|
284691
|
- |
|
apache
|
tomcat
|
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which al…
|
CWE-20
Improper Input Validation
|
CVE-2013-4286
|
2024-11-21 10:55 |
2014-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284692
|
- |
|
feep
|
libtar
|
Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (d…
|
CWE-22
Path Traversal
|
CVE-2013-4420
|
2024-11-21 10:55 |
2014-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284693
|
- |
|
bean_project
|
bean
|
Cross-site scripting (XSS) vulnerability in the Bean module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the bean title.
|
CWE-79
Cross-site Scripting
|
CVE-2013-4499
|
2024-11-21 10:55 |
2014-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284694
|
- |
|
redhat
suse
|
satellite
satellite_5_managed_db
spacewalk-java
spacewalk-web
manager
|
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variab…
|
CWE-79
Cross-site Scripting
|
CVE-2013-4415
|
2024-11-21 10:55 |
2014-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284695
|
- |
|
openstack
|
havana
grizzly
folsom
|
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumpti…
|
CWE-399
Resource Management Errors
|
CVE-2013-4463
|
2024-11-21 10:55 |
2014-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284696
|
- |
|
debian
openldap
|
debian_linux
openldap
|
The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service (slapd crash) by unbinding immediately after a s…
|
CWE-189
Numeric Errors
|
CVE-2013-4449
|
2024-11-21 10:55 |
2014-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284697
|
- |
|
robert_ancell
|
lightdm
|
Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensit…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4331
|
2024-11-21 10:55 |
2014-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284698
|
- |
|
dennis_bruecke
|
jquery_countdown
|
Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject…
|
CWE-79
Cross-site Scripting
|
CVE-2013-4383
|
2024-11-21 10:55 |
2014-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284699
|
- |
|
mediawiki
brion_vibber
|
mediawiki
centralauth_extension
|
The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a valid CentralAuthUser object in the centralauth_User cookie even when a user has …
|
CWE-287
Improper Authentication
|
CVE-2013-4304
|
2024-11-21 10:55 |
2014-01-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284700
|
- |
|
plone
|
plone
|
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-4200
|
2024-11-21 10:55 |
2014-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
