Filtered by vendor Subscriptions
Total 323390 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-6236 1 Izoncam 2 Izon Ip, Izon Ip Firmware 2024-11-21 9.8 Critical
IZON IP 2.0.2: hard-coded password vulnerability
CVE-2013-6234 1 Eng 1 Spagobi 2024-11-21 8.0 High
Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, aka "XSS File Upload."
CVE-2013-6231 1 Eng 1 Spagobi 2024-11-21 8.8 High
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
CVE-2013-6225 1 Livezilla 1 Livezilla 2024-11-21 9.8 Critical
LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
CVE-2013-6056 1 Alienvault 1 Open Source Security Information Management 2024-11-21 7.5 High
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
CVE-2013-6022 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 6.1 Medium
A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user execute arbitrary code.
CVE-2013-5988 1 Semperplugins 1 All In One Seo Pack 2024-11-21 6.1 Medium
A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
CVE-2013-5978 1 Cart66 1 Cart66 Lite Plugin 2024-11-21 6.1 Medium
Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Product name or (2) Price description fields via a request to wp-admin/admin.php. NOTE: This issue may only cross privilege boundaries if used in combination with CVE-2013-5977.
CVE-2013-5945 1 Dlink 16 Dsr-1000, Dsr-1000 Firmware, Dsr-1000n and 13 more 2024-11-21 9.8 Critical
Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary SQL commands via the password to (1) the login.authenticate function in share/lua/5.1/teamf1lualib/login.lua or (2) captivePortal.lua.
CVE-2013-5743 1 Zabbix 1 Zabbix 2024-11-21 9.8 Critical
Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.
CVE-2013-5687 1 Aicorporation 1 Risknet Acquirer 2024-11-21 7.5 High
RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.
CVE-2013-5661 4 Isc, Nic, Nlnetlabs and 1 more 4 Bind, Knot Resolver, Nsd and 1 more 2024-11-21 5.9 Medium
Cache Poisoning issue exists in DNS Response Rate Limiting.
CVE-2013-5659 1 Info-zip 1 Wiz 2024-11-21 7.5 High
Wiz 5.0.3 has a user mode write access violation
CVE-2013-5658 1 Aultware 1 Pwstore 2024-11-21 6.1 Medium
AultWare pwStore 2010.8.30.0 has XSS
CVE-2013-5657 1 Aultware 1 Pwstore 2024-11-21 7.5 High
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
CVE-2013-5656 1 Fuzezip Project 1 Fuzezip 2024-11-21 7.8 High
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
CVE-2013-5654 1 Yingzhipython Project 1 Yingzhipython 2024-11-21 N/A
Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage
CVE-2013-5638 1 Transcend-info 2 Wifisd, Wifisd Firmware 2024-11-21 5.4 Medium
Transcend WiFiSD 1.8 has persistent XSS
CVE-2013-5637 1 Pqigroup 2 Air Card, Air Card Firmware 2024-11-21 5.4 Medium
PQI AirCard has persistent XSS
CVE-2013-5594 1 Mozilla 1 Firefox 2024-11-21 4.3 Medium
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding