CVEs published in July 2013

489 vulnerabilities, 72 critical, 2 exploited.

• monkey-project monkey The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to... CVE-2013-3724 Public exploit EPSS 13.7% 5.0 MediumJuly 31, 2013
• juniper ive os, fips secure access 4000, fips secure access 4500 +14 more +16 more Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE... CVE-2012-5460 4.3 MediumJuly 31, 2013
• cisco application and content networking system software, enterprise content delivery network software, internet streamer content delivery system +5 more +7 more The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c,... CVE-2013-3444 9.0 HighJuly 31, 2013
• cisco wide area application services The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c,... CVE-2013-3443 10.0 HighJuly 31, 2013
• cisco vc240 network bullet camera, video surveillance vc220 network dome camera +1 more The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service (WebUI... CVE-2012-3913 5.0 MediumJuly 31, 2013
• siemens wincc Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote... CVE-2013-4912 5.8 MediumJuly 31, 2013
• siemens wincc Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12... CVE-2013-4911 6.8 MediumJuly 31, 2013
• siemens scalance w700 series firmware, scalance w744-1, scalance w744-1pro +14 more +16 more Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx... CVE-2013-4652 10.0 HighJuly 31, 2013
• siemens scalance w700 series firmware, scalance w744-1, scalance w744-1pro +14 more +16 more Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate... CVE-2013-4651 6.6 MediumJuly 31, 2013
• ibm websphere commerce IBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid... CVE-2013-2994 6.4 MediumJuly 31, 2013
• symantec web gateway, web gateway appliance 8450, web gateway appliance 8490 +2 more The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly... CVE-2013-4673 5.8 MediumJuly 31, 2013
• symantec web gateway, web gateway appliance 8450, web gateway appliance 8490 +2 more The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect... CVE-2013-4672 7.2 HighJuly 31, 2013
• symantec web gateway, web gateway appliance 8450, web gateway appliance 8490 +2 more Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web... CVE-2013-4671 6.0 MediumJuly 31, 2013
• symantec web gateway, web gateway appliance 8450, web gateway appliance 8490 +2 more Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web... CVE-2013-4670 4.3 MediumJuly 31, 2013
• symantec web gateway, web gateway appliance 8450, web gateway appliance 8490 +2 more Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG... CVE-2013-1617 7.4 HighJuly 31, 2013
• symantec web gateway, web gateway appliance 8450, web gateway appliance 8490 +2 more The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote... CVE-2013-1616 Public exploit EPSS 10.7% 8.3 HighJuly 31, 2013
• ibm websphere commerce IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform... CVE-2013-2993 5.8 MediumJuly 31, 2013
• minibb Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow... CVE-2013-5020 Public exploit 4.3 MediumJuly 31, 2013
• vector ultra mini httpd Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary... CVE-2013-5019 Public exploit EPSS 63.6% 10.0 HighJuly 31, 2013
• symantec encryption management server, pgp universal server +1 more Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec... CVE-2013-4674 4.3 MediumJuly 31, 2013
• apache openoffice Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service ... CVE-2013-4156 Fix available 6.8 MediumJuly 31, 2013
• apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1... CVE-2013-4131 Fix available 4.0 MediumJuly 31, 2013
• novell client The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server... CVE-2013-3956 Public exploit 7.2 HighJuly 31, 2013
• novell client Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP... CVE-2013-3697 7.2 HighJuly 31, 2013
• ge intelligent platforms proficy hmi\/scada cimplicity, intelligent platforms proficy process systems with cimplicity +1 more Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent... CVE-2013-2785 9.3 HighJuly 31, 2013
• broadcom service desk manager Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows... CVE-2013-2630 4.3 MediumJuly 31, 2013
• fedoraproject 389 directory server, redhat directory server +1 more The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict... CVE-2013-2219 Fix available 4.0 MediumJuly 31, 2013
• reviewboard review board Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown CVE-2013-2209 Fix available 4.3 MediumJuly 31, 2013
• apache openoffice Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service ... CVE-2013-2189 Fix available 6.8 MediumJuly 31, 2013
• theforeman foreman, redhat openstack +1 more Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1... CVE-2013-2121 Public exploit EPSS 24.8% 6.0 MediumJuly 31, 2013
• theforeman foreman, redhat openstack +1 more The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows... CVE-2013-2113 Public exploit EPSS 20.9% 6.0 MediumJuly 31, 2013
• apache subversion, opensuse +1 more contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated... CVE-2013-2088 Public exploitFix available EPSS 31.5% 7.1 HighJuly 31, 2013
• redhat satellite, red hat network satellite server v 5.3, network satellite server v 5.4 +2 more +4 more Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass CVE-2013-2056 Fix available 7.5 HighJuly 31, 2013
• emc networker EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration... CVE-2013-0943 4.6 MediumJuly 31, 2013
• westerndigital my net n750, my net n900, my net n900c +2 more main_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16,... CVE-2013-5006 Public exploit 4.3 MediumJuly 31, 2013
• hitachi it operations director, job management partner 1\/it desktop management-manager, jp1\/it desktop management-manager +2 more Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through... CVE-2013-4697 9.0 HighJuly 31, 2013
• cisco webex The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid... CVE-2013-3425 4.0 MediumJuly 31, 2013
• hp sitescope Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow... CVE-2013-2367 Public exploit EPSS 68.9% 10.0 HighJuly 31, 2013
• adobe digital editions Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a... CVE-2013-1377 10.0 HighJuly 31, 2013
• google chrome, debian linux +1 more Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to... CVE-2013-2886 7.5 HighJuly 30, 2013
• google chrome, debian linux +1 more Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to... CVE-2013-2885 7.5 HighJuly 30, 2013
• google chrome, debian linux +1 more Use-after-free vulnerability in the DOM implementation in Google Chrome before 28.0.1500.95... CVE-2013-2884 7.5 HighJuly 30, 2013
• google chrome, debian linux +1 more Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to... CVE-2013-2883 7.5 HighJuly 30, 2013
• google chrome, debian linux, nodejs node.js +1 more +3 more Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a... CVE-2013-2882 Fix available 7.5 HighJuly 30, 2013
• google chrome, debian linux +1 more Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers... CVE-2013-2881 5.8 MediumJuly 30, 2013
• phpmyadmin Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract... CVE-2013-5001 Fix available 3.5 LowJuly 30, 2013
• phpmyadmin phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an... CVE-2013-4999 Fix available 5.0 MediumJuly 30, 2013
• canonical ubuntu linux A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu... CVE-2013-1060 6.9 MediumJuly 30, 2013
• genetechsolutions pie-register Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie... CVE-2013-4954 Public exploit 2.6 LowJuly 29, 2013
• topgames top games script SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to... CVE-2013-4953 Public exploit 7.5 HighJuly 29, 2013
• Show olderLoading…