Skip to content
OpenAdvisories

Archive

24 December 2013

Vulnerabilities first published on this day (UTC), newest first.

← November 2013 2013 / December /24 January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2013-7216

    Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2013-6388

    Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to injec…

  • Unscored —
    CVE-2013-6387

    Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated user…

  • Unscored —
    CVE-2012-6617

    The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of …

    oxide-qt libav qtwebengine-opensource-src gst-libav1.0 Ubuntu
  • Unscored —
    CVE-2012-6615

    The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to ca…

    oxide-qt libav qtwebengine-opensource-src gst-libav1.0 Ubuntu
  • Unscored —
    CVE-2012-6618

    The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize …

    ffmpeg libav qtwebengine-opensource-src Debian Ubuntu
  • Unscored —
    CVE-2012-6616

    The mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a…

    oxide-qt libav qtwebengine-opensource-src gst-libav1.0 Ubuntu
  • Unscored —
    CVE-2011-5268

    connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of se…

    bip Debian
  • Unscored —
    CVE-2013-4553

    The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_l…

    xen Debian
  • Unscored —
    CVE-2013-4452

    Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration f…

  • Unscored —
    CVE-2013-4554

    Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly preven…

  • Unscored —
    CVE-2013-4358

    libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service (crash) via vectors rela…

  • Unscored —
    CVE-2013-4550

    Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previ…

    bip Debian
  • Unscored —
    CVE-2013-6795

    The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute …

  • Unscored —
    CVE-2013-6403

    The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified…