CVEs published in March 2013
433 vulnerabilities, 43 critical, 2 exploited.
- siemens wincc tia portalCRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows...4.3 Medium
- siemens wincc tia portalThe HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to...4.0 Medium
- siemens wincc tia portalMultiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC ...4.3 Medium
- siemens wincc tia portalCross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal)...4.3 Medium
- selinc acselerator quicksetSchweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak...6.2 Medium
- siemens wincc tia portalSiemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application...4.6 Medium
- curl project curlCurl Gem insufficient URL escaping command injection7.5 High
- rubygems mini magickMiniMagick Gem for Ruby URI Handling Arbitrary Command Injection7.5 High
- rubygems fastreaderfastreader Gem for Ruby URI Handling Arbitrary Command Injection7.5 High
- rubygems command wrapShell command injection in command_wrap7.5 High
- realnetworks realplayer, realplayer sp +1 moreHeap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0...9.3 High
- windriver vxworksThe web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of...5.0 Medium
- windriver vxworksThe WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to...4.0 Medium
- windriver vxworksIPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to...10.0 High
- windriver vxworksIPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated...6.8 Medium
- windriver vxworksIPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated...6.8 Medium
- windriver vxworksIPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause...7.8 High
- apple iphone os, tvos +1 moreThe IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3...7.2 High
- apple iphone osThe Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock...2.1 Low
- apple iphone oslockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the...1.9 Low
- apple iphone os, tvos +1 moreThe ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1...2.1 Low
- apple iphone os, tvos +1 moredyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of...4.6 Medium
- ibm infosphere information serverThe installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and...7.2 High
- rubyonrails rails, ruby on rails, redhat enterprise linux +2 moreactionpack Cross-site Scripting vulnerability4.3 Medium
- rubyonrails rails, ruby on rails +1 moreactivesupport Improper Input Validation vulnerability5.8 Medium
- rubyonrails rails, ruby on rails, redhat enterprise linux +2 moreactionpack Cross-site Scripting vulnerability4.3 Medium
- rubyonrails rails, ruby on rails, redhat enterprise linux +2 moreActive Record Improper Input Validation5.0 Medium
- nec atermwm3450rn, atermwm3600r, atermwr8160n +3 more +5 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on...6.8 Medium
- ibm sterling multi-channel fulfillment solution, sterling selling and fulfillment foundation +1 moreCross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5...4.3 Medium
- ibm sterling multi-channel fulfillment solution, sterling selling and fulfillment foundation +1 moreIBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before...5.5 Medium
- sambaSamba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world...6.0 Medium
- citrix access gatewayUnspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524...5.0 Medium
- jenkinsJenkins Vulnerable to Denial of Service (DoS) via Crafted Payload4.0 Medium
- jenkinsJenkins allows Remote Users to Build Arbitrary Jobs4.0 Medium
- jenkinsJenkins Cross-Site Request Forgery vulnerability7.5 High
- jenkinsJenkins subject to Cross-site Scripting4.3 Medium
- jenkinsJenkins Cross-Site Request Forgery vulnerability6.8 Medium
- debian latdStack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows...10.0 High
- mathijs koenraadt search api sortsCross-site scripting (XSS) vulnerability in the Search API Sorts module 7.x-1.x before 7.x-1.4...2.1 Low
- zugec ivan keyboard shortcut utilityThe Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check...6.0 Medium
- user relationships project relationshipsCross-site scripting (XSS) vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4...2.1 Low
- video project videoThe Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows...4.4 Medium
- leighton whiting mark completeCross-site request forgery (CSRF) vulnerability in the Mark Complete module 7.x-1.x before 7.x-1...6.8 Medium
- guy bedford live cssUnrestricted file upload vulnerability in the Live CSS module 6.x-2.x before 6.x-2.1 and 7.x-2.x...6.0 Medium
- restful web services project web servicesCross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1...6.8 Medium
- oracle support toolsasr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to...6.9 Medium
- google chrome osThe GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of...10.0 High
- linux kernel, opensuse +1 moreInteger overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct...7.2 High
- tibco spotfire web playerThe Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5...6.4 Medium
- tibco spotfire web playerCross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before...4.3 Medium
- Show moreLoading…