Skip to content
OpenAdvisories

Archive

September 2013

Vulnerabilities first published in this month (UTC), newest first.

454 results · Feed

  • Unscored —

    The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which…

  • Unscored —

    Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote…

  • Unscored —

    The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10…

  • Unscored —

    Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers…

  • Unscored —

    epan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 all…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script o…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE…

  • Unscored —

    administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network…

  • Unscored —

    Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for …

  • Unscored —

    The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows rem…

  • Unscored —

    The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypa…

  • Unscored —

    The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capa…

  • Unscored —

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unkno…

  • Unscored —

    Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 does not properly restrict access to w…

  • Unscored —

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unkno…

  • Unscored —

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unkno…

  • Unscored —

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unkno…

  • Unscored —

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unkno…

  • Unscored —

    The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands…

  • Unscored —

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unkno…

  • Unscored —

    Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unkno…

  • Unscored —

    Unspecified vulnerability in the Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) before…

  • Unscored —

    Directory traversal vulnerability in logreader/uploadreader.jsp in CapaSystems Performance Guard before 6.2.102 allows …

  • Unscored —

    wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which…

  • Unscored —

    wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a pos…

  • Unscored —

    WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to…

  • Unscored —

    The get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does not require the unfilte…

  • Unscored —

    The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make i…

  • Unscored —

    Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect …

  • Unscored —

    IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact …

  • Unscored —

    Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to red…

  • Unscored —

    Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain pr…

  • Unscored —

    Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to di…

  • Unscored —

    Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Serv…

  • Unscored —

    Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attack…

  • Unscored —

    Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on L…

  • Unscored —
    CVE-2013-3358 EPSS 13%

    Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attac…

  • Unscored —

    Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbit…

  • Unscored —

    Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on L…

  • Unscored —
    CVE-2013-3357 EPSS 13%

    Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attac…