23 November 2013

60 results · Feed

• Unscored —
  CVE-2013-4164 Public exploit EPSS 35%

  Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and tr…

  ruby2.0 ruby1.9.1 Ubuntu
  Nov 23, 2013
• Unscored —
  CVE-2013-4509

  The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and…

  ibus-chewing mozc ibus-anthy ibus-pinyin Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-6869

  SQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30 allows remote attackers…

  Nov 23, 2013
• Unscored —
  CVE-2013-0867

  The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel for…

  ffmpeg Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-0862

  Multiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote a…

  Nov 23, 2013
• Unscored —
  CVE-2013-0869

  The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impac…

  ffmpeg Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-0868

  libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyu…

  ffmpeg Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-0222

  The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmen…

  Nov 23, 2013
• Unscored —
  CVE-2013-0865

  The vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote atta…

  ffmpeg Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-0221 Public exploit

  The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmen…

  Nov 23, 2013
• Unscored —
  CVE-2013-0863

  Buffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows re…

  Nov 23, 2013
• Unscored —
  CVE-2013-0860

  The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not pr…

  ffmpeg Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-0864

  The gif_copy_img_rect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "…

  Nov 23, 2013
• Unscored —
  CVE-2013-0861

  The avcodec_decode_audio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote at…

  Nov 23, 2013
• Unscored —
  CVE-2013-0866

  The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attacke…

  Nov 23, 2013
• Unscored —
  CVE-2013-0223

  The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmen…

  Nov 23, 2013
• Unscored —
  CVE-2013-1058

  maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attac…

  Nov 23, 2013
• Unscored —
  CVE-2013-4547 Public exploit EPSS 68%

  nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unesca…

  nginx Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4459

  LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allo…

  Nov 23, 2013
• Unscored —
  CVE-2013-6866

  SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 …

  Nov 23, 2013
• Unscored —
  CVE-2013-6862

  Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.…

  Nov 23, 2013
• Unscored —
  CVE-2013-6865

  SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.…

  Nov 23, 2013
• Unscored —
  CVE-2013-6864

  Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 bef…

  Nov 23, 2013
• Unscored —
  CVE-2013-6861

  Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5…

  Nov 23, 2013
• Unscored —
  CVE-2013-6867

  Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100 allows rem…

  Nov 23, 2013
• Unscored —
  CVE-2013-6859

  SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 …

  Nov 23, 2013
• Unscored —
  CVE-2013-6868

  SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.…

  Nov 23, 2013
• Unscored —
  CVE-2013-6860

  Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.…

  Nov 23, 2013
• Unscored —
  CVE-2013-6384

  (1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to IN…

  ceilometer Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-6863

  SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.…

  Nov 23, 2013
• Unscored —
  CVE-2013-2561

  OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2)…

  ibutils ibutils Debian Ubuntu
  Nov 23, 2013
• Unscored —
  CVE-2012-0786

  The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and o…

  augeas Debian
  Nov 23, 2013
• Unscored —
  CVE-2012-0787

  The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is re…

  augeas Debian
  Nov 23, 2013
• Unscored —
  CVE-2012-6607

  The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and o…

  augeas Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-0872

  The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecifi…

  Nov 23, 2013
• Unscored —
  CVE-2013-0876

  Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1…

  Nov 23, 2013
• Unscored —
  CVE-2013-0875

  The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have …

  Nov 23, 2013
• Unscored —
  CVE-2013-0878

  The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified i…

  Nov 23, 2013
• Unscored —
  CVE-2013-0873

  The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified …

  ffmpeg Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-0874

  The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to …

  Nov 23, 2013