CVEs published in March 2013
433 vulnerabilities, 43 critical, 2 exploited.
- siemens cp 1604, cp 1616, cp 1604 firmware +1 more +3 more The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5... 10.0 High
- asterisk certified asterisk, digiumphones, open source +2 more main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2... 5.0 Medium
- asterisk open source Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11... 7.5 High
- asterisk business edition, certified asterisk, digiumphones +1 more +3 more The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11... 5.0 Medium
- coreftp Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute... 5.1 Medium
- omron openwnn The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified... 4.3 Medium
- microsoft modern mail Microsoft Windows Modern Mail allows remote attackers to spoof link targets via a crafted HTML e... 5.8 Medium
- novell groupwise messenger, messenger +1 more Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and... 9.3 High
- novell identity manager roles based provisioning module Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity... 10.0 High
- novell zenworks mobile management Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1... 7.5 High
- novell zenworks configuration management The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does... 10.0 High
- novell zenworks configuration management Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in... 6.8 Medium
- ibm rational policy tester, security appscan +1 more Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x... 6.8 Medium
- ibm rational policy tester, security appscan +1 more IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x... 7.2 High
- ibm rational policy tester, security appscan +1 more Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security... 4.3 Medium
- ibm security appscan Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7... 6.5 Medium
- ibm security appscan IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends... 4.3 Medium
- ibm rational policy tester, security appscan +1 more The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and... 4.3 Medium
- ibm rational policy tester, security appscan +1 more Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8... 4.3 Medium
- ibm software use analysis, tivoli endpoint manager +1 more Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application... 6.8 Medium
- novell sentinel log manager Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention... 4.3 Medium
- synchroweb synconnect SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote... 7.5 High
- arubanetworks arubaos Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in... 4.3 Medium
- mariadb, oracle mysql, canonical ubuntu linux +6 more +8 more MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68,... 5.0 Medium
- ngircd channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion... 5.0 Medium
- mysql Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has... 7.5 High
- cisco ios, ios xe +1 more The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS... 7.8 High
- cisco ios The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3,... 7.8 High
- cisco ios The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst... 7.8 High
- cisco ios Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP... 7.8 High
- cisco ios Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a... 7.8 High
- cisco ios, ios xe +1 more The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS... 7.1 High
- cisco ios Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2... 7.8 High
- mcafee virtual technician, epo mcafee virtual technician +1 more An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101... 8.2 High
- hp procurve switch 1700-24, procurve switch 1700-8, procurve switch software +2 more Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with... 6.8 Medium
- mysql Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has... 7.5 High
- zeroclipboard project zeroclipboard Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in... 4.3 Medium
- gnome online accounts, canonical ubuntu linux +1 more Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly... 4.3 Medium
- gnome online accounts, canonical ubuntu linux +1 more Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly... 4.3 Medium
- zeroclipboard project zeroclipboard Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to... 4.3 Medium
- isc dhcp libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service ... 4.9 Medium
- isc bind libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2,... 7.8 High
- emc smarts network configuration manager Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC... 9.3 High
- emc smarts ip manager, smarts mpls manager, smarts network protocol manager +3 more +5 more Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance... 4.3 Medium
- emc smarts network configuration manager EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all... 9.3 High
- google chrome Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element... 6.8 Medium
- google chrome Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka... 7.5 High
- google chrome The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the... 7.5 High
- google chrome The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial... 5.0 Medium
- google chrome Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against... 7.5 High
- Show olderLoading…