Skip to content
OpenAdvisories

Archive

24 April 2013

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —

    The scm_check_creds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability re…

  • Unscored —

    The clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT…

  • Unscored —

    The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Applica…

  • Unscored —

    IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly v…

  • Unscored —

    Buffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6,…

  • Unscored —

    IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5…

  • Unscored —

    Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 be…

  • Unscored —

    The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services M…

  • Unscored —

    The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for an…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hi…

  • Unscored —

    The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote auth…

  • Unscored —

    Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and…

  • Unscored —

    pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for …

  • Unscored —

    HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local…