23 September 2013

27 results · Feed

• High 7.5
  CVE-2013-1443

  Django Denial of Service Vulnerability in the authentication framework

  The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.

  python-django django Debian PyPI
  Sep 23, 2013
• Unscored —
  CVE-2013-1431

  The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server…

  Sep 23, 2013
• Medium 5.3
  CVE-2013-4294

  OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token

  The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions…

  keystone keystone Debian PyPI
  Sep 23, 2013
• Medium 6.2
  CVE-2013-2217 Public exploit

  Improper Link Resolution Before File Access in Suds

  cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.

  suds-py3 suds suds Debian PyPI
  Sep 23, 2013
• Unscored —
  CVE-2013-5931

  SQL injection vulnerability in property_listings_detail.php in Real Estate PHP Script allows remote attackers to execut…

  Sep 23, 2013
• Unscored —
  CVE-2013-5666

  The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does n…

  Sep 23, 2013
• Unscored —
  CVE-2013-5119

  Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the…

  Sep 23, 2013
• Unscored —
  CVE-2013-5932

  Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and a…

  Sep 23, 2013
• Unscored —
  CVE-2013-5710

  The nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users wit…

  Sep 23, 2013
• Unscored —
  CVE-2013-5930

  Cross-site scripting (XSS) vulnerability in search_residential.php in Real Estate PHP Script allows remote attackers to…

  Sep 23, 2013
• Unscored —
  CVE-2012-2624

  Stack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of service (crash) via a crafte…

  Sep 23, 2013
• Unscored —
  CVE-2012-5338

  Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduc…

  Sep 23, 2013
• Unscored —
  CVE-2013-4820

  Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Sm…

  Sep 23, 2013
• Unscored —
  CVE-2013-4325

  The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not prope…

  hplip Debian
  Sep 23, 2013
• Unscored —
  CVE-2013-4819

  Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain s…

  Sep 23, 2013
• Unscored —
  CVE-2013-4817

  Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive i…

  Sep 23, 2013
• Unscored —
  CVE-2013-4814

  Cross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-0…

  Sep 23, 2013
• Unscored —
  CVE-2013-4821

  Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to caus…

  Sep 23, 2013
• Unscored —
  CVE-2013-4818

  Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Sm…

  Sep 23, 2013
• Unscored —
  CVE-2013-5502

  The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows r…

  Sep 23, 2013
• Unscored —
  CVE-2013-5490

  Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via a…

  Sep 23, 2013
• Unscored —
  CVE-2013-5917 Public exploit

  SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers …

  Sep 23, 2013
• Unscored —
  CVE-2013-5691

  The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIF…

  Sep 23, 2013
• Unscored —
  CVE-2013-5918

  Cross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin before 1.3.8 for WordPress…

  Sep 23, 2013
• Unscored —
  CVE-2013-5486 Public exploit EPSS 76%

  Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager…

  Sep 23, 2013
• Unscored —
  CVE-2013-5487

  DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitra…

  Sep 23, 2013
• Unscored —
  CVE-2013-5696 Public exploit

  inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installat…

  Sep 23, 2013