CVEs published in March 2013
433 vulnerabilities, 43 critical, 2 exploited.
- eucalyptusThe internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require...5.0 Medium
- cisco 200 series smart switches, 200 series smart switches software, 300 series managed switches +1 more +3 moreThe Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series...5.0 Medium
- cisco prime infrastructureCross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime...6.8 Medium
- openbsd opensshThe default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing...5.0 Medium
- google chrome frameThe Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame...4.3 Medium
- wireshark, debian linux, opensuse +2 moreThe DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the...5.0 Medium
- wireshark, debian linux, opensuse +2 moreepan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in...7.8 High
- wireshark, debian linux, opensuse +2 moreThe dissect_diagnosticrequest function in epan/dissectors/packet-reload.c in the REsource...6.1 Medium
- wireshark, debian linux, opensuse +2 moreThe FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote...6.1 Medium
- wireshark, debian linux, opensuse +2 moreThe CIMD dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote...3.3 Low
- wireshark, debian linux, opensuse +2 moreThe acn_add_dmp_data function in epan/dissectors/packet-acn.c in the ACN dissector in Wireshark 1...3.3 Low
- wireshark, opensuse +1 moreThe AMPQ dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote...6.1 Medium
- wireshark, debian linux, opensuse +2 moreInteger signedness error in the dissect_mount_dirpath_call function in epan/dissectors/packet...2.9 Low
- wireshark, debian linux, opensuse +2 moreThe RTPS and RTPS2 dissectors in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allow...3.3 Low
- wireshark, opensuse +1 moreThe dissect_mpls_echo_tlv_dd_map function in epan/dissectors/packet-mpls-echo.c in the MPLS Echo...3.3 Low
- wireshark, debian linux, opensuse +2 moreThe dissect_server_info function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in...3.3 Low
- wireshark, opensuse +1 moreThe CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers,...3.3 Low
- wireshark, opensuse +1 moreThe dissect_hartip function in epan/dissectors/packet-hartip.c in the HART/IP dissector in...6.1 Medium
- wireshark, opensuse +1 moreThe TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of...3.3 Low
- xenoxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the...4.3 Medium
- xenThe do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not...4.6 Medium
- dovecotDovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the...5.8 Medium
- linux kernelThe xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not...6.2 Medium
- linux kernelnet/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink...2.1 Low
- trimble infrastructure gnss series receiver netr3, infrastructure gnss series receiver netr5, infrastructure gnss series receiver netr8 +2 more +4 moreCross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble...4.3 Medium
- hp linux imaging and printing project, redhat enterprise linux +1 moreHP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary...1.9 Low
- cisco security monitoring analysis and response systemThe XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote...4.3 Medium
- ibm tivoli application dependency discovery managerCross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM...3.5 Low
- ibm tivoli application dependency discovery managerCross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User...3.5 Low
- ibm tivoli application dependency discovery managerThe SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before...5.8 Medium
- linux kernelThe _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate...4.6 Medium
- rsa authentication agent for windowsEMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock...5.4 Medium
- ibm websphere commerceUnspecified vulnerability in the web services framework in IBM WebSphere Commerce 6.0 through 6.0...4.3 Medium
- php, apple mac os x, redhat enterprise linux +2 moreThe SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read...4.3 Medium
- phpThe SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read...5.0 Medium
- phpext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship...7.5 High
- google chromeDirectory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers...7.5 High
- google chromeGoogle Chrome before 25.0.1364.152 does not properly manage the interaction between the browser...7.5 High
- google chromeThe XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive...5.0 Medium
- google chromeGoogle Chrome before 25.0.1364.152 does not properly manage bindings of extension processes,...7.5 High
- google chromeRace condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of...7.5 High
- google chromeThe IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to...7.5 High
- google chromeThe Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364...7.5 High
- todd miller sudo, apple mac os x +1 moresudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically...6.9 Medium
- freedesktop dbus-glibThe dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not...7.2 High
- thekelleys dnsmasqDnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from...5.0 Medium
- thekelleys dnsmasq, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreDnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from...5.0 Medium
- Show moreLoading…