|
291491
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Google Chrome caches TLS sessions before certificate validation occurs.
|
CWE-295
Improper Certificate Validation
|
CVE-2013-6662
|
2024-11-21 10:59 |
2017-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291492
|
7.5 |
HIGH
Network
|
google
|
skia
|
SkRegion::setPath in Skia allows remote attackers to cause a denial of service (crash).
|
NVD-CWE-noinfo
|
CVE-2013-6648
|
2024-11-21 10:59 |
2017-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291493
|
9.8 |
CRITICAL
Network
|
google
|
chrome
|
A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.
|
CWE-416
Use After Free
|
CVE-2013-6647
|
2024-11-21 10:59 |
2017-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291494
|
3.1 |
LOW
Network
|
cloudera
|
cdh
|
The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job informatio…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-6446
|
2024-11-21 10:59 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291495
|
- |
|
php suse
|
php linux_enterprise_server
|
The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL …
|
CWE-74
Injection
|
CVE-2013-6501
|
2024-11-21 10:59 |
2015-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291496
|
- |
|
websvn debian
|
websvn debian_linux
|
WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.
|
CWE-200
Information Exposure
|
CVE-2013-6892
|
2024-11-21 10:59 |
2015-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291497
|
- |
|
phpthumb_project
|
phpthumb
|
The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF) attacks via the src par…
|
NVD-CWE-Other
|
CVE-2013-6919
|
2024-11-21 10:59 |
2014-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291498
|
- |
|
rpm debian
|
rpm debian_linux
|
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the sig…
|
CWE-74
Injection
|
CVE-2013-6435
|
2024-11-21 10:59 |
2014-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291499
|
- |
|
fedup_project
|
fedup
|
fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows local users to cause a denial of service (prevention of system updates).
|
CWE-17
Code
|
CVE-2013-6494
|
2024-11-21 10:59 |
2014-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291500
|
- |
|
clamav
|
clamav
|
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
|
CWE-17
Code
|
CVE-2013-6497
|
2024-11-21 10:59 |
2014-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|