17 February 2014

10 results · Feed

• Unscored —
  CVE-2013-6674 Public exploit

  Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.…

  Feb 17, 2014
• Unscored —
  CVE-2014-2018

  Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.…

  Feb 17, 2014
• Medium —
  CVE-2011-0528

  Puppet does not properly restrict access to node resources

  Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors.

  puppet puppet Debian RubyGems
  Feb 17, 2014
• Unscored —
  CVE-2011-4083

  The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red …

  Feb 17, 2014
• Unscored —
  CVE-2011-3601

  Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attack…

  radvd Debian
  Feb 17, 2014
• Unscored —
  CVE-2011-3605

  The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows re…

  radvd Debian
  Feb 17, 2014
• Unscored —
  CVE-2011-3604

  The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a deni…

  radvd Debian
  Feb 17, 2014
• Unscored —
  CVE-2013-1070

  Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attac…

  Feb 17, 2014
• Unscored —
  CVE-2013-1069

  Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local us…

  Feb 17, 2014
• Unscored —
  CVE-2012-0270 Public exploit EPSS 55%

  Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a cr…

  csound Debian
  Feb 17, 2014