Skip to content
OpenAdvisories

Archive

4 December 2013

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and…

  • Unscored —

    The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier …

  • Unscored —

    The management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier allows remote attackers…

  • Unscored —
    CVE-2013-6936 Public exploit

    Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulleti…

  • Unscored —
    CVE-2013-6935 Public exploit EPSS 32%

    Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2013-6937 Public exploit

    Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a…

  • Unscored —

    lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VM…

  • Unscored —

    Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attacker…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installabl…