CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In December 2019 (CVSS score >= 3)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2013-5978 79 1 XSS 2019-12-11 2019-12-16
4.3
 None Remote Medium Not required None Partial None
Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Product name or (2) Price description fields via a request to wp-admin/admin.php. NOTE: This issue may only cross privilege boundaries if used in combination with CVE-2013-5977.
2 CVE-2013-4985 863 1 Bypass 2019-12-27 2020-01-17
5.0
 None Remote Low Not required Partial None None
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
3 CVE-2013-4868 200 1 +Info 2019-12-27 2020-01-08
5.0
 None Remote Low Not required Partial None None
Karotz API 12.07.19.00: Session Token Information Disclosure
4 CVE-2013-4867 269 1 2019-12-27 2020-01-13
6.2
 None Local High Not required Complete Complete Complete
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
5 CVE-2013-4859 276 1 2019-12-27 2020-01-09
9.3
 None Remote Medium Not required Complete Complete Complete
INSTEON Hub 2242-222 lacks Web and API authentication
6 CVE-2013-4743 120 1 Overflow 2019-12-27 2020-01-07
7.5
 None Remote Low Not required Partial Partial Partial
Static HTTP Server 1.0 has a Local Overflow
7 CVE-2013-4695 763 1 Exec Code 2019-12-27 2020-01-04
6.8
 None Remote Medium Not required Partial Partial Partial
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
Total number of vulnerabilities : 7   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.