|
289681
|
- |
|
cisco
|
unified_ip_phone_firmware
unified_ip_phone_8945
|
The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of service (device hang) via a malformed PNG file, aka Bug ID CSCud04270.
|
CWE-20
Improper Input Validation
|
CVE-2013-3468
|
2024-11-21 10:53 |
2013-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289682
|
- |
|
cisco
|
secure_access_control_server
|
The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which al…
|
CWE-287
Improper Authentication
|
CVE-2013-3466
|
2024-11-21 10:53 |
2013-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289683
|
- |
|
opensuse
xen
|
opensuse
xen
|
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-3495
|
2024-11-21 10:53 |
2013-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289684
|
- |
|
dell
|
latitude_e6400_atg
precision_m6500
precision_m4300
latitude_d630
latitude_e6400_atg_xfr
precision_m4400
latitude_d631
latitude_d530
latitude_d531
precision_m6400
precisi…
|
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitra…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-3582
|
2024-11-21 10:53 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289685
|
- |
|
emc
|
rsa_authentication_agent
|
EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it…
|
CWE-255
Credentials Management
|
CVE-2013-3271
|
2024-11-21 10:53 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289686
|
- |
|
searchblox
|
searchblox
|
Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the name parameter.
|
CWE-22
Path Traversal
|
CVE-2013-3598
|
2024-11-21 10:53 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289687
|
- |
|
searchblox
|
searchblox
|
servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.
|
CWE-200
Information Exposure
|
CVE-2013-3597
|
2024-11-21 10:53 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289688
|
- |
|
searchblox
|
searchblox
|
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code by uploading an executable file with the image/jpeg…
|
NVD-CWE-Other
|
CVE-2013-3590
|
2024-11-21 10:53 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289689
|
- |
|
samsung
|
smart_viewer
dvr
|
Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.
|
CWE-287
Improper Authentication
|
CVE-2013-3586
|
2024-11-21 10:53 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
289690
|
- |
|
samsung
|
smart_viewer
|
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) direct access to a file …
|
CWE-255
Credentials Management
|
CVE-2013-3585
|
2024-11-21 10:53 |
2013-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
