CVEs published in August 2013

345 vulnerabilities, 49 critical, 1 exploited.

• paloaltonetworks pan-os Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo... CVE-2013-5664 Public exploit 4.3 MediumAugust 31, 2013
• paloaltonetworks pan-os The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0... CVE-2013-5663 4.3 MediumAugust 31, 2013
• paloaltonetworks globalprotect, netconnect +1 more Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates... CVE-2012-6606 5.8 MediumAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x... CVE-2012-6605 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x... CVE-2012-6604 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x... CVE-2012-6603 10.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x... CVE-2012-6602 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x... CVE-2012-6601 10.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and... CVE-2012-6600 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and... CVE-2012-6599 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8... CVE-2012-6598 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users... CVE-2012-6597 6.3 MediumAugust 31, 2013
• paloaltonetworks pan-os Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind... CVE-2012-6596 5.0 MediumAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and... CVE-2012-6595 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x... CVE-2012-6594 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute... CVE-2012-6593 10.0 HighAugust 31, 2013
• paloaltonetworks pan-os Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute... CVE-2012-6592 10.0 HighAugust 31, 2013
• paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x... CVE-2012-6591 9.0 HighAugust 31, 2013
• paloaltonetworks pan-os The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote... CVE-2012-6590 4.3 MediumAugust 31, 2013
• lockon ec-cube Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api... CVE-2013-4702 5.0 MediumAugust 30, 2013
• lulusoftware soda pdf Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to... CVE-2013-3485 6.9 MediumAugust 30, 2013
• cisco ios The TCP implementation in Cisco IOS does not properly implement the transitions from the... CVE-2013-5469 7.1 HighAugust 30, 2013
• cisco wireless lan controller The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote... CVE-2013-3474 6.3 MediumAugust 30, 2013
• adobe acrobat, reader and acrobat, acrobat reader +2 more Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow... CVE-2013-3346 In KEVPublic exploitFix available EPSS 78.9% 9.8 CriticalAugust 30, 2013
• digium asterisk, asterisk digiumphones, certified asterisk +2 more The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x... CVE-2013-5642 Fix available EPSS 11.7% 5.0 MediumAugust 30, 2013
• digium asterisk, certified asterisk +1 more The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1... CVE-2013-5641 Fix available 5.0 MediumAugust 30, 2013
• barton ngircd The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through... CVE-2013-5580 Fix available 4.3 MediumAugust 30, 2013
• fedoraproject 389 directory server ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of... CVE-2013-4283 Fix available 5.0 MediumAugust 30, 2013
• cisco ios xr The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process... CVE-2013-3470 5.0 MediumAugust 30, 2013
• cisco unified computing system 6120xp fabric interconnect, unified computing system 6140xp fabric interconnect +1 more Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect... CVE-2013-3467 4.6 MediumAugust 30, 2013
• cisco adaptive security appliance, adaptive security appliance software +1 more The protocol-inspection feature on Cisco Adaptive Security Appliances (ASA) devices does not... CVE-2013-3463 4.3 MediumAugust 30, 2013
• cisco identity services engine software Multiple cross-site scripting (XSS) vulnerabilities in the guest portal in Cisco Identity... CVE-2012-5744 4.3 MediumAugust 30, 2013
• dave coffin dcraw Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and... CVE-2013-1438 Fix available 4.3 MediumAugust 30, 2013
• id id-software, libdigidoc +1 more Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c... CVE-2013-5648 Fix available 6.8 MediumAugust 29, 2013
• adam zaninovich sounder Sounder Contains Arbitrary Command Execution Vulnerability CVE-2013-5647 Fix available 7.5 HighAugust 29, 2013
• roundcube webmail Cross-site scripting (XSS) vulnerability in Roundcube webmail 1.0-git allows remote authenticated... CVE-2013-5646 3.5 LowAugust 29, 2013
• roundcube webmail Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user... CVE-2013-5645 Fix available 4.3 MediumAugust 29, 2013
• cacti, debian linux, opensuse +2 more SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers... CVE-2013-5589 Fix available 7.5 HighAugust 29, 2013
• cacti, opensuse +1 more Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote... CVE-2013-5588 Fix available 4.3 MediumAugust 29, 2013
• ibm tririga application platform Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3... CVE-2013-4003 3.5 LowAugust 29, 2013
• cisco unified communications manager Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco... CVE-2013-3472 6.8 MediumAugust 29, 2013
• cisco identity services engine software The captive portal application in Cisco Identity Services Engine (ISE) allows remote attackers to... CVE-2013-3471 4.3 MediumAugust 29, 2013
• cisco unified ip phone 8945, unified ip phone firmware +1 more The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of... CVE-2013-3468 7.8 HighAugust 29, 2013
• cisco secure access control server The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1... CVE-2013-3466 9.3 HighAugust 29, 2013
• strongswan, opensuse +1 more The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return... CVE-2013-5018 Fix available 4.3 MediumAugust 28, 2013
• redhat hawtjni Improper Control of Generation of Code in HawtJNI CVE-2013-2035 Fix available 4.4 MediumAugust 28, 2013
• openstack python glanceclient, opensuse +1 more python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate CVE-2013-4111 Fix available 5.8 MediumAugust 28, 2013
• xen The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM... CVE-2013-2212 Fix available 5.7 MediumAugust 28, 2013
• redhat enterprise virtualization Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application... CVE-2013-2176 Fix available 7.2 HighAugust 28, 2013
• erikwebb password policy Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in... CVE-2013-4274 2.1 LowAugust 28, 2013
• Show olderLoading…