Archive
October 2013
Vulnerabilities first published in this month (UTC), newest first.
583 results · Feed
-
Unscored —
Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload)…
-
Unscored —
The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a de…
-
Unscored —
The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote at…
-
Unscored —
Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of s…
-
Unscored —
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1…
-
Unscored —
The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird befo…
-
Unscored —
The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird…
-
Unscored —
Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ES…
-
Unscored —
Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Fi…
-
Unscored —
Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbi…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow remote attackers to cau…
-
Unscored —
Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox befo…
-
Unscored —
The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before…
-
Unscored —
The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.…
-
Unscored —
Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0…
-
Unscored —
PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFR…
-
Unscored —
Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) imp…
-
Medium —
OpenStack Nova Denial of Service in network source security groups
Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-netwo…
-
Unscored —
OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly ha…
-
Unscored —
Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle larg…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remot…
-
Medium 5.0
systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for…
-
Unscored —
journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service…
-
Unscored —
The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a de…
-
Unscored —
Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to ca…
-
Unscored —
The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions o…
-
Critical 9.8
Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize
Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."
-
Unscored —
Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12…
-
Unscored —
Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does …
-
Medium 4.3
Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)
Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
-
Unscored —
The RPM GPG key import and handling feature in libzypp 12.15.0 and earlier reports a different key fingerprint than the…
-
Unscored —
Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code…
-
Unscored —
tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP template file.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrar…
-
Unscored —
Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX) information is signed, which al…
-
Unscored —
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated use…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 …
-
Unscored —
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in…
-
Unscored —CVE-2010-1159 Public exploit
Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (cra…