Skip to content
OpenAdvisories

Archive

27 November 2013

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • High 7.8
    CVE-2013-5065 Exploited Public exploit EPSS 35%

    NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

    KEV Mar 3, 2022
  • Unscored —

    Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the JSESSIONID cookie, which makes…

  • Unscored —
    CVE-2013-4624 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inje…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Jahia xCM before 6.6.2 allows remote authenticated users to inject arbitrar…

  • Unscored —

    Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7,…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Manage…

  • Unscored —

    Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a de…

  • Unscored —

    The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly v…

  • Unscored —

    Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12…

  • Unscored —

    The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CA…

  • Unscored —

    The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows loc…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows r…