CVEs published in April 2013
420 vulnerabilities, 66 critical, 2 exploited.
- cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 moreThe web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x...9.3 High
- cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 moreThe management API in the XML API management service in the Manager component in Cisco Unified...7.8 High
- cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +2 more +4 moreBuffer overflow in the Intelligent Platform Management Interface (IPMI) functionality in the...10.0 High
- cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect, unified computing system 6248up fabric interconnect +3 more +5 moreThe login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS...9.3 High
- cisco nx-os, nexus 3016q, nexus 3048 +9 more +11 moreCisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.0(3)N2(2), Nexus 3000 devices 5.x before 5...7.8 High
- cisco mds 9000, nexus 7000, nx-os +3 more +5 moreBuffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x...9.0 High
- cisco mds 9000, nexus 7000, nx-os +3 more +5 moreMultiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS...9.0 High
- cisco mds 9000, nexus 1000v, nexus 3000 +24 more +26 moreMultiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on...8.3 High
- lexmark markvisionLexmark Markvision Enterprise before 1.8 provides a diagnostic interface on TCP port 9789, which...9.3 High
- hexagon erdas apollo ecwpMultiple stack-based buffer overflows in NCSAddOn.dll in the ERDAS APOLLO ECWP plugin before 13...10.0 High
- linux kernelThe scm_check_creds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly...1.9 Low
- linux kernelThe clone_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly...4.7 Medium
- linux kernelThe create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not...2.1 Low
- novell imanagerNovell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has...10.0 High
- cisco iosThe generic input/output control implementation in Cisco IOS does not properly manage buffers,...6.8 Medium
- cisco unified contact center express editor softwareThe scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly...5.0 Medium
- cisco firewall services module, adaptive security appliance software +1 moreThe time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in...5.0 Medium
- novell imanagerCross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows...6.8 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in...4.3 Medium
- ibm websphere application serverDirectory traversal vulnerability in the Administrative Console in IBM WebSphere Application...4.0 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0...6.8 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...4.3 Medium
- ibm websphere application serverBuffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0...1.9 Low
- ibm websphere application serverIBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not...3.5 Low
- google authenticatorpam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user...1.9 Low
- hp elitepadHP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot...7.2 High
- ibm infosphere replication serverThe Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before...5.0 Medium
- ibm lotus connectionsCross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections...4.3 Medium
- ibm tririga application platformMultiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2...6.8 Medium
- ibm tririga application platformMultiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3...4.3 Medium
- ibm tririga application platformMultiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3...4.3 Medium
- linux kernelThe vsock_stream_sendmsg function in net/vmw_vsock/af_vsock.c in the Linux kernel before 3.9-rc7...4.9 Medium
- linux kernelThe vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel...4.9 Medium
- rubyonrails rails, ruby on rails +1 moreActive Record component in Ruby on Rails has a data-type injection vulnerability6.4 Medium
- siemens simatic s7-1200 cpu 1211c firmware, simatic s7-1200 cpu 1212c firmware, simatic s7-1200 cpu 1212fc firmware +6 more +8 moreSiemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service ...7.8 High
- siemens simatic s7-1200 cpu 1211c firmware, simatic s7-1200 cpu 1212c firmware, simatic s7-1200 cpu 1212fc firmware +6 more +8 moreSiemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service ...7.8 High
- bitberry software bitzipperBitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a...9.3 High
- avast avast\! mobile securityThe avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a...1.9 Low
- linux kernelThe llcp_sock_recvmsg function in net/nfc/llcp/sock.c in the Linux kernel before 3.9-rc7 does not...4.9 Medium
- linux kernelThe l2tp_ip6_recvmsg function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.9-rc7 does not...4.9 Medium
- linux kernelThe caif_seqpkt_recvmsg function in net/caif/caif_socket.c in the Linux kernel before 3.9-rc7...4.9 Medium
- linux kernelThe sco_sock_recvmsg function in net/bluetooth/sco.c in the Linux kernel before 3.9-rc7 does not...4.9 Medium
- linux kernelThe crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables,...4.9 Medium
- tinc-vpn tincStack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0...6.5 Medium
- apache activemqImproper Authentication in Apache ActiveMQ6.4 Medium
- apache activemqApache ActiveMQ default configuration subject to denial of service5.0 Medium
- apache activemqCross-site Scripting in Apache ActiveMQ4.3 Medium
- opera browserUnspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to...10.0 High
- opera browserOpera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows...5.0 Medium
- mitsubishi-automation mitsubishi mx component, schneider-electric citectfacilities, citectscada +2 moreMultiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in...10.0 High
- Show moreLoading…