28 March 2013

35 results · Feed

• Unscored —
  CVE-2013-1861 Public exploit EPSS 19%

  MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69…

  Mar 28, 2013
• Unscored —
  CVE-2013-1146

  The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attac…

  Mar 28, 2013
• Unscored —
  CVE-2013-1143

  The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S…

  Mar 28, 2013
• Unscored —
  CVE-2013-1148

  The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.x…

  Mar 28, 2013
• Unscored —
  CVE-2013-1492

  Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and atta…

  Mar 28, 2013
• Unscored —
  CVE-2013-1142

  Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attacker…

  Mar 28, 2013
• Unscored —
  CVE-2013-1747

  channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via …

  Mar 28, 2013
• Unscored —
  CVE-2013-1147

  The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23…

  Mar 28, 2013
• Unscored —
  CVE-2013-1145

  Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway insp…

  Mar 28, 2013
• Unscored —
  CVE-2013-1144

  Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory …

  Mar 28, 2013
• Unscored —
  CVE-2013-2290

  Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS…

  Mar 28, 2013
• Unscored —
  CVE-2013-2690 Public exploit

  SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arb…

  Mar 28, 2013
• Unscored —
  CVE-2012-0553

  Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and atta…

  Mar 28, 2013
• Unscored —
  CVE-2012-5216

  Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.…

  Mar 28, 2013
• Unscored —
  CVE-2012-5879 Public exploit

  An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows re…

  Mar 28, 2013
• Unscored —
  CVE-2013-0240

  Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certifica…

  gnome-online-accounts Debian
  Mar 28, 2013
• Unscored —
  CVE-2013-1808

  Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as…

  db4o Debian
  Mar 28, 2013
• Unscored —
  CVE-2013-1799

  Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates whe…

  Mar 28, 2013
• Unscored —
  CVE-2012-6550 Public exploit

  Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web …

  db4o Debian
  Mar 28, 2013
• Unscored —
  CVE-2013-2266 EPSS 43%

  libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3…

  bind9 Debian
  Mar 28, 2013
• Unscored —
  CVE-2013-2494

  libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) v…

  isc-dhcp Debian
  Mar 28, 2013
• Unscored —
  CVE-2013-0936

  Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Mana…

  Mar 28, 2013
• Unscored —
  CVE-2013-0935

  EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls…

  Mar 28, 2013
• Unscored —
  CVE-2013-2717

  Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuratio…

  Mar 28, 2013
• Unscored —
  CVE-2013-0923

  The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corr…

  Mar 28, 2013
• Unscored —
  CVE-2013-0921

  The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes…

  Mar 28, 2013
• Unscored —
  CVE-2013-0918

  Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operati…

  Mar 28, 2013
• Unscored —
  CVE-2013-0919

  Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of…

  Mar 28, 2013
• Unscored —
  CVE-2013-0922

  Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require…

  Mar 28, 2013
• Unscored —
  CVE-2013-0920

  Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attacker…

  Mar 28, 2013
• Unscored —
  CVE-2013-0916

  Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attacke…

  Mar 28, 2013
• Unscored —
  CVE-2013-0924

  The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is con…

  Mar 28, 2013
• Unscored —
  CVE-2013-0917

  The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds…

  Mar 28, 2013
• Unscored —
  CVE-2013-0925

  Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission b…

  Mar 28, 2013
• Unscored —
  CVE-2013-0926

  Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste o…

  Mar 28, 2013