Archive
February 2013
Vulnerabilities first published in this month (UTC), newest first.
405 results · Feed
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 1…
-
Unscored —CVE-2013-1368 EPSS 10%
Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 an…
-
Unscored —CVE-2013-1373 EPSS 10%
Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 an…
-
Unscored —CVE-2013-1367 EPSS 10%
Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 an…
-
Unscored —CVE-2013-1406 Public exploit
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 an…
-
Unscored —
Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2…
-
Unscored —CVE-2013-0189 EPSS 22%
cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a d…
-
Medium —
Rack arbitrary code execution via timing attack
Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involvin…
-
Unscored —
Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.…
-
Medium —
Rack Vulnerable to Path Traversal
rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remot…
-
Unscored —CVE-2013-1465 Public exploit
The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to u…
-
Unscored —CVE-2013-0166 EPSS 20%
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification fo…
-
Unscored —
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…
-
Unscored —
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attack…
-
Unscored —
Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service …
-
Unscored —
The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider…
-
Medium —
Improper Input Validation in Bouncy Castle
The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote att…
-
Unscored —
The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check oper…
-
Unscored —
The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on…
-
Unscored —
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 be…
-
Unscored —
Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x…
-
Unscored —
Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 1…
-
Unscored —
Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.
-
Unscored —
Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass…
-
Unscored —CVE-2013-1638 Public exploit
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.
-
Unscored —
Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlie…
-
Unscored —CVE-2013-1464 Public exploit
Cross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress a…
-
Unscored —CVE-2013-1463 Public exploit
Cross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.…
-
Unscored —
The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses we…
-
Unscored —
The search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users to read files via uns…
-
Unscored —CVE-2013-1120 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow re…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x b…
-
Unscored —
Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote …
-
Unscored —
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attack…
-
Unscored —
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attack…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow…
-
Unscored —CVE-2012-3283 EPSS 10%
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attack…
-
Unscored —
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attack…
-
Unscored —
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 doe…
-
Unscored —
Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow…