CVEs published in July 2013
489 vulnerabilities, 72 critical, 2 exploited.
- elemata cmsSQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers...7.5 High
- mintboardMultiple cross-site scripting (XSS) vulnerabilities in Mintboard 0.3 allow remote attackers to...4.3 Medium
- machformCross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to...4.3 Medium
- machformUnrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to...6.8 Medium
- machformSQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute...7.5 High
- sawmillUnspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows...7.5 High
- bmc service desk expressMultiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95...4.3 Medium
- bmc service desk expressMultiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote...7.5 High
- drupalisme tinyboxCross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for...2.1 Low
- fusedpress buddypress-extended-frienship-requestCross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin...2.6 Low
- openxMultiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow...4.3 Medium
- monkey-project monkeyCross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon ...4.3 Medium
- kingsoft spreadsheets 2012Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow...9.3 High
- wiresharkThe IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector...5.0 Medium
- wiresharkInteger signedness error in the dissect_headers function in epan/dissectors/packet-btobex.c in...7.8 High
- wiresharkepan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x...5.0 Medium
- wiresharkInteger signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator...5.0 Medium
- wiresharkepan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x...5.0 Medium
- wiresharkMemory leak in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom...5.0 Medium
- wiresharkDouble free vulnerability in the dissect_dcom_ActivationProperties function in epan/dissectors...5.0 Medium
- wiresharkOff-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c...5.0 Medium
- wiresharkThe P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable...5.0 Medium
- phpmyadminMultiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4...6.5 Medium
- phpmyadminphpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value3.5 Low
- phpmyadminphpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an...5.0 Medium
- phpmyadminphpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain...5.0 Medium
- phpmyadminphpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities4.3 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x...4.3 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0...3.5 Low
- wiresharkThe dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER...4.3 Medium
- wiresharkThe netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before...4.3 Medium
- wiresharkThe netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before...5.0 Medium
- wiresharkMultiple array index errors in epan/dissectors/packet-gsm_a_common.c in the GSM A Common...5.0 Medium
- wiresharkepan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to...5.0 Medium
- wiresharkThe dissect_dvbci_tpdu_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in...5.0 Medium
- wiresharkThe parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1...7.8 High
- wiresharkInteger signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the...7.8 High
- gnupg, gnupg libgcrypt, canonical ubuntu linux +2 more +4 moreGnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other...1.9 Low
- freebsdThe vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the...6.4 Medium
- linux kernelThe ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux...4.7 Medium
- linux kernelThe bridge multicast implementation in the Linux kernel through 3.10.3 does not check whether a...4.7 Medium
- linux kernelUse-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the...4.7 Medium
- redhat jboss communications platform, jboss enterprise application platform, jboss enterprise brms platform +4 more +6 moreJBossWS vulnerable to uncontrolled recursion5.0 Medium
- trustgo antivirus \& mobile securityThe TrustGo Antivirus & Mobile Security application before 1.3.6 for Android allows attackers to...4.3 Medium
- ibm tivoli remote controlSQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1...6.5 Medium
- openafs, debian linux +1 moreThe vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables...4.3 Medium
- openafs, debian linux +1 moreOpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for...4.3 Medium
- isc bind, dnsco bind, fedoraproject fedora +9 more +11 moreThe RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9...7.8 High
- moodle, yahoo yui +1 moreYUI Cross-site Scripting (XSS) vulnerability4.3 Medium
- moodle, yahoo yui +1 moreYUI Cross-site Scripting (XSS) vulnerability4.3 Medium
- Show moreLoading…