Skip to content
OpenAdvisories

Archive

February 2013

Vulnerabilities first published in this month (UTC), newest first.

405 results · Feed

  • Unscored —

    SQL injection vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote au…

  • Unscored —

    The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implementations in Mozilla Firefox before 19.0, Firefox E…

  • Unscored —

    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.…

  • Unscored —

    The ClusterIterator::NextCluster function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey befo…

  • Unscored —

    Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.…

  • Unscored —

    The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2…

  • Unscored —

    Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox…

  • Unscored —

    Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Fire…

  • Unscored —

    Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0, Thunderbird…

  • Unscored —

    Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 do not prevent multiple wrapping of W…

  • Unscored —

    The nsCodingStateMachine::NextState function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey b…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0…

  • Unscored —

    Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0, Thunderbird bef…

  • Unscored —

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, a…

  • Unscored —

    Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Fir…

  • Unscored —

    The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application …

  • Unscored —

    Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service (memory consumption and …

  • Unscored —

    The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG…

  • Unscored —

    The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to by…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork 6.1 before SP1 allow remote attackers to in…

  • Unscored —

    Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local user…

  • Unscored —
    CVE-2012-6533 Public exploit

    Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and …

  • Unscored —
    CVE-2012-5375 Public exploit

    The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial …

  • Unscored —

    The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial …

  • Unscored —

    Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a…

  • Unscored —
    CVE-2013-0268 Public exploit

    The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended c…

  • Unscored —

    Memory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux kernel before 3.7.8 allo…

  • Unscored —
    CVE-2013-0160 Public exploit

    The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the i…

  • Unscored —

    The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop…

  • Unscored —
    CVE-2012-4530 Public exploit

    The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, whi…

  • Unscored —

    The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute…

  • Unscored —

    The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files…

  • Unscored —

    sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user I…

  • Unscored —

    Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to exe…

  • Unscored —

    upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows re…

  • Unscored —

    Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows…

  • Unscored —

    Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remo…

  • Unscored —

    Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows…

  • Unscored —

    Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain se…

  • Unscored —
    CVE-2013-0658 Public exploit EPSS 22%

    Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows rem…