CVEs published in April 2013
420 vulnerabilities, 66 critical, 2 exploited.
- ibm spss samplepower Buffer overflow in the vsflex7l ActiveX control in IBM SPSS SamplePower 3.0 before FP1 allows... 9.3 High
- ibm spss samplepower Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before... 9.3 High
- ibm spss samplepower Multiple buffer overflows in the Vsflex8l ActiveX control in IBM SPSS SamplePower 3.0 before FP1... 9.3 High
- strongswan strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification,... 4.9 Medium
- redhat icedtea-web, canonical ubuntu linux, opensuse +2 more The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute... 6.8 Medium
- redhat icedtea-web, canonical ubuntu linux, opensuse +2 more The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets... 5.8 Medium
- gnu glibc Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C... 5.0 Medium
- cisco application networking manager, context directory agent, identity services engine software +8 more +10 more The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine... 6.8 Medium
- hp laserjet enterprise p3015, color laserjet 3000, color laserjet 3800 +34 more +36 more Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx,... 5.0 Medium
- linux kernel Race condition in the smb_send_rqst function in fs/cifs/transport.c in the Linux kernel before 3... 4.4 Medium
- cisco unified communications domain manager Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications... 4.3 Medium
- cisco nexus 7000, nx-os, nexus 7000 10-slot +2 more +4 more The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote... 6.1 Medium
- cisco intrusion prevention system SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial of... 4.4 Medium
- cisco ios xr Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a... 4.0 Medium
- cisco unified computing system software Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System ... 4.3 Medium
- linux kernel, redhat enterprise linux, enterprise mrg +3 more +5 more The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial... 7.2 High
- ibm sametime, lotus sametime +1 more The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect... 3.5 Low
- ibm lotus sametime Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2... 3.5 Low
- hp managed printing administration Cross-site scripting (XSS) vulnerability in HP Managed Printing Administration (MPA) before 2.7.0... 4.3 Medium
- ibm spss samplepower Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0... 9.3 High
- ibm application support facility, document connect for application support facility +1 more Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility... 2.3 Low
- ibm application support facility, document connect for application support facility +1 more Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility... 2.9 Low
- ibm connections Cross-site scripting (XSS) vulnerability in the Communities component in IBM Connections 4.5... 4.3 Medium
- crunchify foursquare-checkins Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for... 6.8 Medium
- yahoo yahoo\! browser The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the... 5.8 Medium
- jb\+ jigbrowser\+ The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows... 5.8 Medium
- bluemarblegeo global mapper Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain... 6.9 Medium
- hp storage data protector Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows local... 7.2 High
- phpmyadmin export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables... 4.0 Medium
- phpmyadmin Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows... 6.5 Medium
- phpmyadmin phpMyAdmin Remote Code Execution 4.6 Medium
- phpmyadmin phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to... 6.0 Medium
- linux kernel The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect... 6.9 Medium
- linux kernel kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability... 3.7 Low
- xmlsoft libxml2 Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow... 7.5 High
- blinkwebeffects social-media-widget Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally... 5.0 Medium
- rob westgeest md2pdf md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename 10.0 High
- kelly d. redding kelredd-pruview Shell Metacharacter Injection in kelredd-pruview 9.3 High
- documentcloud karteek-docsplit Karteek Docsplit vulnerable to OS Command Injection 9.3 High
- plataformatec devise, opensuse +1 more Devise does not properly perform type conversion when performing database queries 6.8 Medium
- grape project grape, erik michaels-ober multi xml +1 more Improper Input Validation in multi_xml 7.5 High
- ruby-lang ruby Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068... 5.0 Medium
- ruby-lang ruby Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent... 5.0 Medium
- citrix netscaler access gateway, netscaler access gateway firmware +1 more Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3... 5.4 Medium
- crunchify all-in-on-webmaster Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4... 6.8 Medium
- cisco 5500 series adaptive security appliance, adaptive security appliance software, asa 5500 +2 more The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505... 6.8 Medium
- cybozu office Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3... 6.8 Medium
- cybozu dezie, office, mailwise +2 more Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3... 6.8 Medium
- cisco mds 9000, nexus 5000, adaptive security appliance device manager +7 more +9 more The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device... 9.3 High
- cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 more Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote... 7.5 High
- Show olderLoading…