CVEs published in May 2013
396 vulnerabilities, 111 critical, 5 exploited.
- mesa3d mesa, x libglx +1 moreMultiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger...6.8 Medium
- x libdmxMultiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger...6.8 Medium
- x libxxf86dgaMultiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger...6.8 Medium
- x libxvmcMultiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger...6.8 Medium
- x libxvMultiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation...6.8 Medium
- x libxresMultiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger...6.8 Medium
- x libxrender, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger...6.8 Medium
- x libxrandrMultiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger...6.8 Medium
- x libxineramaInteger overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of...6.8 Medium
- x.org libxiMultiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation...6.8 Medium
- x libxfixesInteger overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of...6.8 Medium
- x libxextMultiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger...6.8 Medium
- infotecs vipnet client, vipnet coordinator, vipnet personal firewall +1 more +3 moreInfotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier,...7.2 High
- google chromeMultiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow...4.3 Medium
- google chromeThe XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain...5.0 Medium
- google chromeRace condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote...6.8 Medium
- google chromeUse-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows...7.5 High
- google chromeThe Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to...7.5 High
- google chrome, apple iphone os +1 moreUse-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows...7.5 High
- google chromeGoogle Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable...7.5 High
- google chrome, v8 +1 moreGoogle V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a...5.0 Medium
- google chromeUse-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.93...7.5 High
- google chromeMultiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to...7.5 High
- web2pyCross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget...4.3 Medium
- emc rsa authentication agentCross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web...4.3 Medium
- rsa authentication api, authentication agent, pluggable authentication module agent +1 more +3 moreEMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA...2.1 Low
- bestpractical rtCross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when...2.6 Low
- bestpractical rtUnspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13,...4.3 Medium
- bestpractical rtCRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13...5.0 Medium
- bestpractical rtRequest Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to...4.3 Medium
- bestpractical rtCross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x...4.3 Medium
- bestpractical rtRequest Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict...6.8 Medium
- bestpractical rtRequest Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated...6.0 Medium
- bestpractical rtbin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to...3.3 Low
- bestpractical rtRequest Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom...6.0 Medium
- openstack keystoneOpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user6.0 Medium
- qemuThe qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses...6.9 Medium
- openstack keystoneOpenStack Keystone Sensitive information disclosure via log files2.1 Low
- openstack devstackOpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to...2.1 Low
- redhat enterprise linux, enterprise linux desktop, enterprise linux eus +6 more +8 morerhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat...4.3 Medium
- canonical telepathy-idle, ubuntu linux +1 moretelepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the...5.8 Medium
- emc celerra control station, vnx control station +1 moreEMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an...6.8 Medium
- apple itunesApple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the...4.3 Medium
- apple itunesWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...6.8 Medium
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- apple itunes, iphone os +1 moreWebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute...9.3 High
- Show moreLoading…