Skip to content
OpenAdvisories

Archive

June 2013

Vulnerabilities first published in this month (UTC), newest first.

361 results · Feed

  • Unscored —
    CVE-2013-3117 EPSS 19%

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2013-3123 EPSS 27%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-3141 EPSS 19%

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —
    CVE-2013-3122 EPSS 19%

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2013-3113 EPSS 19%

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —

    The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 …

  • Unscored —
    CVE-2013-3116 EPSS 19%

    Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2013-3126 EPSS 14%

    Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory duri…

  • Unscored —
    CVE-2013-3124 EPSS 19%

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2013-3138 EPSS 59%

    Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W…

  • Unscored —
    CVE-2013-3114 EPSS 19%

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —
    CVE-2013-3111 Public exploit EPSS 34%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-3121 EPSS 19%

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-3118 EPSS 27%

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2013-3110 EPSS 19%

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —
    CVE-2013-1862 EPSS 25%

    mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without…

  • Unscored —

    The Pizza Hut Japan Official Order application before 1.1.1.a for Android does not verify X.509 certificates from SSL s…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 12 and Pro Advance…

  • Unscored —

    FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows ma…

  • Unscored —

    The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship betwe…

  • Unscored —

    The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the byte…

  • Unscored —

    The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of no…

  • Unscored —

    The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain ca…

  • Unscored —

    The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values…

  • Unscored —

    The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal me…

  • Unscored —

    Buffer overflow in the dissect_iphc_crtp_fh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark …

  • Unscored —

    Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2013-4074 Public exploit EPSS 61%

    The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1…

  • Unscored —

    epan/dissectors/packet-gmr1_bcch.c in the GMR-1 BCCH dissector in Wireshark 1.8.x before 1.8.8 does not properly initia…

  • Unscored —

    The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.1…

  • Unscored —

    The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x…

  • Unscored —

    The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.8 does not vali…

  • Unscored —

    The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector …

  • Unscored —

    epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values durin…

  • Unscored —

    The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before…

  • Unscored —

    Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux…

  • Unscored —

    The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the a…

  • Unscored —

    The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.…

  • Unscored —

    The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which migh…

  • Unscored —

    The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initi…