28 September 2013

9 results · Feed

• Unscored —
  CVE-2013-1921

  PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admi…

  Sep 28, 2013
• Unscored —
  CVE-2013-4276

  Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cau…

  Sep 28, 2013
• Medium —
  CVE-2013-4112

  Exposure of Sensitive Information to an Unauthorized Actor in JGroup

  The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

  org.jgroups:jgroups libjgroups-java Debian Maven
  Sep 28, 2013
• Unscored —
  CVE-2013-4244

  The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a de…

  tiff Debian
  Sep 28, 2013
• Unscored —
  CVE-2013-2068 Public exploit EPSS 59%

  Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow r…

  Sep 28, 2013
• Unscored —
  CVE-2013-5959

  Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of serv…

  Sep 28, 2013
• Unscored —
  CVE-2013-0598

  Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 b…

  Sep 28, 2013
• Unscored —
  CVE-2013-5161

  Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows physically proximate atta…

  Sep 28, 2013
• Unscored —
  CVE-2013-5160

  Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended p…

  Sep 28, 2013