Skip to content
OpenAdvisories

Archive

10 September 2013

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote…

  • Unscored —

    The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of se…

  • Unscored —

    ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via…

  • Unscored —

    GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symli…

  • Unscored —

    Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote…

  • Unscored —
    CVE-2013-3934 Public exploit

    Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allo…

  • Unscored —
    CVE-2013-5672 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow r…

  • Unscored —
    CVE-2013-5673 Public exploit

    SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attac…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows rem…

  • Unscored —
    CVE-2013-4984 Public exploit

    The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.…

  • Unscored —
    CVE-2013-4983 Public exploit EPSS 90%

    The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allow…

  • Unscored —

    Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code …

  • Unscored —

    Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delet…

  • Unscored —

    The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote attackers to cause a den…