3 April 2013

19 results · Feed

• Unscored —
  CVE-2013-0799

  Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thun…

  Apr 3, 2013
• Unscored —
  CVE-2013-0795

  The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbir…

  Apr 3, 2013
• Unscored —
  CVE-2013-0798

  Mozilla Firefox before 20.0 on Android uses world-writable and world-readable permissions for the app_tmp installation …

  Apr 3, 2013
• Unscored —
  CVE-2013-0789

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 all…

  Apr 3, 2013
• Unscored —
  CVE-2013-0797

  Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0…

  Apr 3, 2013
• Unscored —
  CVE-2013-0793

  Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.…

  Apr 3, 2013
• Unscored —
  CVE-2013-0788

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0…

  Apr 3, 2013
• Unscored —
  CVE-2013-0800

  Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and use…

  Apr 3, 2013
• Unscored —
  CVE-2013-0790

  Unspecified vulnerability in the browser engine in Mozilla Firefox before 20.0 on Android allows remote attackers to ca…

  Apr 3, 2013
• Unscored —
  CVE-2013-0794

  Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows…

  Apr 3, 2013
• Unscored —
  CVE-2013-0792

  Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used, do not properly hand…

  Apr 3, 2013
• Unscored —
  CVE-2013-0796

  The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderb…

  Apr 3, 2013
• Unscored —
  CVE-2013-0791

  The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0,…

  nss Debian
  Apr 3, 2013
• Medium —
  CVE-2013-1665

  XML External Entity (XXE) in Django

  The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an ent…

  python-django django keystone Debian PyPI
  Apr 3, 2013
• Medium —
  CVE-2013-1664

  XML Entity Expansion (XEE) in Django

  The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (r…

  django nova keystone cinder Debian PyPI
  Apr 3, 2013
• Medium —
  CVE-2013-1911

  ldoce Gem Arbitrary Command Execution

  lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.

  ldoce RubyGems
  Apr 3, 2013
• Unscored —
  CVE-2012-1038 Public exploit

  Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobilit…

  Apr 3, 2013
• Unscored —
  CVE-2012-4546

  The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity M…

  Apr 3, 2013
• Unscored —
  CVE-2012-6129

  Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allo…

  transmission Debian
  Apr 3, 2013