23 August 2013

20 results · Feed

• Unscored —
  CVE-2011-4607

  PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-i…

  putty Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-1435

  (1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell met…

  cacti Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-1434

  Multiple SQL injection vulnerabilities in (1) api_poller.php and (2) utility.php in Cacti before 0.8.8b allow remote at…

  cacti Debian
  Aug 23, 2013
• High 7.5
  CVE-2013-1909

  Apache Qpid Python client Improper certificate validation

  The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an…

  qpid-python PyPI
  Aug 23, 2013
• Unscored —
  CVE-2013-4172

  The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified…

  Aug 23, 2013
• Unscored —
  CVE-2013-3369

  Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3368

  bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary fi…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3373

  CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attacker…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3374

  Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::S…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3370

  Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback …

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3371

  Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows re…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-3372

  Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Dis…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-2196

  Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrato…

  xen Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-2194

  Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with ce…

  xen Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-2195

  The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an u…

  xen Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-5587

  Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allo…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2012-4733

  Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" per…

  request-tracker4 Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-5570

  Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows r…

  Aug 23, 2013
• Unscored —
  CVE-2013-5569

  SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQ…

  Aug 23, 2013
• Unscored —
  CVE-2012-6583

  Cross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authen…

  Aug 23, 2013