Archive
August 2013
Vulnerabilities first published in this month (UTC), newest first.
357 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Busine…
-
Unscored —CVE-2013-2250 EPSS 12%
Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows …
-
Unscored —
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow con…
-
Unscored —
Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) v…
-
Unscored —
Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a d…
-
Unscored —CVE-2013-5120 Public exploit
SQL injection vulnerability in PHPFox before 3.6.0 (build4) allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2013-5121 Public exploit
SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Window…
-
Unscored —
The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Window…
-
Unscored —CVE-2013-3194 EPSS 19%
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2013-3183 EPSS 78%
The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…
-
Unscored —
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3181 EPSS 20%
usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remot…
-
Unscored —CVE-2013-3192 EPSS 11%
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject …
-
Unscored —CVE-2013-3186 EPSS 10%
The Protected Mode feature in Microsoft Internet Explorer 7 through 10 on Windows Vista SP2, Windows Server 2008 SP2 an…
-
Unscored —CVE-2013-3188 EPSS 31%
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…
-
Unscored —
The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Window…
-
Unscored —CVE-2013-3193 EPSS 19%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —CVE-2013-3199 EPSS 19%
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3187 EPSS 19%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —CVE-2013-3190 EPSS 19%
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3185 EPSS 44%
Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 20…
-
Unscored —CVE-2013-3191 EPSS 19%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —CVE-2013-3175 EPSS 28%
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windo…
-
Unscored —CVE-2013-3182 EPSS 95%
The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresse…
-
Unscored —CVE-2013-3189 EPSS 20%
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…
-
Unscored —CVE-2013-4879 Public exploit
SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to e…
-
Unscored —CVE-2013-4880 Public exploit
Cross-site scripting (XSS) vulnerability in core/admin/modules/developer/modules/views/add.php in BigTree CMS 4.0 RC2 a…
-
Unscored —
Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sess…
-
Unscored —
The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a de…
-
Unscored —
Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mute…
-
Unscored —
The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM r…
-
Unscored —
Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka …
-
Unscored —
Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory c…
-
Unscored —
IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumptio…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote …
-
Unscored —
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrate…
-
Unscored —
The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Manageme…
-
Unscored —
The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeC…