4 July 2013

11 results · Feed

• Unscored —
  CVE-2013-2206

  The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before …

  linux Debian
  Jul 4, 2013
• Unscored —
  CVE-2013-2164

  The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to …

  linux Debian
  Jul 4, 2013
• Unscored —
  CVE-2013-2237

  The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain s…

  linux Debian
  Jul 4, 2013
• Unscored —
  CVE-2013-2232

  The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users to cause a de…

  linux Debian
  Jul 4, 2013
• Unscored —
  CVE-2013-2224

  A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a …

  Jul 4, 2013
• Unscored —
  CVE-2013-2234

  The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.…

  linux Debian
  Jul 4, 2013
• Unscored —
  CVE-2013-4650

  MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privilege…

  Jul 4, 2013
• Medium 5.4
  CVE-2013-4729

  phpMyAdmin Global variables scope injection vulnerability

  import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafte…

  phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  Jul 4, 2013
• Unscored —
  CVE-2013-3742

  Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 a…

  phpmyadmin Debian
  Jul 4, 2013
• Unscored —
  CVE-2013-3563 Public exploit EPSS 49%

  Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a d…

  Jul 4, 2013
• Unscored —
  CVE-2013-3413

  Cross-site scripting (XSS) vulnerability in the search form in the administration/monitoring panel on the Cisco Identit…

  Jul 4, 2013