CVEs published in July 2013
489 vulnerabilities, 72 critical, 2 exploited.
- novell groupwiseCross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and...4.3 Medium
- cisco secure access control systemThe web interface in Cisco Secure Access Control System (ACS) does not properly suppress error...4.0 Medium
- spice project spice, canonical ubuntu linux +1 moreThe (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server...5.0 Medium
- linux kernelThe fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through...5.4 Medium
- phpext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote...6.8 Medium
- blackberry os, z10 +1 moreBlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a...6.2 Medium
- hp network node manager iUnspecified vulnerability in HP Network Node Manager i (NNMi) 9.00, 9.1x, and 9.2x allows remote...7.5 High
- cisco secure access control systemCross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure...6.8 Medium
- cisco secure access control systemCross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control...4.3 Medium
- cisco secure access control systemCross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control...4.3 Medium
- cisco secure access control systemCross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control...4.3 Medium
- metin saylan dropdown menu widgetCross-site request forgery (CSRF) vulnerability in the Dropdown Menu Widget plugin 1.9.1 for...6.8 Medium
- sharp aquos hn-pp150, aquos hn-pp150 firmware +1 moreThe Sharp AQUOS PhotoPlayer HN-PP150 with firmware before 1.04.00.04 allows remote attackers to...5.0 Medium
- blackberry qnx neutrino rtos, qnx software development platform +1 moreBuffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software...5.4 Medium
- blackberry qnx momentics tool suite, qnx neutrino rtos, qnx software development platform +2 moreStack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS...7.8 High
- cisco unified meetingplace web conferencingCross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace Web Conferencing allows...4.3 Medium
- cisco unified communications domain managerCisco Unified Communications Domain Manager does not properly allocate memory for GET and POST...6.8 Medium
- apache geronimo, ibm websphere application server +1 moreApache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.110.0 High
- apache openjpaDeserialization of Untrusted Data in Apache OpenJPA7.5 High
- juniper junos, srx1400, srx3400 +1 more +3 moreJuniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before...5.0 Medium
- juniper junos, srx100, srx110 +10 more +12 moreflowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer...7.8 High
- juniper junos, srx100, srx110 +10 more +12 moreflowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12...7.8 High
- juniper junosThe kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43,...7.1 High
- juniper junos, srx100, srx110 +10 more +12 moreBuffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12...10.0 High
- juniper junos, srx100, srx110 +10 more +12 moreflowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44...7.8 High
- alstom micom s1 agile, micom s1 studio +1 moreAlstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for...6.6 Medium
- triplc nano-10 plc, nano-10 plc firmware +1 moreTriangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an...7.8 High
- hp san\/iqLeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a...9.4 High
- lookout security \& antivirusThe Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause...4.3 Medium
- cisco unified operations manager, unified service monitor +1 moreCross-site scripting (XSS) vulnerability in the web framework in the unified-communications...4.3 Medium
- cisco virtualization experience client 6000, virtualization experience client 6000 series firmware, virtualization experience client 6215 +2 moreThe firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating...6.8 Medium
- cisco unified communications domain managerMultiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Communications Domain...4.3 Medium
- cisco telepresence tc softwareThe web portal in TC software on Cisco TelePresence endpoints does not require an exact password...4.3 Medium
- cisco nexus 1000v, nx-os +1 moreThe license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to...6.8 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...4.3 Medium
- videolan vlc media player** DISPUTED ** plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly...6.8 Medium
- apache strutsCode injection in Apache Struts8.1 High
- apache strutsArbitrary code execution in Apache Struts9.3 High
- apache struts, struts2-showcase +1 moreImproper Control of Generation of Code in Apache Struts9.3 High
- videolan vlc media playerThe ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows...6.8 Medium
- videolan vlc media playerMultiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers...9.3 High
- videolan vlc media playerThe SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user...4.3 Medium
- adobe coldfusionAdobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components (CFC)...10.0 High
- adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0 through 9.0.2, when the JRun application server...5.0 Medium
- adobe shockwave playerAdobe Shockwave Player before 12.0.3.133 allows attackers to execute arbitrary code or cause a...10.0 High
- google chromeMultiple unspecified vulnerabilities in Google Chrome before 28.0.1500.71 allow attackers to...7.5 High
- google chrome, debian linux +1 moreGoogle Chrome before 28.0.1500.71 does not properly determine the circumstances in which a...5.8 Medium
- google chrome, debian linux +1 moreGoogle Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of...5.0 Medium
- google chrome, xmlsoft libxml2 +1 moreparser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products...5.0 Medium
- google chrome, debian linux +1 morebrowser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly...5.0 Medium
- Show moreLoading…