|
283641
|
- |
|
mcafee
|
vulnerability_manager
|
Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2013-5094
|
2024-11-21 10:57 |
2014-01-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283642
|
- |
|
secunia
|
csi_agent
|
Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-5364
|
2024-11-21 10:57 |
2014-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283643
|
- |
|
tejimaya
|
openpne
|
The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly vali…
|
CWE-20
Improper Input Validation
|
CVE-2013-5350
|
2024-11-21 10:57 |
2014-01-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283644
|
- |
|
thecus
|
n8800_nas_server_firmware n8800_nas_server
|
The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.
|
CWE-255
Credentials Management
|
CVE-2013-5669
|
2024-11-21 10:57 |
2014-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283645
|
- |
|
thecus
|
n8800_nas_server_firmware n8800_nas_server
|
The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content.
|
CWE-255
Credentials Management
|
CVE-2013-5668
|
2024-11-21 10:57 |
2014-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283646
|
- |
|
thecus
|
n8800_nas_server_firmware n8800_nas_server
|
The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell metacharacters in the username parameter.
|
CWE-78
OS Command
|
CVE-2013-5667
|
2024-11-21 10:57 |
2014-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283647
|
- |
|
ibm
|
tivoli_storage_manager
|
The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-5371
|
2024-11-21 10:57 |
2014-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283648
|
- |
|
ibm
|
tivoli_federated_identity_manager
|
The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 before FP9 does not prevent …
|
CWE-287
Improper Authentication
|
CVE-2013-5429
|
2024-11-21 10:57 |
2014-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283649
|
- |
|
google
|
picasa
|
Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file w…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-5359
|
2024-11-21 10:57 |
2014-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
283650
|
- |
|
google
|
picasa
|
Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-5358
|
2024-11-21 10:57 |
2014-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|