Filtered by CWE-20
Total 12275 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-5106 1 Python-mode Project 1 Python-mode 2024-11-21 8.8 High
A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19.
CVE-2013-4751 3 Fedoraproject, Redhat, Sensiolabs 3 Fedora, Enterprise Linux, Symfony 2024-11-21 8.1 High
php-symfony2-Validator has loss of information during serialization
CVE-2013-4535 2 Qemu, Redhat 8 Qemu, Enterprise Linux, Enterprise Linux Desktop and 5 more 2024-11-21 8.8 High
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
CVE-2013-4409 3 Fedoraproject, Redhat, Reviewboard 4 Fedora, Enterprise Linux, Djblets and 1 more 2024-11-21 9.8 Critical
An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.
CVE-2013-4245 2 Debian, Gnome 2 Debian Linux, Orca 2024-11-21 7.3 High
Orca has arbitrary code execution due to insecure Python module load
CVE-2013-4144 1 Swfupload Project 1 Swfupload 2024-11-21 9.8 Critical
There is an object injection vulnerability in swfupload plugin for wordpress.
CVE-2013-4103 1 Cryptocat Project 1 Cryptocat 2024-11-21 9.8 Critical
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
CVE-2013-4101 1 Cryptocat Project 1 Cryptocat 2024-11-21 5.3 Medium
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness
CVE-2013-4100 1 Cryptocat Project 1 Cryptocat 2024-11-21 7.5 High
Cryptocat before 2.0.22 has Remote Denial of Service via username
CVE-2013-3945 1 Extensis 1 Mrsid 2024-11-21 7.8 High
The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.
CVE-2013-3738 1 Zabbix 1 Zabbix 2024-11-21 9.8 Critical
A File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request strings in CGI scripts, which could let a remote malicious user execute arbitrary code.
CVE-2013-3718 4 Debian, Gnome, Opensuse and 1 more 4 Debian Linux, Evince, Opensuse and 1 more 2024-11-21 5.5 Medium
evince is missing a check on number of pages which can lead to a segmentation fault
CVE-2013-2571 1 Hcomm 1 Xpient Iris 2024-11-21 9.8 Critical
Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer.
CVE-2013-2259 1 Cryptocat Project 1 Cryptocat 2024-11-21 9.8 Critical
Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview
CVE-2013-2227 2 Debian, Glpi-project 2 Debian Linux, Glpi 2024-11-21 7.5 High
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
CVE-2013-2103 1 Redhat 1 Openshift 2024-11-21 8.1 High
OpenShift cartridge allows remote URL retrieval
CVE-2013-2093 1 Dolibarr 1 Dolibarr Erp\/crm 2024-11-21 9.8 Critical
Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.
CVE-2013-1930 2 Fedoraproject, Mantisbt 2 Fedora, Mantisbt 2024-11-21 4.3 Medium
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.
CVE-2013-1910 2 Baseurl, Debian 2 Yum, Debian Linux 2024-11-21 9.8 Critical
yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository.
CVE-2013-1889 1 Mod Ruid2 Project 1 Mod Ruid2 2024-11-21 7.5 High
mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.