Archive
February 2013
Vulnerabilities first published in this month (UTC), newest first.
46 results · Clear filters · Feed
-
Unscored —CVE-2013-1773 Public exploit
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privile…
-
Unscored —CVE-2013-1763 Public exploit
Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows …
-
Medium —CVE-2013-0212 Public exploit
OpenStack Glance logs user name and password in cleartext
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote auth…
-
Unscored —CVE-2012-5337 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arb…
-
Unscored —
An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and …
-
Unscored —
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbit…
-
Unscored —
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers t…
-
Unscored —
Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to hav…
-
Unscored —
The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrar…
-
Unscored —
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows …
-
Unscored —CVE-2012-6533 Public exploit
Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and …
-
Unscored —CVE-2012-5375 Public exploit
The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial …
-
Unscored —CVE-2013-0268 Public exploit
The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended c…
-
Unscored —CVE-2013-0160 Public exploit
The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the i…
-
Unscored —CVE-2012-4530 Public exploit
The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, whi…
-
Unscored —
Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows rem…
-
Unscored —
Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView…
-
Unscored —CVE-2013-1402 Public exploit
DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain se…
-
High 7.8
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…
KEV Mar 3, 2022 -
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject …
-
Critical 9.1
Zend Framework XXE Vulnerability
Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element …
-
Unscored —
Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary c…
-
Unscored —
Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a c…
-
High —
JSON gem has Improper Input Validation vulnerability
The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creatio…
-
Unscored —CVE-2013-0238 Public exploit
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which all…
-
Unscored —CVE-2013-1453 Public exploit
plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unser…
-
Unscored —CVE-2011-5258 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbit…
-
Unscored —CVE-2011-5259 Public exploit
SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attacke…
-
Unscored —CVE-2011-5257 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote at…
-
Unscored —CVE-2011-5261 Public exploit
Cross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and…
-
Unscored —CVE-2011-5262 Public exploit
SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2011-5265 Public exploit
Cross-site scripting (XSS) vulnerability in cached_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress…
-
Unscored —CVE-2013-1406 Public exploit
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 an…
-
Unscored —CVE-2013-1465 Public exploit
The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to u…
-
Unscored —
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…
-
Unscored —
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 be…
-
Unscored —
Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x…
-
Unscored —
Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 1…
-
Unscored —CVE-2013-1638 Public exploit
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.
-
Unscored —CVE-2013-1464 Public exploit
Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress a…