Archive
September 2013
Vulnerabilities first published in this month (UTC), newest first.
454 results · Feed
-
Unscored —
Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a cra…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —CVE-2013-3845 EPSS 19%
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…
-
Unscored —CVE-2013-3156 EPSS 20%
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary …
-
Unscored —CVE-2013-3850 EPSS 20%
Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote at…
-
Unscored —CVE-2013-3208 EPSS 19%
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3851 EPSS 20%
Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allo…
-
Unscored —CVE-2013-3160 EPSS 23%
Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbi…
-
Unscored —CVE-2013-3854 EPSS 20%
Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of servi…
-
Unscored —CVE-2013-3155 EPSS 20%
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary …
-
Unscored —CVE-2013-3201 EPSS 19%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configur…
-
Unscored —CVE-2013-3204 EPSS 19%
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3180 EPSS 70%
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attacke…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —CVE-2013-3207 EPSS 19%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —CVE-2013-3856 EPSS 20%
Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —CVE-2013-3858 EPSS 21%
Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2…
-
Unscored —
Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote…
-
Unscored —
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of se…
-
Unscored —
ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via…
-
Unscored —
GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symli…
-
Unscored —
Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote…
-
Unscored —CVE-2013-3934 Public exploit
Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allo…
-
Unscored —CVE-2013-5672 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow r…
-
Unscored —CVE-2013-5673 Public exploit
SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows rem…
-
Unscored —CVE-2013-4984 Public exploit
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.…
-
Unscored —
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allow…
-
Unscored —
Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code …
-
Unscored —
Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delet…
-
Unscored —
The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote attackers to cause a den…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject ar…
-
Unscored —CVE-2013-4900 Public exploit
Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remot…
-
Unscored —
Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors.
-
Unscored —CVE-2013-5716 Public exploit
Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2013-5642 EPSS 12%
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11…
-
Unscored —
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration p…