CVEs published in September 2013
465 vulnerabilities, 94 critical, 2 exploited.
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla...9.3 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreBuffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0,...9.3 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...6.8 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird...6.8 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUse-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation...9.3 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0,...10.0 High
- tuxfamily chronycmdmon.c in Chrony before 1.29 allows remote attackers to obtain potentially sensitive...5.0 Medium
- tuxfamily chronyMultiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a...5.0 Medium
- dahuasecurity dvr0404hd-a, dvr0404hd-l, dvr0404hd-s +62 more +64 moreThe authorization implementation on Dahua DVR appliances accepts a hash string representing the...10.0 High
- siemens scalance x-200, scalance x-200 series firmware, scalance x-200rna +6 more +8 moreThe authentication implementation in the web server on Siemens SCALANCE X-200 switches with...8.3 High
- dahuasecurity dvr0404hd-a, dvr0404hd-l, dvr0404hd-s +62 more +64 moreDahua DVR appliances use a password-hash algorithm with a short hash length, which makes it...7.8 High
- dahuasecurity dvr0404hd-a, dvr0404hd-l, dvr0404hd-s +62 more +64 moreDahua DVR appliances have a small value for the maximum password length, which makes it easier...9.3 High
- dahuasecurity dvr0404hd-a, dvr0404hd-l, dvr0404hd-s +62 more +64 moreDahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote...7.8 High
- dahuasecurity dvr0404hd-a, dvr0404hd-l, dvr0404hd-s +62 more +64 moreDahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified ...10.0 High
- subnet substation serverThe DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote...4.3 Medium
- slickremix design approval system pluginCross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design...4.3 Medium
- eucalyptusEucalyptus Unauthorized Access to CC/NC Log Files4.3 Medium
- eucalyptus eustoreEucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI...6.9 Medium
- eucalyptusWalrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus,...5.5 Medium
- eucalyptusWalrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory,...4.3 Medium
- djangoproject djangoDjango Denial of Service Vulnerability in the authentication framework5.0 Medium
- sap netweaverDirectory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary...5.0 Medium
- juniper junos pulse access control service, junos pulse secure access service +1 moreJunos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6,...5.4 Medium
- openstack computeOpenStack Compute (Nova) Resource limit circumvention in Nova private flavors3.5 Low
- redhat ansibleAnsible Arbitrary File Overwrite Vulnerability3.3 Low
- redhat ansibleAnsible uses a socket with predictable filename in /tmp1.9 Low
- openstack cinder, canonical ubuntu linux +1 moreOpenStack Cinder Denial of Service using XML entities4.3 Medium
- openstack cinderOpenStack Cinder LVMVolumeDriver does not zero deleted snapshots2.1 Low
- theforeman foreman, redhat openstack +1 moreapp/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict...7.5 High
- redhat enterprise virtualizationCross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet...4.3 Medium
- theforeman foreman, redhat openstack +1 moreThe (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow...5.0 Medium
- openstack compute, havana +1 moreOpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack4.3 Medium
- openstack novaOpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information6.0 Medium
- ibm spss analytical decision managementIBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6...9.3 High
- ibm spss analytical decision managementUnrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1,...8.5 High
- ibm spss analytical decision managementCross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before...3.5 Low
- ibm spss analytical decision managementCross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before...4.3 Medium
- moodlebadges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by...7.5 High
- moodleMultiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9,...4.3 Medium
- moodleMoodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not...7.5 High
- moodlerepository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x...5.8 Medium
- cisco nx-osOpen Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to...6.3 Medium
- cisco unified meetingplaceCross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco...4.3 Medium
- cisco unified meetingplace, unified meetingplace web conferencing +1 moreCross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified...6.8 Medium
- chamanet chamacargoCross-site scripting (XSS) vulnerability in ChamaNet ChamaCargo 7.0000 and earlier allows remote...4.3 Medium
- apple mac os xScreen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote...5.5 Medium
- apple mac os x, quicktime +1 moreQuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or...6.8 Medium
- apple mac os xPower Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon...3.3 Low
- apple mac os xmdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the...2.1 Low
- apple mac os xThe kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service ...4.9 Medium
- Show moreLoading…