Skip to content
OpenAdvisories

Archive

February 2013

Vulnerabilities first published in this month (UTC), newest first.

← January 2013 2013 / February March 2013 →
  1. 11
  2. 251
  3. 319
  4. 41
  5. 510
  6. 615
  7. 72
  8. 821
  9. 9 
  10. 10 
  11. 111
  12. 1227
  13. 1379
  14. 149
  15. 1511
  16. 167
  17. 17 
  18. 1812
  19. 1918
  20. 2022
  21. 215
  22. 2210
  23. 2323
  24. 2434
  25. 251
  26. 262
  27. 2714
  28. 2810
All Critical High Medium Low Exploited only Public exploit

405 results · Feed

  • Unscored —
    CVE-2013-0220

    The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd…

    sssd Debian
  • Unscored —
    CVE-2013-0219

    System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home direct…

    sssd Debian
  • Unscored —
    CVE-2012-6093

    The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versi…

  • Unscored —
    CVE-2012-6128

    Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial …

    openconnect Debian
  • Unscored —
    CVE-2012-5624

    The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middl…

  • Unscored —
    CVE-2013-0108 Public exploit EPSS 27%

    An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and …

  • Unscored —
    CVE-2013-0785

    Cross-site scripting (XSS) vulnerability in show_bug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0.x before 4.0.10, 4.1.…

  • Unscored —
    CVE-2013-0786

    The Bugzilla::Search::build_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 …

  • Unscored —
    CVE-2013-0118

    CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient…

  • Unscored —
    CVE-2013-0120

    The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service (device cras…

  • Unscored —
    CVE-2013-0113

    Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of ser…

  • Unscored —
    CVE-2012-4706

    Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2012-4704

    Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2012-4708

    Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2012-4705 Public exploit EPSS 65%

    Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2012-4707

    3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an…

  • Unscored —
    CVE-2012-6273

    SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2012-6274 Public exploit EPSS 47%

    BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers t…

  • Unscored —
    CVE-2012-6275 Public exploit EPSS 46%

    Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to hav…

  • Unscored —
    CVE-2013-0804 Public exploit EPSS 13%

    The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2012-0439 Public exploit EPSS 39%

    An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows …

  • Unscored —
    CVE-2013-0883

    Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows re…

  • Unscored —
    CVE-2013-0881

    Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to…

  • Unscored —
    CVE-2013-0900

    Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on …

    icu Debian
  • Unscored —
    CVE-2013-0897

    Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.13…

  • Unscored —
    CVE-2013-0891

    Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows…

  • Unscored —
    CVE-2013-0879

    Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly implemen…

  • Unscored —
    CVE-2013-0895

    Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames dur…

  • Unscored —
    CVE-2013-0888

    Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows re…

  • Unscored —
    CVE-2013-0894

    Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFm…

    ffmpeg Debian
  • Unscored —
    CVE-2013-0885

    Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict…

  • Unscored —
    CVE-2013-0890

    Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and be…

  • Unscored —
    CVE-2013-0886

    Google Chrome before 25.0.1364.99 on Mac OS X does not properly implement signal handling for Native Client (aka NaCl) …

  • Unscored —
    CVE-2013-0892

    Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and be…

  • Unscored —
    CVE-2013-0884

    Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly load Nat…

  • Unscored —
    CVE-2013-0899

    Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus bef…

    opus Debian
  • Unscored —
    CVE-2013-0898

    Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac …

  • Unscored —
    CVE-2013-0896

    Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage m…

  • Unscored —
    CVE-2013-0882

    Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to…

  • Unscored —
    CVE-2013-0893

    Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows r…