Skip to content
OpenAdvisories

Archive

3 May 2013

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unsp…

  • Unscored —

    EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Com…

  • Unscored —

    The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitr…

  • Unscored —
    CVE-2013-1959 Public exploit

    kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_…

  • Unscored —

    The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (process restart) via cr…

  • Unscored —

    The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache fil…

  • Unscored —

    The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values duri…

  • Unscored —

    Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requi…

  • Unscored —
    CVE-2013-3242 Public exploit

    plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.…

  • Unscored —

    Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 all…

  • Unscored —

    The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestio…