Archive
February 2014
Vulnerabilities first published in this month (UTC), newest first.
442 results · Feed
-
Unscored —
SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows r…
-
Unscored —
Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 al…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL information, which allow…
-
Unscored —
Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a deni…
-
Unscored —
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or…
-
Unscored —
Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism v…
-
Unscored —
Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or c…
-
Unscored —
The Denny's application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-…
-
Unscored —
Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…
-
Unscored —
Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a deni…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to in…
-
Unscored —
Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a d…
-
Unscored —
The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intende…
-
Unscored —
Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to exec…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
curl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used in in Apple OS X 10.9…
-
Unscored —
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or…
-
Unscored —
Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary co…
-
Unscored —
Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox pro…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allo…
-
Unscored —
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or…
-
Unscored —
CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physica…
-
Unscored —
Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which …
-
Unscored —
The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to appe…
-
Unscored —
Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remo…
-
Unscored —
Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirec…
-
Unscored —
SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has…
-
Unscored —
The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP …
-
Unscored —
The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request p…
-
Unscored —
The Import and Export Framework in McAfee ePolicy Orchestrator (ePO) before 4.6.7 Hotfix 940148 allows remote authentic…
-
Medium 6.5
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exis…
KEV May 25, 2022 -
Unscored —CVE-2013-7332 EPSS 13%
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during ent…
-
Medium —CVE-2013-4286 EPSS 16%
Apache Tomcat is vulnerable to HTTP request-smuggling
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of…