Vulnerability_Archives

CVE_ARCHIVES.DB

ARCHIVE_CHRONOLOGY.INDEXSTATUS: ONLINE

Risk_Filter:

Records: 5,324

Mode: SECURE_QUERY

CVE-2013-3667

MEDIUM

The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly

Discovered

Dec 31, 2013

CVE-2013-3572

MEDIUM

Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remot

Discovered

Dec 31, 2013

CVE-2012-0264

HIGH

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via uns

Discovered

Dec 31, 2013

CVE-2012-0263

MEDIUM

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and

Discovered

Dec 31, 2013

CVE-2012-0262

HIGH

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands

Discovered

Dec 31, 2013

CVE-2012-0261

HIGH

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shel

Discovered

Dec 31, 2013

CVE-2013-6987

HIGH

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 allow remote

Discovered

Dec 31, 2013

CVE-2013-6459

MEDIUM

Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML

Discovered

Dec 31, 2013

CVE-2013-5573

MEDIUM

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HT

Discovered

Dec 31, 2013

CVE-2013-7242

MEDIUM

SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to exe

Discovered

Dec 31, 2013

CVE-2013-7241

MEDIUM

Cross-site scripting (XSS) vulnerability in the export function in zp-core/zp-extensions/mergedRSS.php in Zenphoto before 1.4.5.4 allows remote attack

Discovered

Dec 31, 2013

CVE-2013-6983

MEDIUM

SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands

Discovered

Dec 31, 2013

CVE-2013-7209

MEDIUM

Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authenticati

Discovered

Dec 30, 2013

CVE-2013-7233

MEDIUM

Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows r

Discovered

Dec 30, 2013

CVE-2013-7232

HIGH

SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to

Discovered

Dec 30, 2013

CVE-2013-7231

LOW

Cross-site scripting (XSS) vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inj

Discovered

Dec 30, 2013

CVE-2013-5222

LOW

Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1 allow remote authenticated users to inject arbitrary web script or

Discovered

Dec 30, 2013

CVE-2013-5220

MEDIUM

goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device crash) via crafted HTTP POST d

Discovered

Dec 30, 2013

CVE-2013-5219

LOW

Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in

Discovered

Dec 30, 2013

CVE-2013-5218

LOW

Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML

Discovered

Dec 30, 2013

...