|
286101
|
- |
|
sap
|
production_planning_and_control
|
The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authenticated users to bypass intended transaction restrictions …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-3062
|
2024-11-21 10:52 |
2013-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286102
|
- |
|
sap
|
healthcare_industry_solution erp_central_component
|
The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remot…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-3061
|
2024-11-21 10:52 |
2013-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286103
|
- |
|
crunchify
|
foursquare-checkins
|
Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that in…
|
CWE-352
Origin Validation Error
|
CVE-2013-2709
|
2024-11-21 10:52 |
2013-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286104
|
- |
|
citrix
|
netscaler_access_gateway_firmware netscaler_access_gateway
|
Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows rem…
|
NVD-CWE-noinfo
|
CVE-2013-2767
|
2024-11-21 10:52 |
2013-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286105
|
- |
|
crunchify
|
all-in-on-webmaster
|
Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that…
|
CWE-352
Origin Validation Error
|
CVE-2013-2696
|
2024-11-21 10:52 |
2013-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286106
|
- |
|
lexmark
|
markvision
|
Lexmark Markvision Enterprise before 1.8 provides a diagnostic interface on TCP port 9789, which allows remote attackers to execute arbitrary code, change the configuration, or obtain sensitive fleet…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-3055
|
2024-11-21 10:52 |
2013-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286107
|
- |
|
linux
|
linux_kernel
|
The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvms…
|
CWE-200
Information Exposure
|
CVE-2013-3076
|
2024-11-21 10:52 |
2013-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286108
|
- |
|
siemens
|
simatic_s7-1200_firmware simatic_s7-1200_cpu_1211c_firmware simatic_s7-1200_cpu_1212c_firmware simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1200_cpu_1214_fc_firmware simatic_s7-1200_…
|
Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port).
|
NVD-CWE-noinfo
|
CVE-2013-2780
|
2024-11-21 10:52 |
2013-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286109
|
- |
|
apache
|
activemq
|
The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.
|
CWE-287
Improper Authentication
|
CVE-2013-3060
|
2024-11-21 10:52 |
2013-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
286110
|
- |
|
mitsubishi-automation schneider-electric
|
mitsubishi_mx_component citectfacilities citectscada
|
Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScada 7.10r1, allow remote attackers to execute arbitrary code …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-3075
|
2024-11-21 10:52 |
2013-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|