Export limit exceeded: 11769 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 89527 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (89527 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2013-4158 | 3 Debian, Fedoraproject, Smokeping | 3 Debian Linux, Fedora, Smokeping | 2024-11-21 | 6.1 Medium |
| smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790) | ||||
| CVE-2013-4144 | 1 Swfupload Project | 1 Swfupload | 2024-11-21 | 9.8 Critical |
| There is an object injection vulnerability in swfupload plugin for wordpress. | ||||
| CVE-2013-4109 | 1 Cryptocat Project | 1 Cryptocat | 2024-11-21 | 6.1 Medium |
| An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165. | ||||
| CVE-2013-4107 | 1 Cryptocat Project | 1 Cryptocat | 2024-11-21 | 6.1 Medium |
| Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting | ||||
| CVE-2013-4106 | 1 Cryptocat Project | 1 Cryptocat | 2024-11-21 | 6.1 Medium |
| A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22. | ||||
| CVE-2013-3946 | 1 Extensis | 1 Mrsid | 2024-11-21 | 7.8 High |
| Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header. | ||||
| CVE-2013-3944 | 1 Extensis | 1 Mrsid | 2024-11-21 | 7.8 High |
| Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag. | ||||
| CVE-2013-3941 | 1 Xnview | 1 Xnview | 2024-11-21 | 9.8 Critical |
| Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow. | ||||
| CVE-2013-3939 | 1 Xnview | 1 Xnview | 2024-11-21 | 7.8 High |
| xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads to an unexpected sign extension error and a heap-based buffer overflow. | ||||
| CVE-2013-3937 | 1 Xnview | 1 Xnview | 2024-11-21 | 7.8 High |
| Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. | ||||
| CVE-2013-3936 | 1 Opsview | 2 Opsview, Opsview Core | 2024-11-21 | 6.1 Medium |
| Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML. | ||||
| CVE-2013-3931 | 1 Jomres | 1 Jomres | 2024-11-21 | 5.4 Medium |
| Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via the property_name parameter, related to editing property details. | ||||
| CVE-2013-3637 | 1 Projectpier | 1 Projectpier | 2024-11-21 | 5.4 Medium |
| ProjectPier 0.8.8 does not use the Secure flag for cookies | ||||
| CVE-2013-3636 | 1 Projectpier | 1 Projectpier | 2024-11-21 | 5.4 Medium |
| ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag | ||||
| CVE-2013-3635 | 1 Projectpier | 1 Projectpier | 2024-11-21 | 5.4 Medium |
| ProjectPier 0.8.8 has stored XSS | ||||
| CVE-2013-3628 | 1 Zabbix | 1 Zabbix | 2024-11-21 | 8.8 High |
| Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability | ||||
| CVE-2013-3619 | 2 Citrix, Supermicro | 10 Netscaler, Netscaler Firmware, Netscaler Sd-wan and 7 more | 2024-11-21 | 8.1 High |
| Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 contain harcoded private encryption keys for the (1) Lighttpd web server SSL interface and the (2) Dropbear SSH daemon. | ||||
| CVE-2013-3565 | 2 Opensuse, Videolan | 2 Opensuse, Vlc Media Player | 2024-11-21 | 6.1 Medium |
| Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) command parameter to requests/vlm_cmd.xml, (2) dir parameter to requests/browse.xml, or (3) URI in a request, which is returned in an error message through share/lua/intf/http.lua. | ||||
| CVE-2013-3542 | 1 Grandstream | 26 Gxv3500, Gxv3500 Firmware, Gxv3501 and 23 more | 2024-11-21 | 10.0 Critical |
| Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session. | ||||
| CVE-2013-3517 | 1 Netgear | 4 Wnr3500l, Wnr3500l Firmware, Wnr3500u and 1 more | 2024-11-21 | 5.4 Medium |
| Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L. | ||||