Skip to content
OpenAdvisories

Archive

29 March 2013

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —

    The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attac…

  • Unscored —

    Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote atta…

  • Unscored —

    The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Cert…

  • Unscored —

    main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2…

  • Unscored —

    Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivo…

  • Unscored —

    IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specifi…

  • Unscored —

    The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Te…

  • Unscored —

    IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Ratio…

  • Unscored —

    Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 an…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM R…

  • Unscored —

    Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authentic…

  • Unscored —

    Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Mes…

  • Unscored —
    CVE-2013-1080 Public exploit EPSS 77%

    The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform …

  • Unscored —

    Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager (aka IDM) Roles…

  • Unscored —

    Microsoft Windows Modern Mail allows remote attackers to spoof link targets via a crafted HTML e-mail message.

  • Unscored —
    CVE-2013-1082 EPSS 13%

    Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attacker…

  • Unscored —

    Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in Ad…

  • Unscored —

    The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attack…

  • Unscored —
    CVE-2012-6534 Public exploit

    Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text…