Skip to content
OpenAdvisories

Archive

9 December 2013

Vulnerabilities first published on this day (UTC), newest first.

46 results · Feed

  • Unscored —

    Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attacker…

  • Unscored —
    CVE-2013-1349 Public exploit EPSS 22%

    Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP co…

  • Unscored —

    virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privi…

  • Unscored —

    The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute…

  • Unscored —

    checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows lo…

  • Unscored —

    Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backl…