Archive
June 2013
Vulnerabilities first published in this month (UTC), newest first.
361 results · Feed
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Manageme…
-
Unscored —
The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x befor…
-
Unscored —
The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allow…
-
Unscored —
Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17…
-
Unscored —
Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote att…
-
Unscored —
The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox E…
-
Unscored —
The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .…
-
Unscored —
Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before …
-
Unscored —
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0…
-
Unscored —
The getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a top-level document in…
-
High 8.8
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…
KEV Mar 28, 2022 -
Unscored —
Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Fire…
-
Unscored —
The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.…
-
Unscored —
The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cau…
-
Unscored —
The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch …
-
Unscored —
Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute…
-
Unscored —
The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user…
-
Unscored —
The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with…
-
High —
Multishop extension for TYPO3 has SQL Injection vulnerability
SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
-
Unscored —
SQL injection vulnerability in the meta_feedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execut…
-
Unscored —
SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers…
-
Unscored —
Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redir…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x befo…
-
Unscored —
Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote a…
-
Unscored —
FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite befo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Rules module 7.x-2.x before 7.x-2.3 for Drupal allows remote authentica…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authent…
-
Unscored —CVE-2013-4614 Public exploit
English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX…
-
Unscored —
The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers …
-
Unscored —
The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause…
-
Unscored —
The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX8…
-
Unscored —
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x befor…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the a…