CVEs published in July 2013
489 vulnerabilities, 72 critical, 2 exploited.
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...4.0 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...4.0 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the...5.0 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreMultiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling...6.5 Medium
- ibm websphere mqMultiple buffer overflows in mqm programs in IBM WebSphere MQ 7.0.x before 7.0.1.11, 7.1.x before...4.6 Medium
- hp lefthand virtual san appliance hydra, lefthand p4000 virtual san appliance, lefthand virtual san appliance hydra software +2 moreUnspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10...10.0 High
- ibm ims enterprise suiteUnspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows...9.0 High
- ibm sterling b2b integrator, sterling file gateway +1 moreMultiple cross-site scripting (XSS) vulnerabilities in IBM Sterling File Gateway 2.2 and Sterling...3.5 Low
- ibm sterling b2b integrator, sterling file gateway +1 moreMultiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and...4.3 Medium
- cisco telepresence tc softwareThe SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger...4.3 Medium
- cisco desktop collaboration experienceBuffer overflow in an unspecified Android API on the Cisco Desktop Collaboration Experience DX650...6.6 Medium
- cisco content security management appliance, web security appliance, email security appliance firmware +2 moreCross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web...6.8 Medium
- usertask center messaging project center messagingCross-site scripting (XSS) vulnerability in the UserTask Center, Messaging (sys_messages)...4.3 Medium
- georg ringer newsNews system (news) extension for TYPO3 vulnerable to SQL Injection7.5 High
- kasper skarhoj accessible is browse resultsCross-site scripting (XSS) vulnerability in the Accessible browse results for indexed search ...4.3 Medium
- kurt gusbeth myquizpollCross-site scripting (XSS) vulnerability in the My quiz and poll (myquizpoll) extension before 2...4.3 Medium
- kurt gusbeth myquizpollSQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 2.0.6 for TYPO3...7.5 High
- phpunit project phpunitPHPUnit extension for TYPO3 vulnerable to Cross-site Scripting4.3 Medium
- atlassian crowd** DISPUTED ** Atlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via...7.5 High
- atlassian crowdAtlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers...5.8 Medium
- services project servicesCross-site request forgery (CSRF) vulnerability in the Services module 6.x-3.x and 7.x-3.x before...6.8 Medium
- typo3Typo3 Function Menu API XSS Vulnerability3.5 Low
- xenThe libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions...7.4 High
- xenMultiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow...6.9 Medium
- xenThe Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain...6.9 Medium
- xenMultiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest...6.9 Medium
- xenXen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of...4.7 Medium
- xenXen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows...5.2 Medium
- xenXen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP,...4.3 Medium
- xen, debian linux +1 moreBuffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and...7.4 High
- xenXen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on...7.4 High
- autotrace project autotraceInteger underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows...6.8 Medium
- wordpressThe default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security...4.3 Medium
- tinymce media, wordpress +1 moremoxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before...4.3 Medium
- wordpressWordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers...4.3 Medium
- wordpressWordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider...4.3 Medium
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote...4.3 Medium
- wordpressWordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote...4.0 Medium
- wordpressThe HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet...4.3 Medium