8 February 2014

10 results · Feed

• Unscored —
  CVE-2011-1773

  virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to b…

  Feb 8, 2014
• Unscored —
  CVE-2011-4099

  The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is speci…

  libcap2 Debian
  Feb 8, 2014
• Unscored —
  CVE-2013-1904

  Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8…

  roundcube Debian
  Feb 8, 2014
• High 7.5
  CVE-2013-2191

  python-bugzilla has improper validation of X.509 certificates

  python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.

  python-bugzilla PyPI
  Feb 8, 2014
• Unscored —
  CVE-2012-5524

  The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which …

  gajim Debian
  Feb 8, 2014
• Unscored —
  CVE-2014-0044

  The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows rem…

  mumble Debian
  Feb 8, 2014
• Unscored —
  CVE-2014-0045

  The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumb…

  mumble Debian
  Feb 8, 2014
• Unscored —
  CVE-2014-0039

  Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute ar…

  fwsnort Debian
  Feb 8, 2014
• Unscored —
  CVE-2014-1869

  Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained b…

  db4o db4o Debian Ubuntu
  Feb 8, 2014
• Unscored —
  CVE-2014-1916

  The (1) opus_packet_get_nb_frames and (2) opus_packet_get_samples_per_frame functions in the client in MumbleKit before…

  Feb 8, 2014