Archive
October 2013
Vulnerabilities first published in this month (UTC), newest first.
583 results · Feed
-
Unscored —
X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or pos…
-
High —
Arbitrary file write in Apache Commons Fileupload
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a seria…
-
Unscored —
The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authenti…
-
Unscored —
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking m…
-
Unscored —
Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implem…
-
Unscored —
The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obta…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attack…
-
Unscored —
passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to inject arbitr…
-
Unscored —
The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, w…
-
Unscored —
The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log…
-
Unscored —
(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5) ApiQueryDeletedrevs.php, (6) ApiToke…
-
Unscored —
Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the cryp…
-
Unscored —
includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x b…
-
Unscored —
OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when …
-
High 7.5
PyCrypto does not properly reseed PRNG before allowing access
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information b…
-
Unscored —CVE-2013-4885 Public exploit
The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote …
-
Unscored —
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0…
-
Unscored —
Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow …
-
Unscored —
TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote …
-
Unscored —
Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module f…
-
Unscored —
Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local user…
-
Unscored —
The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial…
-
Unscored —
The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted re…
-
Unscored —
Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1…
-
Unscored —CVE-2013-4434 Public exploit
Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depen…
-
Unscored —
Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, w…
-
Unscored —CVE-2013-6283 Public exploit
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly e…
-
Unscored —
The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53…
-
Unscored —CVE-2013-6128 Public exploit
The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 do…
-
Unscored —
IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which …
-
Unscored —
IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote atta…
-
Unscored —CVE-2013-6281 Scanner template
Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 …
-
Unscored —
EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which…
-
Unscored —
The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1…
-
Unscored —
Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B rou…
-
Unscored —
Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to g…
-
Unscored —
Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers…
-
Unscored —
Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read suppor…