Archive
June 2013
Vulnerabilities first published in this month (UTC), newest first.
361 results · Feed
-
Unscored —
Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which all…
-
Unscored —
Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial …
-
Unscored —
WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbit…
-
Unscored —
WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of se…
-
Unscored —
XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to tri…
-
Unscored —
CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tr…
-
Unscored —
The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the _POSIX_SPAWN_DISABLE…
-
Unscored —
sys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings …
-
Unscored —
The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly v…
-
Unscored —
The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defe…
-
Unscored —
The mach_port_space_info function in osfmk/ipc/mach_debug.c in the XNU kernel in Apple Mac OS X 10.8.x does not initial…
-
Unscored —
The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate the data for file act…
-
Unscored —
Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployme…
-
Unscored —
Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through …
-
Unscored —
Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.…
-
Unscored —
Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Servic…
-
Unscored —
Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as…
-
Unscored —
Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110 allows remote attackers to…
-
Unscored —
Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollu…
-
Unscored —
Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbit…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service…
-
Unscored —
The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (inval…
-
Unscored —
Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circums…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.110 allow attackers to cause a denial of service…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service…
-
Unscored —
Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote atta…
-
Unscored —
Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote att…
-
Unscored —
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service…
-
Unscored —
The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (mem…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM S…
-
Unscored —
The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vecto…
-
Unscored —
The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for A…
-
Unscored —
Unspecified vulnerability in IBM QRadar Security Information and Event Manager (SIEM) 7.x before 7.1 MR2 Patch 1 allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM W…
-
Unscored —
CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x be…
-
Unscored —
Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress…
-
Low —
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain sensitive request info…
-
Medium —CVE-2013-2067 EPSS 10%
Improper Authentication in Apache Tomcat
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which al…