Archive
November 2013
Vulnerabilities first published in this month (UTC), newest first.
394 results · Feed
-
Unscored —
The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attacke…
-
Unscored —
The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, w…
-
Unscored —CVE-2013-6627 Public exploit
net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1…
-
Unscored —
Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp i…
-
Unscored —
The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allo…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or …
-
Unscored —
The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on …
-
Unscored —
The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote at…
-
Unscored —
IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by…
-
Unscored —
IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated use…
-
Unscored —
Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse err…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 all…
-
Unscored —
Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; I…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before…
-
Unscored —CVE-2013-5330 EPSS 11%
Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.…
-
Unscored —
Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.…
-
Unscored —
Adobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via unspecified vectors.
-
Unscored —CVE-2013-0082 EPSS 19%
Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect docu…
-
Unscored —CVE-2013-1325 EPSS 31%
Heap-based buffer overflow in Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2013-1324 EPSS 31%
Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote a…
-
Unscored —
security/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which allows remote or local …
-
Unscored —CVE-2013-3940 EPSS 34%
Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…
-
Unscored —CVE-2013-3910 EPSS 19%
Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …
-
Unscored —CVE-2013-3912 EPSS 19%
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allow…
-
Unscored —CVE-2013-3905 EPSS 11%
Microsoft Outlook 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT does not properly expand metadata contained in S/MIME c…
-
Unscored —CVE-2013-3911 EPSS 19%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —CVE-2013-3915 EPSS 19%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3908 EPSS 34%
Microsoft Internet Explorer 6 through 10 allows user-assisted remote attackers to bypass the Same Origin Policy and obt…
-
Unscored —CVE-2013-3917 EPSS 18%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3916 EPSS 18%
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2013-3869 EPSS 17%
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windo…
-
Unscored —CVE-2013-3914 EPSS 19%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2…
-
Unscored —CVE-2013-3909 EPSS 15%
Microsoft Internet Explorer 6 through 8 allows remote attackers to read content from a different (1) domain or (2) zone…
-
Unscored —CVE-2013-2653 Public exploit
security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote…
-
Unscored —
Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite acti…
-
Unscored —
Buffer overflow in the oz_cdev_write function in drivers/staging/ozwpan/ozcdev.c in the Linux kernel before 3.12 allows…