Archive
8 February 2013
Vulnerabilities first published on this day (UTC), newest first.
21 results · Feed
-
Unscored —
Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2…
-
Unscored —CVE-2013-0189 EPSS 22%
cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a d…
-
Medium —
Rack arbitrary code execution via timing attack
Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involvin…
-
Unscored —
Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.…
-
Medium —
Rack Vulnerable to Path Traversal
rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remot…
-
Unscored —CVE-2013-1465 Public exploit
The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to u…
-
Unscored —CVE-2013-0166 EPSS 20%
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification fo…
-
Unscored —
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…
-
Unscored —
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attack…
-
Unscored —
Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service …
-
Unscored —
The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider…
-
Medium —
Improper Input Validation in Bouncy Castle
The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote att…
-
Unscored —
The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check oper…
-
Unscored —
The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on…
-
Unscored —
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 be…
-
Unscored —
Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x…
-
Unscored —
Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 1…
-
Unscored —
Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.
-
Unscored —
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass…
-
Unscored —CVE-2013-1638 Public exploit
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.
-
Unscored —
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlie…