Skip to content
OpenAdvisories

Archive

June 2013

Vulnerabilities first published in this month (UTC), newest first.

361 results · Feed

  • Unscored —

    Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers t…

  • Unscored —

    A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on …

  • Unscored —

    The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle in…

  • Unscored —

    A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise …

  • Unscored —

    A certain Red Hat patch to the sctp_sock_migrate function in net/sctp/socket.c in the Linux kernel before 2.6.21, as us…

  • Unscored —

    The perf subsystem in the kernel package 2.6.32-122.el6.x86_64 in Red Hat Enterprise Linux (RHEL) 6 does not properly h…

  • Unscored —

    A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat E…

  • Unscored —

    EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP …

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in cgi-bin/create_user.cgi on QNAP VioStor NVR devices with firmware 4.…

  • Unscored —

    QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded …

  • Unscored —
    CVE-2013-0143 Public exploit

    cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in …

  • Unscored —

    The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to …

  • Unscored —

    Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel befo…

  • Unscored —
    CVE-2013-2852 Public exploit

    Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43…

  • Unscored —

    The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure,…

  • Unscored —

    Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows loc…

  • Unscored —

    Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parame…

  • Unscored —

    The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel thro…

  • Unscored —

    The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption…

  • Unscored —

    arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabl…

  • Unscored —

    The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initi…

  • Unscored —

    The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumst…

  • Unscored —

    resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recurs…

  • Unscored —
    CVE-2013-2334 EPSS 47%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2333 Public exploit EPSS 90%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2335 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2332 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2328 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2329 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2331 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2326 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2325 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2330 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-2327 EPSS 61%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —

    The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for An…

  • Unscored —
    CVE-2013-2324 EPSS 39%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —

    SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modif…

  • Unscored —

    Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code …

  • Unscored —

    The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies…

  • Unscored —

    Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arb…