CVEs published in March 2013
433 vulnerabilities, 43 critical, 2 exploited.
- cisco jabber imThe XML parser in the Cisco Jabber IM application for Android allows remote authenticated users...6.3 Medium
- moodlecalendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability...4.0 Medium
- openssl, redhat enterprise linux +1 moreRace condition in a certain Red Hat patch to the PRNG lock implementation in the...4.3 Medium
- opensslThe do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...5.0 Medium
- opensslRace condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9...6.8 Medium
- opensslThe BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e...4.3 Medium
- opensslUse-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL...6.8 Medium
- opensslOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to...5.0 Medium
- opensslMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...7.1 High
- opensslMemory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...7.1 High
- opensslThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...4.3 Medium
- opensslMemory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before...5.0 Medium
- openssld1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1...5.0 Medium
- opensslDouble free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb...5.0 Medium
- openssl, fedoraproject fedora, mariadb +8 more +10 moreThe dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...4.3 Medium
- opensslThe Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap...1.9 Low
- libarchive, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c...5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +1 more +3 morelibxml2 through 2.9.1 does not properly handle external entities expansion unless an application...6.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, opensuse +2 morelibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...4.3 Medium
- terillion reviews pluginCross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress...4.3 Medium
- openstack folsom, canonical ubuntu linux +1 moreOpenStack Keystone Improper Authentication vulnerability6.8 Medium
- openstack glance, red hat openstack folsom for rhel 6, openstack platform 16.2 +2 more +4 moreOpenstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request6.5 Medium
- openstack essex, folsom, grizzly +1 more +3 moreOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function4.0 Medium
- openstack essex, folsom, grizzly +6 more +8 moreOpenstack nova: vnc proxy can connect to the wrong vm7.6 High
- mailup wp-mailupajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict...5.0 Medium
- mailup wp-mailupajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict...5.0 Medium
- linux kernelnet/bridge/br_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures,...1.9 Low
- linux kernelThe sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4...6.9 Medium
- linux kernelThe rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not...1.9 Low
- linux kernelfs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain...6.2 Medium
- matomoPiwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests5.0 Medium
- google chrome, v8 +1 moreGoogle V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to...6.8 Medium
- matomoPiwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)4.3 Medium
- askia askiawebMultiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA...4.3 Medium
- askia askiawebMultiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow...7.5 High
- ibm tivoli endpoint managerCross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM)...3.5 Low
- verizon fios actiontec mi424wr-gen31 router, fios actiontec mi424wr-gen31 router firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS...6.8 Medium
- ibm rational clearquestCross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x...4.3 Medium
- siteminder agent for sharepoint 2010, siteminder federation 12.0, 12.1 +3 more +5 moreCA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent...7.5 High
- canonical ubuntu linuxpam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable,...7.2 High
- debian apt, canonical ubuntu linux, debian advanced package tool +2 moreapt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which...4.3 Medium
- fedoraproject sssdThe Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when...4.9 Medium
- siemens simatic pcs7, wincc +1 moreDirectory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in...4.0 Medium
- siemens simatic pcs7, wincc +1 moreSiemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not...4.0 Medium
- siemens simatic pcs7, wincc +1 moreThe web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other...5.8 Medium
- siemens simatic pcs7, wincc +1 moreSiemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not...4.0 Medium
- siemens simatic pcs7, wincc +1 moreBuffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7...6.1 Medium
- siemens simatic pcs7, wincc +1 moreBuffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC...6.8 Medium
- siemens wincc tia portalCross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal)...3.5 Low
- siemens wincc tia portalDirectory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated...4.0 Medium
- Show moreLoading…