CVEs published in June 2013
349 vulnerabilities, 74 critical, 3 exploited.
- mozilla firefoxThe getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a...4.3 Medium
- mozilla firefoxMozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism,...4.0 Medium
- mozilla firefoxMozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for...5.0 Medium
- mozilla firefoxThe Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI...9.3 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow...10.0 High
- puppet, puppet enterprise, canonical ubuntu linux +2 more +4 morePuppet Improper Input Validation vulnerability7.5 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreThe XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7,...9.3 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreThe PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7...7.5 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreThe SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7,...4.3 Medium
- mozilla firefox, thunderbird, thunderbird esr +2 moreMozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and...4.3 Medium
- mozilla firefox, thunderbird, thunderbird esr +13 more +15 moreMozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and...8.8 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreThe System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox...9.3 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0,...10.0 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox...9.3 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreUse-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable...9.3 High
- mozilla firefox, thunderbird, thunderbird esr +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0,...10.0 High
- christophe balisky meta feeditSQL injection vulnerability in the meta_feedit extension 0.1.10 and earlier for TYPO3 allows...7.5 High
- bas van beek multishopMultishop extension for TYPO3 has SQL Injection vulnerability7.5 High
- michael staatz sofortueberweisung2commerceSQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3...7.5 High
- urs maag maag form captchaOpen redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows...6.4 Medium
- kristof de jaeger display suiteCross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7...4.3 Medium
- jordan de laune mp3 playerCross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote...2.1 Low
- alejandro garza apachesolr autocompleteCross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6...4.3 Medium
- fortinet forticlient, forticlient lite, forticlient ssl vpn +2 moreFortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android;...5.4 Medium
- fortinet fortiosFortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities,...6.5 Medium
- freebsdThe vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD...6.9 Medium
- nathan haug webformCross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal...4.3 Medium
- yoran brault filebrowserCross-site scripting (XSS) vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for...4.3 Medium
- alexey sukhotin elfinderCross-site request forgery (CSRF) vulnerability in the elFinder file manager module 6.x-0.x...4.3 Medium
- wolfgang ziegler rulesCross-site scripting (XSS) vulnerability in the Rules module 7.x-2.x before 7.x-2.3 for Drupal...4.3 Medium
- haxx curl, libcurl, canonical ubuntu linux +2 more +4 moreHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...6.8 Medium
- phpThe mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16...4.3 Medium
- canon mx922 printer, mg3100 printer, mg5300 printer +6 more +8 moreThe Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow...5.0 Medium
- canon mx922 printer, mg3100 printer, mg5300 printer +6 more +8 moreEnglish/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870...2.1 Low
- canon mx922 printer, mg3100 printer, mg5300 printer +6 more +8 moreThe default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100,...7.5 High
- cisco webex socialMultiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote...4.3 Medium
- wordpress wp maintenance mode pluginCross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8...6.8 Medium
- ibm websphere commerceIBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x...4.3 Medium
- kong inf08Cross-site scripting (XSS) vulnerability in the phptemplate_preprocess_node function in template...4.3 Medium
- ibm application manager for smart business, tivoli monitoring +1 moreThe internal web server in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0...4.3 Medium
- ibm application manager for smart business, tivoli monitoring +1 moreBuffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0...5.0 Medium
- ibm application manager for smart business, tivoli monitoring +1 moreThe Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4,...5.0 Medium
- ibm application manager for smart business, tivoli monitoring +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Basic Services component in IBM Tivoli...4.3 Medium
- ibm lotus inotes, lotus notes, lotus notes traveler +2 morentmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1,...7.2 High
- ibm aix, vios +1 moreThe IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP...7.1 High
- ibm sametime, lotus sametime +1 moreThe Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the...1.9 Low
- ibm sterling connect direct user interfaceThe Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not...5.0 Medium
- ibm sterling connect direct user interfaceThe Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not...1.9 Low
- cisco telepresence tc softwareThe firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement...8.3 High
- cisco telepresence tc software, telepresence te software +1 moreCisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to...7.8 High
- Show moreLoading…