Archive
July 2013
Vulnerabilities first published in this month (UTC), newest first.
486 results · Feed
-
Unscored —
Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key…
-
Unscored —
Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and a…
-
Unscored —
The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbi…
-
Unscored —
The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands …
-
Unscored —
The web interface on the Dell iDRAC6 with firmware before 1.95 allows remote attackers to modify the CLP interface for …
-
Unscored —
The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, all…
-
Unscored —
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remot…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrar…
-
Unscored —
The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before…
-
Unscored —
EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleart…
-
Unscored —
EMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for …
-
Unscored —
The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, whi…
-
Unscored —
moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other produc…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrar…
-
Unscored —
The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecifie…
-
Unscored —
WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to by…
-
Unscored —
WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing a…
-
Unscored —
WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive in…
-
Unscored —
SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (…
-
Unscored —
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointe…
-
Unscored —CVE-2013-1414 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Securi…
-
Unscored —
The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 b…
-
Unscored —CVE-2013-3299 Public exploit
RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumptio…
-
Unscored —
The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated…
-
Unscored —CVE-2013-2340 EPSS 10%
Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 65…
-
Unscored —
Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 65…
-
Unscored —
The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux kernel before …
-
Unscored —
The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to …
-
Unscored —
The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain s…
-
Unscored —
The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users to cause a de…
-
Unscored —
A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a …
-
Unscored —
The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.…
-
Unscored —
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privilege…
-
Medium 5.4
phpMyAdmin Global variables scope injection vulnerability
import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafte…
-
Unscored —
Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 a…
-
Unscored —
Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the search form in the administration/monitoring panel on the Cisco Identit…