2013-10-03 - CVE Archive

CVE-2013-0742 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory entry name in an XPS. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 76.1%.

Buffer Overflow Denial Of Service RCE Pdf Fusion

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

76.1%

Threat

5.6

CVE-2013-3248 CRITICAL POC THREAT Emergency

Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 59.5%.

Information Disclosure Pdf Fusion

NVD Exploit-DB

CVSS 2.0

9.3

EPSS

59.5%

Threat

5.1

CVE-2013-0692 CRITICAL Act Now

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation RCE Ose Roc 800L Remote Terminal Unit Roc 800 Remote Terminal Unit +1

NVD

CVSS 2.0

10.0

EPSS

4.1%

CVE-2013-0689 CRITICAL Act Now

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection RCE Ose Roc 800L Remote Terminal Unit Roc 800 Remote Terminal Unit +1

NVD

CVSS 2.0

10.0

EPSS

3.3%

CVE-2013-5944 CRITICAL Act Now

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Siemens Authentication Bypass Scalance X 200 Series Firmware Scalance X 200 Scalance X 200Irt

NVD

CVSS 2.0

10.0

EPSS

1.5%

CVE-2013-0693 CRITICAL Act Now

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Ose Roc 800L Remote Terminal Unit Dl 8000 Remote Terminal Unit Roc 800 Remote Terminal Unit

NVD

CVSS 2.0

10.0

EPSS

0.6%

CVE-2013-0694 CRITICAL Act Now

The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Ose Dl 8000 Remote Terminal Unit Roc 800L Remote Terminal Unit Roc 800 Remote Terminal Unit

NVD

CVSS 2.0

9.0

EPSS

0.5%