1 November 2013

10 results · Feed

• Unscored —
  CVE-2013-4447

  Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before …

  Nov 1, 2013
• Unscored —
  CVE-2013-2701

  Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote …

  Nov 1, 2013
• Unscored —
  CVE-2013-5977 Public exploit

  Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for Word…

  Nov 1, 2013
• Unscored —
  CVE-2013-4713

  Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote au…

  Nov 1, 2013
• Unscored —
  CVE-2013-4484

  Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching ou…

  varnish Debian
  Nov 1, 2013
• Medium —
  CVE-2013-3630 Public exploit EPSS 42%

  Moodle Authenticated Spelling Binary Remote Code Execution

  Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

  moodle/moodle moodle Ubuntu Packagist
  Nov 1, 2013
• Unscored —
  CVE-2013-5551

  Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are …

  Nov 1, 2013
• Unscored —
  CVE-2013-5555

  Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (ser…

  Nov 1, 2013
• Unscored —
  CVE-2013-5548

  The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPse…

  Nov 1, 2013
• Unscored —
  CVE-2013-5431

  Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2…

  Nov 1, 2013