Archive
March 2013
Vulnerabilities first published in this month (UTC), newest first.
438 results · Feed
-
Unscored —CVE-2013-2266 EPSS 43%
libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3…
-
Unscored —
libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Mana…
-
Unscored —
EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls…
-
Unscored —
Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuratio…
-
Unscored —
The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corr…
-
Unscored —
The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes…
-
Unscored —
Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operati…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of…
-
Unscored —
Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require…
-
Unscored —
Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attacker…
-
Unscored —
Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attacke…
-
Unscored —
The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is con…
-
Unscored —
The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds…
-
Unscored —
Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission b…
-
Unscored —
Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste o…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module 6.x-2.x before 6.x-2.…
-
Unscored —
The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remot…
-
Unscored —
The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote…
-
Unscored —
The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space con…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal allows remote authentica…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og_manager_change) module 7.x-2.x be…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Views in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drup…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 …
-
Unscored —
The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is ena…
-
Unscored —
The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers t…
-
Unscored —
Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credent…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows rem…
-
Unscored —
The Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the configuration options, wh…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenti…