Skip to content
OpenAdvisories

Archive

September 2013

Vulnerabilities first published in this month (UTC), newest first.

454 results · Feed

  • Unscored —
    CVE-2013-1647 Public exploit

    Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 bef…

  • Unscored —

    Open-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2 before rev9 relies on user-…

  • Unscored —

    Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary…

  • Unscored —

    EMC RSA Archer GRC 5.x before 5.4 allows remote authenticated users to bypass intended access restrictions and complete…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev18, 6.22.0 bef…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 bef…

  • Unscored —

    CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 be…

  • Unscored —

    Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other produ…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, …

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attack…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote …

  • Unscored —

    VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, whi…

  • Unscored —

    Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote attackers to obtain…

  • Unscored —

    Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allow…