Archive
9 October 2013
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for W…
-
Unscored —
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more t…
-
Unscored —
sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers…
-
Unscored —
Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-…
-
Unscored —
pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which all…
-
Unscored —
Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows con…
-
Unscored —
Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depend…
-
Unscored —
The Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to bypass intended access r…
-
Unscored —
Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory cons…
-
Unscored —
Buffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8.0.5 and development s…
-
Unscored —
Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System (NAS) 1.9.3 allows re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1…
-
Unscored —
Multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow local users to cause a d…
-
Unscored —CVE-2013-3875 EPSS 20%
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…
-
Unscored —CVE-2013-3886 EPSS 20%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —CVE-2013-3873 EPSS 20%
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2013-3861 EPSS 80%
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2013-3882 EPSS 20%
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to g…
-
Unscored —CVE-2013-3872 EPSS 21%
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Serv…
-
High 8.8
Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…
KEV Mar 3, 2022 -
Unscored —CVE-2013-3895 EPSS 34%
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a…
-
Unscored —
The USB drivers in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista …
-
Unscored —CVE-2013-3880 EPSS 13%
The App Container feature in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012, and Windows RT allows…
-
Unscored —CVE-2013-3889 EPSS 27%
Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Of…
-
Unscored —CVE-2013-3885 EPSS 20%
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2013-3874 EPSS 20%
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2013-3860 EPSS 27%
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly parse a DTD during XML digital-sign…
-
Unscored —CVE-2013-3195 EPSS 38%
The DSA_InsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows …
-
High 8.4
dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows …
-
Unscored —CVE-2013-3871 EPSS 21%
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Medium 5.5
Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…
KEV May 25, 2022 -
Unscored —CVE-2013-3890 EPSS 20%
Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary c…
-
Unscored —CVE-2013-3891 EPSS 19%
Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Co…
-
Unscored —CVE-2013-3892 EPSS 20%
Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafte…
-
High 8.1CVE-2013-3894 EPSS 43%
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server…
-
Unscored —CVE-2013-3128 EPSS 50%
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server…
-
Unscored —
Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspec…
-
Unscored —
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlie…