Idol, Domino, Notes and 4 more | 2024-11-21 | 7.8 High |
Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code." | ||||
CVE-2012-5626 | 1 Redhat | 6 Jboss Brms, Jboss Enterprise Application Platform, Jboss Enterprise Web Server and 3 more | 2024-11-21 | 7.5 High |
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation. | ||||
CVE-2012-4818 | 1 Ibm | 1 Infosphere Information Server | 2024-11-21 | 6.5 Medium |
IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system. | ||||
CVE-2012-3810 | 1 Samsung | 1 Kies | 2024-11-21 | 7.5 High |
Samsung Kies before 2.5.0.12094_27_11 has registry modification. | ||||
CVE-2012-3809 | 1 Samsung | 1 Kies | 2024-11-21 | 7.5 High |
Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification. |