Skip to content
OpenAdvisories

Archive

24 February 2013

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Medium —
    CVE-2013-0212 Public exploit

    OpenStack Glance logs user name and password in cleartext

    store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote auth…

  • Unscored —
    CVE-2012-5337 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arb…

  • Unscored —
    CVE-2013-0108 Public exploit EPSS 27%

    An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and …

  • Unscored —
    CVE-2012-4705 Public exploit EPSS 65%

    Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2012-6274 Public exploit EPSS 47%

    BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers t…

  • Unscored —
    CVE-2012-6275 Public exploit EPSS 46%

    Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to hav…

  • Unscored —
    CVE-2013-0804 Public exploit EPSS 13%

    The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2012-0439 Public exploit EPSS 39%

    An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows …