cve.nowby Sazabi

CVEs published December 5, 2013

29 CVEs were published on December 5, 2013: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 29
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 29
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 29

CVE-2013-3921Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a…UnratedDec 5, 2013
CVE-2013-5108Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject…UnratedDec 5, 2013
CVE-2013-6267Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.11.9 allow remote attackers to inject arbitrary web script or…UnratedDec 5, 2013
CVE-2013-6341SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language…UnratedDec 5, 2013
CVE-2013-6395Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web…UnratedDec 5, 2013
CVE-2013-6787SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the…UnratedDec 5, 2013
CVE-2013-6804Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web…UnratedDec 5, 2013
CVE-2013-6000Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to read arbitrary files via a ..UnratedDec 5, 2013
CVE-2013-6001SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary…UnratedDec 5, 2013
CVE-2013-6002The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.UnratedDec 5, 2013
CVE-2013-6003CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated…UnratedDec 5, 2013
CVE-2013-6004Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors.UnratedDec 5, 2013
CVE-2013-6900Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to…UnratedDec 5, 2013
CVE-2013-6901Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote…UnratedDec 5, 2013
CVE-2013-6902Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary…UnratedDec 5, 2013
CVE-2013-6903Cross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used…UnratedDec 5, 2013
CVE-2013-6904Cross-site scripting (XSS) vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used…UnratedDec 5, 2013
CVE-2013-6905Cross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used…UnratedDec 5, 2013
CVE-2013-6906Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used…UnratedDec 5, 2013
CVE-2013-6907Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject…UnratedDec 5, 2013
CVE-2013-6908Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0 allows remote attackers to inject arbitrary…UnratedDec 5, 2013
CVE-2013-6909Cross-site scripting (XSS) vulnerability in a report component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary…UnratedDec 5, 2013
CVE-2013-6910Cross-site scripting (XSS) vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web…UnratedDec 5, 2013
CVE-2013-6911Cross-site scripting (XSS) vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox…UnratedDec 5, 2013
CVE-2013-6912Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is…UnratedDec 5, 2013

Show all 29 entriesShow fewer entries