Latest CVE Feed
-
7.5
HIGHCVE-2013-7286
MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm... Read more
- EPSS Score: %0.34
- Published: Feb. 12, 2020
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2013-7245
The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859.... Read more
- EPSS Score: %0.27
- Published: Apr. 24, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.... Read more
Affected Products : gitolite- EPSS Score: %0.08
- Published: Sep. 21, 2018
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2013-7202
The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.... Read more
Affected Products : paypal- EPSS Score: %1.40
- Published: Apr. 27, 2018
- Modified: Nov. 21, 2024
-
7.4
HIGHCVE-2013-7201
WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.... Read more
Affected Products : paypal- EPSS Score: %0.90
- Published: Apr. 27, 2018
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2013-7185
PotPlayer 1.5.40688: .avi File Memory Corruption... Read more
Affected Products : potplayer- EPSS Score: %1.64
- Published: Jan. 14, 2020
- Modified: Nov. 21, 2024
-
10.0
HIGH- EPSS Score: %0.45
- Published: Feb. 13, 2020
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2013-7172
Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.... Read more
Affected Products : slackware_linux- EPSS Score: %0.13
- Published: Nov. 21, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2013-7171
Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges.... Read more
Affected Products : slackware_linux- EPSS Score: %4.07
- Published: Nov. 21, 2019
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2013-7098
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.... Read more
Affected Products : openconnect- EPSS Score: %0.68
- Published: Feb. 13, 2020
- Modified: Nov. 21, 2024
-
7.5
HIGH- EPSS Score: %0.36
- Published: Nov. 15, 2019
- Modified: Nov. 21, 2024
-
9.8
CRITICAL- EPSS Score: %0.54
- Published: Nov. 15, 2019
- Modified: Nov. 21, 2024
-
9.8
CRITICAL- EPSS Score: %0.38
- Published: Nov. 15, 2019
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2013-7071
Cross-site scripting (XSS) vulnerability in the handle_request function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.... Read more
Affected Products : monitorix- EPSS Score: %0.58
- Published: Dec. 31, 2019
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2013-7070
The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI.... Read more
Affected Products : monitorix- EPSS Score: %4.63
- Published: Dec. 31, 2019
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2013-7062
Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote attackers to inject arbitrary web script or HTML via unsp... Read more
Affected Products : plone- EPSS Score: %0.76
- Published: Jan. 02, 2020
- Modified: Nov. 21, 2024
-
9.8
CRITICAL- EPSS Score: %49.26
- Published: Feb. 04, 2020
- Modified: Nov. 21, 2024
-
6.1
MEDIUM- EPSS Score: %14.46
- Published: Feb. 04, 2020
- Modified: Nov. 21, 2024
-
8.8
HIGH- EPSS Score: %1.31
- Published: Feb. 04, 2020
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2013-7052
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script... Read more
- EPSS Score: %42.70
- Published: Feb. 04, 2020
- Modified: Nov. 21, 2024