|
291231
|
9.8 |
CRITICAL
Network
|
foswiki
|
foswiki
|
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.
|
CWE-94
Code Injection
|
CVE-2013-1666
|
2024-11-21 10:50 |
2019-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291232
|
8.8 |
HIGH
Network
|
call-cc
|
chicken
|
Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening …
|
CWE-120
Classic Buffer Overflow
|
CVE-2013-2075
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291233
|
8.8 |
HIGH
Network
|
call-cc debian
|
chicken debian_linux
|
OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.
|
CWE-78
OS Command
|
CVE-2013-2024
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291234
|
7.3 |
HIGH
Local
|
autojump_project debian
|
autojump debian_linux
|
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory.
|
CWE-269
Improper Privilege Management
|
CVE-2013-2012
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291235
|
6.1 |
MEDIUM
Network
|
mediawiki debian
|
mediawiki debian_linux
|
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.
|
CWE-79
Cross-site Scripting
|
CVE-2013-1951
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291236
|
3.3 |
LOW
Local
|
ruby-lang
|
ruby193
|
ruby193 uses an insecure LD_LIBRARY_PATH setting.
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2013-1945
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291237
|
5.4 |
MEDIUM
Network
|
mantisbt debian
|
mantisbt debian_linux
|
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script…
|
CWE-79
Cross-site Scripting
|
CVE-2013-1934
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291238
|
5.4 |
MEDIUM
Network
|
mantisbt
|
mantisbt
|
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a p…
|
CWE-79
Cross-site Scripting
|
CVE-2013-1932
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291239
|
6.1 |
MEDIUM
Network
|
mantisbt fedoraproject
|
mantisbt fedora
|
A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.
|
CWE-79
Cross-site Scripting
|
CVE-2013-1931
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291240
|
4.3 |
MEDIUM
Network
|
mantisbt fedoraproject
|
mantisbt fedora
|
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.
|
CWE-20
Improper Input Validation
|
CVE-2013-1930
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|