23 November 2013

60 results · Feed

• Unscored —
  CVE-2013-0877

  The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified imp…

  Nov 23, 2013
• Unscored —
  CVE-2013-4354

  The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for local users to inject …

  glance Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4263

  libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which trigge…

  Nov 23, 2013
• Unscored —
  CVE-2013-4264

  The kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial …

  Nov 23, 2013
• Unscored —
  CVE-2013-4214

  rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to over…

  Nov 23, 2013
• Unscored —
  CVE-2013-4265

  The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors r…

  Nov 23, 2013
• Unscored —
  CVE-2013-6858

  Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local use…

  horizon Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-2029

  nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allow…

  Nov 23, 2013
• Unscored —
  CVE-2013-0281

  Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not …

  pacemaker Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-1813

  util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directorie…

  busybox Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4589

  The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a…

  graphicsmagick Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4473

  Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote…

  poppler Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4545

  cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verific…

  curl Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4481

  Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the…

  Nov 23, 2013
• Unscored —
  CVE-2013-4474 Public exploit EPSS 10%

  Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote…

  poppler Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4485

  389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cau…

  389-ds-base Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4482

  Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscri…

  Nov 23, 2013
• Unscored —
  CVE-2013-6375

  Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a presen…

  xen Debian
  Nov 23, 2013
• Unscored —
  CVE-2010-3443

  ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (un…

  quassel Debian
  Nov 23, 2013
• Unscored —
  CVE-2013-4407

  HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded f…

  libhttp-body-perl perl-http-body Debian Alpine
  Nov 23, 2013