CVEs published in September 2013
465 vulnerabilities, 94 critical, 2 exploited.
- open-xchange serverThe Subscriptions feature in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6...3.5 Low
- open-xchange serverMultiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before...5.0 Medium
- open-xchange serverMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6...4.3 Medium
- open-xchange serverDirectory traversal vulnerability in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13...4.0 Medium
- cisco global site selectorCross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site...6.8 Medium
- sharethisCross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for...6.8 Medium
- cisco secure access control systemCisco Secure Access Control System (ACS) does not properly handle requests to read from the...5.0 Medium
- cisco mobility services engineCisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows...5.0 Medium
- vmware esx, esxi +1 moreVMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File...4.3 Medium
- konstanty bialkowski libmodplug, debian linux +1 moreMultiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions...6.8 Medium
- konstanty bialkowski libmodplug, debian linux +1 moreInteger overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier...6.8 Medium
- imagemagickThe ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers...4.3 Medium
- kde kde-workspace, debian linux +1 morekde-workspace before 4.10.5 has a memory leak in plasma desktop7.5 High
- kde kde-workspace, sc, opensuse +2 moreKDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17...5.0 Medium
python-djangoDebianpython-django - regressionNo score