Archive
14 December 2013
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability on HP Officejet Pro 8500 (aka A909) All-in-One printers allows remote attacker…
-
Unscored —
Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attack…
-
Unscored —
Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web site…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote att…
-
Unscored —
Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul571…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote at…
-
Unscored —
Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a differe…
-
Unscored —
The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed…
-
Unscored —
Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web s…
-
Unscored —
Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages wi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Cent…
-
Unscored —
Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbi…
-
Unscored —
The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the au…
-
Unscored —
Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows…
-
Unscored —
The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via …
-
Unscored —
Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-con…
-
Unscored —
Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design M…
-
Unscored —
Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design M…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0 through 1.3 allows re…
-
Unscored —
Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0…
-
Unscored —
xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a styleshee…
-
Unscored —
Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted a…
-
Unscored —
Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux ker…
-
Unscored —
The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows gues…
-
Unscored —
The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allow…
-
Unscored —
The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service…
-
Unscored —
McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in…
-
Unscored —
Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a wh…
-
Unscored —
McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharact…
-
Unscored —
ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --out…
-
Unscored —
The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP config…
-
Unscored —
The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before iceh…
-
Unscored —
The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which al…
-
Unscored —
The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote …
-
Unscored —
The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause …
-
Unscored —
The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not retur…