Skip to content
OpenAdvisories

Archive

10 December 2013

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —
    CVE-2013-7043 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable mod…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2013-3623 Public exploit EPSS 72%

    Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Manageme…

  • Unscored —

    Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9…

  • Unscored —

    SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows …

  • Unscored —

    Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database…

  • Unscored —

    The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to ob…

  • Unscored —

    SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which …

  • Unscored —

    Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Sam…

  • Unscored —

    Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSC…

  • Unscored —
    CVE-2013-5447 Public exploit EPSS 34%

    Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to ex…