CVEs published in June 2013
349 vulnerabilities, 74 critical, 3 exploited.
- hp storage data protectorUnspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote...10.0 High
- jig movatwitouch, movatwitouch paid +1 moreThe Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid...2.6 Low
- cisco webex meetings serverThe Event Center module in Cisco WebEx Meetings Server does not perform request authentication in...4.3 Medium
- apple ipad, ipad2, ipad mini +1 more +3 moreThe get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad...6.2 Medium
- apple mac os x, iphone os +1 moreThe posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate...6.9 Medium
- apple mac os x, iphone os +1 moreThe mach_port_space_info function in osfmk/ipc/mach_debug.c in the XNU kernel in Apple Mac OS X...4.9 Medium
- apple mac os xThe fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x...2.1 Low
- apple mac os x, iphone os, watchos +2 moresys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly...4.6 Medium
- apple iphone osStack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS...5.0 Medium
- apple mac os xThe posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of...2.1 Low
- apple iphone osApple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an...4.3 Medium
- apple mac os x, mac os x server +1 moreCoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the...6.8 Medium
- apple safariWebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code...6.8 Medium
- apple safariXSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows...4.3 Medium
- apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote...4.3 Medium
- apple safariWebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code...6.8 Medium
- apple mac os x, mac os x server +1 moreSMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated...4.9 Medium
- apple mac os xDisk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to...2.1 Low
- apple mac os x, mac os x server +1 moreDirectory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary...9.3 High
- apple mac os xStack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote...6.8 Medium
- apple mac os x, mac os x server +1 moreThe Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent...1.7 Low
- apple mac os x, mac os x server +1 moreBuffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to...6.8 Medium
- ibm db2, db2 connect, smart analytics system 7600 +2 moreStack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5,...7.2 High
- ibm tivoli netcool system service monitors, tivoli netcool application service monitors +1 moreBuffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM)...7.6 High
- ibm tivoli netcool system service monitors, tivoli netcool application service monitors +1 moreMultiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application...7.6 High
- google chrome, debian linux +1 moreMultiple unspecified vulnerabilities in Google Chrome before 27.0.1453.110 allow attackers to...7.5 High
- google chromeThe PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a...7.5 High
- google chrome, debian linux +1 moreGoogle Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote...10.0 High
- google chrome, debian linux +1 moreSkia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration,...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to...7.5 High
- google chrome, debian linux +1 moreGoogle Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to...7.5 High
- google chrome, debian linux +1 moreUse-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to...7.5 High
- google chrome, debian linux +1 moreThe Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a...5.0 Medium
- google chromeGoogle Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process...7.5 High
- linux kernelarch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance...4.7 Medium
- linux kernelThe dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback...3.8 Low
- ibm qradar security information and event managerUnspecified vulnerability in IBM QRadar Security Information and Event Manager (SIEM) 7.x before...6.5 Medium
- fenrir-inc sleipnir mobileThe Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2...5.8 Medium
- yahoo yahoo\! browserThe Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the...5.8 Medium
- ibm eclipse help system, spss data collection +1 moreMultiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3...4.3 Medium
- ibm websphere portalCRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before...3.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet...4.3 Medium
- simon mcvittie telepathy gabbleThe Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a...6.8 Medium
- photogallerycreator flash-album-galleryCross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin...4.3 Medium
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 Low
- mutiny, mutiny appliance, virtual appliance +2 moreMultiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in...8.5 High