CVEs published in April 2013
420 vulnerabilities, 66 critical, 2 exploited.
- cisco ubr10012Cisco Universal Broadband (aka uBR) 10000 series routers, when an IPv4/IPv6 dual-stack modem is...5.7 Medium
- cisco anyconnect secure mobility clientHeap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure...6.6 Medium
- cisco anyconnect secure mobility clientThe Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client)...6.6 Medium
- cisco prime network control system, prime network control system software +1 moreThe Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a...7.5 High
- cisco unified meetingplace web conferencing serverCisco Unified MeetingPlace Web Conferencing Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1...9.3 High
- cisco unified meetingplaceThe web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0...7.6 High
- cisco ios xe, asr 1001, asr 1002 +6 more +8 moreCisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers ...7.1 High
- cisco ios xe, asr 1001, asr 1002 +5 more +7 moreCisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series...7.8 High
- cisco ios xe, asr 1001, asr 1002 +5 more +7 moreCisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series...7.8 High
- cisco ios xe, asr 1001, asr 1002 +4 more +6 moreCisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR)...7.8 High
- cisco firewall services module softwareThe auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before...7.8 High
- cisco adaptive security appliance, adaptive security appliance software +1 moreCisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote...7.8 High
- cisco adaptive security appliance softwareCisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8...7.1 High
- cisco adaptive security appliance, adaptive security appliance software +1 moreThe authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with...7.8 High
- cisco 5500 series adaptive security appliance, 6500 series adaptive security appliance, 7600 series adaptive security appliance +2 more +4 moreCisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8...7.8 High
- google chrome osGoogle Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation...7.5 High
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows...4.3 Medium
- puppet enterprise, puppetlabs puppet +1 morePuppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client...5.0 Medium
- haproxyBuffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive...5.1 Medium
- redhat packstack, red hat openstack folsom for rhel 6, enterprise linux openstack platform 5 (icehouse) +3 more +5 morePackstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation6.1 Medium
- redhat openstack essex, openstack folsom +1 moreRed Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable...2.1 Low
- adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2...7.5 High
- adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2...7.5 High
- adobe shockwave playerAdobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a...10.0 High
- adobe shockwave playerAdobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which...10.0 High
- adobe shockwave playerAdobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a...10.0 High
- adobe shockwave playerBuffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary...10.0 High
- adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X,...10.0 High
- adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X,...10.0 High
- adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X,...10.0 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...9.3 High
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...9.3 High
- microsoft remote desktop connectionThe Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6...9.3 High
- microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreThe Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2...7.2 High
- microsoft windows 7, windows 8, windows rt +5 more +7 moreRace condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...4.9 Medium
- microsoft windows 7, windows server 2008, windows vista +2 moreThe NTFS kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2...6.9 Medium
- microsoft windows 7, windows 8, windows rt +3 more +5 moreRace condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows...6.9 Medium
- microsoft windows 7, windows 8, windows server 2003 +3 more +5 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2,...7.1 High
- microsoft sharepoint serverMicrosoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not...3.5 Low
- microsoft groove server, office web apps, sharepoint foundation +2 more +4 moreCross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server...4.3 Medium
- microsoft windows 8, windows rt, windows server 2012 +2 moreRace condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows...4.9 Medium
- microsoft windows 7, windows 8, windows rt +5 more +7 moreRace condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,...6.9 Medium
- microsoft active directory, active directory application mode, active directory lightweight directory service +1 more +3 moreThe LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active...5.0 Medium
- microsoft windows defenderThe Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an...7.2 High
- ruby-lang rubyRuby vulnerable to denial of service5.0 Medium
- digineo thumbshooterThumbshooter vulnerable to Code Injection7.5 High
- dan kubb extlibextlib does not properly restrict casts of string values7.5 High
- jnunemaker httpartyHTTParty does not restrict casts of string values7.5 High
- john nunemaker crackcrack does not properly restrict casts of string values7.5 High
- freedesktop popplerpoppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an...6.8 Medium
- Show moreLoading…