|
288221
|
7.5 |
HIGH
Network
|
monkey-project
|
monkey
|
The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2013-1771
|
2024-11-21 10:50 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288222
|
9.8 |
CRITICAL
Network
|
twiki
|
twiki
|
TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters.
|
CWE-20
Improper Input Validation
|
CVE-2013-1751
|
2024-11-21 10:50 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288223
|
9.8 |
CRITICAL
Network
|
foswiki
|
foswiki
|
Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.
|
CWE-94
Code Injection
|
CVE-2013-1666
|
2024-11-21 10:50 |
2019-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288224
|
8.8 |
HIGH
Network
|
call-cc
|
chicken
|
Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken through 4.8.0.3 allows attackers to cause a denial of service (crash) by opening …
|
CWE-120
Classic Buffer Overflow
|
CVE-2013-2075
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288225
|
8.8 |
HIGH
Network
|
call-cc debian
|
chicken debian_linux
|
OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.
|
CWE-78
OS Command
|
CVE-2013-2024
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288226
|
7.3 |
HIGH
Local
|
autojump_project debian
|
autojump debian_linux
|
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory.
|
CWE-269
Improper Privilege Management
|
CVE-2013-2012
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288227
|
6.1 |
MEDIUM
Network
|
mediawiki debian
|
mediawiki debian_linux
|
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.
|
CWE-79
Cross-site Scripting
|
CVE-2013-1951
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288228
|
3.3 |
LOW
Local
|
ruby-lang
|
ruby193
|
ruby193 uses an insecure LD_LIBRARY_PATH setting.
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2013-1945
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288229
|
5.4 |
MEDIUM
Network
|
mantisbt debian
|
mantisbt debian_linux
|
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script…
|
CWE-79
Cross-site Scripting
|
CVE-2013-1934
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288230
|
5.4 |
MEDIUM
Network
|
mantisbt
|
mantisbt
|
A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a p…
|
CWE-79
Cross-site Scripting
|
CVE-2013-1932
|
2024-11-21 10:50 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|