CVEs published in January 2013
431 vulnerabilities, 104 critical, 6 exploited.
- adobe acrobat, acrobat reader +1 moreHeap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and...10.0 High
- adobe acrobat, acrobat reader +1 moreHeap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and...10.0 High
- adobe acrobat, acrobat reader +1 moreUse-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5,...10.0 High
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow...10.0 High
- adobe acrobat, acrobat reader +1 moreHeap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x...10.0 High
- microsoft windows 7, windows 8, windows rt +3 more +5 moreThe SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2...5.8 Medium
- microsoft windows 7, windows server 2008 +1 moreThe Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1...10.0 High
- microsoft system center operations managerCross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1...4.3 Medium
- microsoft system center operations managerCross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1...4.3 Medium
- microsoft windows 7, windows 8, windows rt +3 more +5 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2...7.2 High
- microsoft xml core services, expression web, groove server +12 more +14 moreMicrosoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content,...9.3 High
- microsoft xml core services, expression web, groove server +12 more +14 moreMicrosoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content,...9.3 High
- microsoft .net framework, management odata iis extension +1 moreThe WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET...7.8 High
- microsoft .net frameworkMicrosoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not...9.3 High
- microsoft .net frameworkBuffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft ...9.3 High
- microsoft .net frameworkBuffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3...9.3 High
- microsoft .net frameworkThe Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2,...4.3 Medium
- adobe coldfusionAdobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via...7.5 High
- adobe coldfusionAdobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers...7.5 High
- adobe coldfusionAdobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote...9.8 Critical
- rubyonrails rails, ruby on rails, debian linux +2 moreactionpack Improper Input Validation vulnerability7.5 High
- maxtom atomymaxsiteUnrestricted file upload vulnerability in index.php in Atomymaxsite 2.5 and earlier allows remote...6.8 Medium
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc5.0 Medium
nssDebiannss - mis-issued intermediatesNo score- gnupgThe read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19,...5.8 Medium
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 6 for rhel 5, jboss enterprise application platform 6 for rhel 6 +4 more +6 moreJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 Medium
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 6 for rhel 5, jboss enterprise application platform 6 for rhel 6 +4 more +6 moreJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 Medium
- apache cxfImproper Authentication in Apache CXF4.3 Medium
- ffmpeg, libav +1 moreThe H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and...10.0 High
- redhat cloudforms, red hat cloudforms for rhel 6, cloudforms tools for rhel 5 +2 moreGrinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions3.3 Low
- redhat cloudformsproxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check...5.5 Medium
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage...2.1 Low
- redhat cloudforms, red hat cloudforms for rhel 6, cloudforms tools for rhel 5 +1 more +3 morePulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file5.5 Medium
- redhat certificate systemThe token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows...4.0 Medium
- redhat certificate systemThe token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not...4.0 Medium
- redhat certificate systemMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8...4.3 Medium
- redhat cloudformsPulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file,...3.3 Low
- redhat enterprise virtualization managerThe backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly...2.7 Low
- redhat enterprise virtualization managerThe vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a...6.8 Medium
- redhat enterprise virtualization managerMultiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV...6.2 Medium
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions,...3.7 Low
- centrify deployment manager, suite +1 moreCentrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows...3.3 Low
- foswiki, twiki +1 moreThe localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x...5.0 Medium
- perlThe _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7...7.5 High
- digium asterisk, certified asterisk +1 moreAsterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2;...4.3 Medium
- swi-prologMultiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before...7.5 High
- swi-prologMultiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI...7.5 High
- digium asterisk, certified asterisk +1 moreMultiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x...5.0 Medium
- rubyonrails railsAuthlogic Information Exposure vulnerability5.0 Medium
- rubyonrails rails, ruby on rails +1 moreActive Record contains SQL Injection7.5 High
- Show moreLoading…