Archive
24 October 2013
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attacke…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x …
-
Unscored —CVE-2013-1743 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x an…
-
Unscored —CVE-2013-1742 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11;…
-
Unscored —
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticat…
-
Unscored —
The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified ci…
-
Unscored —
Apple Keynote before 6.0 does not properly handle the interaction between Keynote presentation mode and the Screen Lock…
-
Unscored —
Cisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall rule, which allows rem…
-
Unscored —
The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Managemen…
-
Unscored —
WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes…
-
Medium 5.3
Apache Shindig PHP Sensitive Information Disclosure
The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
-
Unscored —
The server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which allows local users to obt…
-
Medium 4.7
Apache Sling Auth Core bundle vulnerable to Open Redirection
Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in t…
-
Unscored —
The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load …
-
Unscored —CVE-2013-6246 Public exploit
The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sen…
-
Unscored —
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.…
-
Unscored —
The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local user…
-
Unscored —
App Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox restrictions via a crafted app th…
-
Unscored —
The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not requ…
-
Unscored —
The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveragin…
-
Unscored —
Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allo…
-
Unscored —
CoreGraphics in Apple Mac OS X before 10.9 allows local users to bypass secure input mode and log an arbitrary applicat…
-
Unscored —
The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec s…
-
Unscored —
The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Scre…
-
Unscored —
The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processin…
-
Unscored —
Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass an intended p…
-
Unscored —
CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks…
-
Unscored —
The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, …
-
Unscored —
Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (s…
-
Unscored —
Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartex…
-
Unscored —
The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operatio…
-
Unscored —
Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-…
-
Unscored —
Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power asser…
-
Unscored —
Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cau…
-
Unscored —
Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by trigge…
-
Unscored —
The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf conf…
-
Unscored —
socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option,…
-
Unscored —CVE-2013-5135 EPSS 11%
Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.…
-
Unscored —
Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whe…
-
Unscored —
Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the …