CVEs published in September 2013
465 vulnerabilities, 94 critical, 2 exploited.
- simone tellini mod accounting SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for... 7.5 High
- redhat libvirt The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent... 5.0 Medium
- apache struts, oracle flexcube private banking, mysql enterprise monitor +1 more +3 more Code injection in Apache Struts 10.0 High
- apache struts Apache Struts2 Broken Access Control Vulnerability 5.8 Medium
- redhat libvirt The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows... 4.0 Medium
- redhat libvirt libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via... 2.1 Low
- redhat libvirt The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the... 6.9 Medium
- redhat libvirt The xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote... 4.0 Medium
- redhat libvirt The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured,... 4.3 Medium
- redhat libvirt Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6... 5.0 Medium
- redhat libvirt The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to... 4.0 Medium
- redhat libvirt Double free vulnerability in the virConnectListAllInterfaces method in interface... 5.0 Medium
- x2engine x2crm Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to... 4.3 Medium
- x2engine x2crm Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated... 8.5 High
- openstack keystone, redhat openstack, canonical ubuntu linux +1 more +3 more OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3... 6.5 Medium
- squid-cache squid The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3... 7.8 High
- debian txt2man A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows... 3.3 Low
- adcisolutions node view permissions The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement... 5.0 Medium
- joachim noreiko flag module Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x... 2.1 Low
- redhat jboss a-mq, jboss fuse +1 more Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss... 4.3 Medium
- xen Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data... 1.2 Low
- cdsincdesign simple dropbox upload form Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8... 6.8 Medium
- envato complete gallery manager plugin Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery... 5.1 Medium
- danny morris lazy seo Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress... 6.8 Medium
- emeric vernat javamelody Improper Neutralization of Input During Web Page Generation in JavaMelody 4.3 Medium
- owasp enterprise security api Missing Cryptographic Step in OWASP Enterprise Security API for Java 5.8 Medium
- owasp enterprise security api Missing Cryptographic Step in OWASP Enterprise Security API for Java 2.6 Low
- cisco identity services engine software Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services... 4.3 Medium
- cisco identity services engine software Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco... 4.3 Medium
- cisco video surveillance operations manager The administrative web interface in Cisco Video Surveillance Operations Manager does not properly... 5.0 Medium
- bluecoat proxysg, proxysgos +1 more Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to... 7.1 High
- jgroups jgroup, redhat jboss enterprise application platform +1 more Exposure of Sensitive Information to an Unauthorized Actor in JGroup 5.4 Medium
- redhat cloudforms management engine Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms... 9.4 High
- redhat jboss enterprise application platform PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local... 1.9 Low
- apple iphone os Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows... 4.4 Medium
- apple iphone os Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers... 3.3 Low
- ibm rational clearquest Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1... 6.8 Medium
- proftpd Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to... 5.0 Medium
- cisco ios xr The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated... 5.0 Medium
- ibm websphere datapower xc10 appliance firmware Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1... 10.0 High
- cisco unified computing system The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows... 6.5 Medium
- graphite project graphite Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote... 4.3 Medium
- graphite project graphite graphite-web is vulnerable to Remote Code Execution 6.8 Medium
- cisco ios The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote... 7.1 High
- cisco ios The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows... 7.8 High
- cisco ios The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows... 7.8 High
- cisco ios, ios xe +1 more Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows... 7.8 High
- cisco ios The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32... 7.8 High
- cisco ios The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or... 7.8 High
- cisco ios, ios xe +1 more Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote... 7.8 High
- Show olderLoading…