28 December 2013

11 results · Feed

• Unscored —
  CVE-2013-7149

  SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver…

  Dec 28, 2013
• Unscored —
  CVE-2013-1096

  Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell I…

  Dec 28, 2013
• Unscored —
  CVE-2013-6932

  Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remot…

  Dec 28, 2013
• Unscored —
  CVE-2013-6981

  Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fra…

  Dec 28, 2013
• Unscored —
  CVE-2013-6181

  EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local us…

  Dec 28, 2013
• Unscored —
  CVE-2013-6182

  Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges …

  Dec 28, 2013
• Unscored —
  CVE-2013-6812

  The ONEDC app before 1.7 for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-…

  Dec 28, 2013
• Unscored —
  CVE-2013-6886

  RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) …

  Dec 28, 2013
• Unscored —
  CVE-2013-6929

  SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary…

  Dec 28, 2013
• Unscored —
  CVE-2013-6006

  Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a r…

  Dec 28, 2013
• Unscored —
  CVE-2013-6808

  Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inje…

  Dec 28, 2013