|
288681
|
7.5 |
HIGH
Network
|
alienvault
|
open_source_security_information_management
|
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
|
CWE-22
Path Traversal
|
CVE-2013-6056
|
2024-11-21 10:58 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288682
|
9.8 |
CRITICAL
Network
|
livezilla
|
livezilla
|
LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
|
CWE-22
Path Traversal
|
CVE-2013-6225
|
2024-11-21 10:58 |
2020-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288683
|
8.8 |
HIGH
Network
|
eng
|
spagobi
|
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
|
CWE-269
Improper Privilege Management
|
CVE-2013-6231
|
2024-11-21 10:58 |
2020-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288684
|
6.1 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject arbitrary web script …
|
CWE-79
Cross-site Scripting
|
CVE-2013-6242
|
2024-11-21 10:58 |
2020-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288685
|
6.1 |
MEDIUM
Network
|
cart66
|
cart66_lite_plugin
|
Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) P…
|
CWE-79
Cross-site Scripting
|
CVE-2013-5978
|
2024-11-21 10:58 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288686
|
9.8 |
CRITICAL
Network
|
zabbix
|
zabbix
|
Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.
|
CWE-89
SQL Injection
|
CVE-2013-5743
|
2024-11-21 10:58 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288687
|
6.1 |
MEDIUM
Network
|
exis-ti
|
exis_contexis
|
Cross-site scripting (XSS) vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail acti…
|
CWE-79
Cross-site Scripting
|
CVE-2013-6239
|
2024-11-21 10:58 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288688
|
8.0 |
HIGH
Network
|
eng
|
spagobi
|
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, th…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2013-6234
|
2024-11-21 10:58 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288689
|
6.5 |
MEDIUM
Network
|
horde debian
|
groupware debian_linux
|
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
|
CWE-352
Origin Validation Error
|
CVE-2013-6275
|
2024-11-21 10:58 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
288690
|
7.8 |
HIGH
Local
|
google
|
android
|
The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone call…
|
CWE-284
Improper Access Control
|
CVE-2013-6272
|
2024-11-21 10:58 |
2018-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|