Search Results (77031 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-6277 1 Qnap 2 Viocard 300, Viocard 300 Firmware 2024-08-06 7.5 High
QNAP VioCard 300 has hardcoded RSA private keys.
CVE-2013-6231 1 Eng 1 Spagobi 2024-08-06 8.8 High
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
CVE-2013-6056 1 Alienvault 1 Open Source Security Information Management 2024-08-06 7.5 High
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
CVE-2023-33322 2024-08-06 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design Front End Users allows Reflected XSS.This issue affects Front End Users: from n/a before 3.2.25.
CVE-2013-5687 1 Aicorporation 1 Risknet Acquirer 2024-08-06 7.5 High
RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.
CVE-2013-5657 1 Aultware 1 Pwstore 2024-08-06 7.5 High
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
CVE-2013-5656 1 Fuzezip Project 1 Fuzezip 2024-08-06 7.8 High
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
CVE-2013-5659 1 Info-zip 1 Wiz 2024-08-06 7.5 High
Wiz 5.0.3 has a user mode write access violation
CVE-2013-5582 1 Ammyy 1 Ammyy Admin 2024-08-06 7.8 High
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AA_v3.2.exe file.
CVE-2013-5116 1 Evernote 1 Evernote 2024-08-06 7.1 High
Evernote prior to 5.5.1 has insecure password change
CVE-2013-5106 1 Python-mode Project 1 Python-mode 2024-08-06 8.8 High
A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19.
CVE-2013-4985 1 Vivotek 6 Ip7160, Ip7160 Firmware, Ip7361 and 3 more 2024-08-06 7.5 High
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
CVE-2013-4975 1 Hikvision 2 Ds-2cd7153-e, Ds-2cd7153-e Firmware 2024-08-06 8.8 High
Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
CVE-2013-4859 1 Insteon 2 Hub, Hub Firmware 2024-08-06 8.1 High
INSTEON Hub 2242-222 lacks Web and API authentication
CVE-2013-4848 1 Tp-link 2 Tl-wdr4300, Tl-wdr4300 Firmware 2024-08-06 8.8 High
TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
CVE-2013-4863 1 Micasaverde 2 Veralite, Veralite Firmware 2024-08-06 8.8 High
The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote authenticated users to execute arbitrary Lua code via a RunLua action in a request to port_49451/upnp/control/hag.
CVE-2013-4862 1 Micasaverde 2 Veralite, Veralite Firmware 2024-08-06 8.1 High
MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.
CVE-2013-4695 1 Winamp 1 Winamp 2024-08-06 7.8 High
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
CVE-2013-4796 1 Reviewboard 1 Reviewboard 2024-08-06 8.8 High
ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
CVE-2013-4717 1 Otrs 2 Otrs, Otrs Itsm 2024-08-06 8.8 High
Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm.