2014-01-09 - CVE Archive

CVE-2013-6955 CRITICAL POC THREAT Emergency

webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files,. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 83.3%.

Privilege Escalation Synology RCE Diskstation Manager

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

83.3%

Threat

6.0

CVE-2013-6462 CRITICAL POC THREAT Emergency

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 12.0%.

Buffer Overflow Denial Of Service RCE Libxfont

NVD

CVSS 2.0

9.3

EPSS

12.0%

CVE-2013-7283 CRITICAL POC PATCH Act Now

Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available.

Red Hat Information Disclosure Race Condition Libreswan

NVD GitHub

CVSS 2.0

9.3

EPSS

0.3%