Latest CVE Feed
-
9.1
CRITICALCVE-2013-10002
A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is ... Read more
- EPSS Score: %0.20
- Published: May. 24, 2022
- Modified: Nov. 21, 2024
-
5.9
MEDIUMCVE-2013-10001
A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used.... Read more
- EPSS Score: %0.25
- Published: May. 17, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2013-0803
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.... Read more
Affected Products : polarbear_cms- EPSS Score: %83.94
- Published: Feb. 11, 2020
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2013-0739
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.... Read more
- EPSS Score: %0.23
- Published: Jan. 30, 2020
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2013-0738
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.... Read more
- EPSS Score: %0.23
- Published: Jan. 30, 2020
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2013-0737
Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter.... Read more
Affected Products : boltwire- EPSS Score: %0.20
- Published: Jan. 02, 2020
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2013-0725
ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities... Read more
Affected Products : erdas_er_viewer- EPSS Score: %0.06
- Published: Jan. 30, 2020
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2013-0594
Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. IBM X-Force ID: 83383.... Read more
Affected Products : inotes- EPSS Score: %0.15
- Published: Jul. 11, 2018
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2013-0592
Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 83815.... Read more
Affected Products : inotes- EPSS Score: %0.13
- Published: Jul. 11, 2018
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2013-0589
IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mechanism and obtain sensitive information via a crafted e-mail message. IBM X-Force ID: 83371.... Read more
Affected Products : inotes- EPSS Score: %0.17
- Published: Jul. 11, 2018
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2013-0570
The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all... Read more
- EPSS Score: %0.18
- Published: Jul. 13, 2018
- Modified: Nov. 21, 2024
-
7.0
HIGHCVE-2013-0522
The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmis... Read more
- EPSS Score: %0.04
- Published: Jul. 16, 2018
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2013-0517
A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.... Read more
Affected Products : sterling_external_authentication_server- EPSS Score: %0.12
- Published: Feb. 11, 2020
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2013-0507
IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability... Read more
Affected Products : infosphere_information_server- EPSS Score: %0.23
- Published: Feb. 05, 2020
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.... Read more
Affected Products : pyrad- EPSS Score: %1.29
- Published: Dec. 09, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUM- EPSS Score: %0.11
- Published: Dec. 05, 2019
- Modified: Nov. 21, 2024
-
5.9
MEDIUMCVE-2013-0294
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.... Read more
- EPSS Score: %1.88
- Published: Jan. 28, 2020
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2013-0293
oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation... Read more
Affected Products : node- EPSS Score: %0.13
- Published: Dec. 10, 2019
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2013-0291
NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability... Read more
Affected Products : nextgen_gallery- EPSS Score: %32.11
- Published: Jan. 30, 2020
- Modified: Nov. 21, 2024
-
5.4
MEDIUM- EPSS Score: %0.08
- Published: Jan. 27, 2020
- Modified: Nov. 21, 2024