CVEs published in January 2013
431 vulnerabilities, 104 critical, 6 exploited.
- palemoon pale moon, redhat enterprise linux, enterprise virtualization +2 more Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other... 9.8 Critical
- miniupnp project miniupnpd Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP... 7.8 High
- miniupnp project miniupnpd The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP... 7.8 High
- miniupnp project miniupnpd Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the... 10.0 High
- miniupnp project miniupnpd The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1... 7.8 High
- portable sdk for upnp project sdk for upnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- portable sdk for upnp project sdk for upnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- portable sdk for upnp project sdk for upnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- portable sdk for upnp project sdk for upnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- libupnp project libupnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- portable sdk for upnp project sdk for upnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- portable sdk for upnp project sdk for upnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- libupnp project libupnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP... 10.0 High
- emc alphastor Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows... 7.6 High
- oracle jre, jdk +1 more Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted... 4.3 Medium
- oracle jre, jdk +1 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 10.0 High
- oracle java runtime environment (jre), jre, openjdk +2 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 5.0 Medium
- cisco unified communications domain manager Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows... 4.3 Medium
- cisco carrier routing system Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet... 5.0 Medium
- ibm cognos tm1 Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3... 4.3 Medium
- cisco nac appliance Multiple cross-site scripting (XSS) vulnerabilities in the web-authentication function on the... 4.3 Medium
- ibm infosphere business glossary, infosphere information server +1 more Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3,... 1.9 Low
- ibm infosphere business glossary, infosphere information server +1 more Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2,... 4.3 Medium
- ibm infosphere information server, infosphere information server metabrokers \& bridges +1 more InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in... 7.1 High
- ibm infosphere information server, infosphere information server information services framework +1 more Open redirect vulnerability in Information Services Framework (ISF) in IBM InfoSphere Information... 5.8 Medium
- ibm infosphere information server, infosphere information server information services framework +1 more Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3,... 4.0 Medium
- ibm infosphere datastage, infosphere information server +1 more The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM... 6.5 Medium
- ibm infosphere fasttrack, infosphere information server +1 more The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5... 1.9 Low
- ibm infosphere information server, infosphere metadata workbench +1 more InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5... 6.5 Medium
- ibm infosphere import export manager, infosphere information server, infosphere information server metabrokers \& bridges +2 more Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in... 9.3 High
- ibm infosphere information server, infosphere metadata workbench +1 more Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7... 4.3 Medium
- sysax multi server Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows... 7.1 High
- marinet cms Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary... 7.5 High
- atutor Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers... 4.3 Medium
- joedolson my calendar, wordpress +1 more Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress... 2.6 Low
- vastal freelance zone SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote... 7.5 High
- phpbridges dev team phpbridges SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute... 7.5 High
- powie pgb SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute... 7.5 High
- w-cms Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to... 4.3 Medium
- w-cms Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01... 5.0 Medium
- x3cms x3 cms Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier... 4.3 Medium
- cstech webconductor SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote... 7.5 High
- microsoft internet explorer Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy... 4.0 Medium
- microsoft internet explorer Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy... 4.0 Medium
- apple iphone os StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the... 5.1 Medium
- apple iphone os WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or... 6.8 Medium
- apple iphone os, tvos +1 more The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and... 3.6 Low
- apple iphone os Identity Services in Apple iOS before 6.1 does not properly handle validation failures of AppleID... 2.1 Low
- apple iphone os Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 6.1 allows user-assisted... 2.6 Low
- apple iphone os WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or... 6.8 Medium
- Show olderLoading…