CVEs published in September 2013
465 vulnerabilities, 94 critical, 2 exploited.
- platinum seo project seo pluginCross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin...4.3 Medium
- rodrigo coimbra nospam ptiSQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress...7.5 High
- freebsdThe (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE...6.9 Medium
- cisco mediasenseThe web interface in Cisco MediaSense does not properly protect the client-server communication...5.0 Medium
- cisco prime data center network managerCisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read...7.8 High
- cisco prime data center network managerDCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote...7.8 High
- cisco prime data center network managerDirectory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data...10.0 High
- hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote...4.0 Medium
- hp icewall federation agent, icewall file manager, icewall sso agent +4 more +6 moreUnspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0...2.1 Low
- hp icewall sso agent optionUnspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote...3.5 Low
- hp icewall file manager, icewall sso agent, icewall sso agent option +1 more +3 moreUnspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0...5.0 Medium
- hp icewall sso agent optionUnspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers...5.0 Medium
- hp xp 9000 command viewCross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite...4.3 Medium
- hp linux imaging and printing projectThe check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through...6.9 Medium
- microfocus arcsight enterprise security managerCross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security...4.3 Medium
- ibm websphere application server, websphere application server feature pack for web services +1 moreThe WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0...6.8 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere...4.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...4.3 Medium
- cisco prime central for hosted collaboration solution assuranceThe web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before...7.8 High
- cisco unified computing systemMCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local...6.8 Medium
- cisco unified computing systemMCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local...4.6 Medium
- cisco mediasenseCross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote...4.3 Medium
- cisco mediasenseMultiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco...4.3 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory...6.8 Medium
- cisco unified computing systemThe Manager component in Cisco Unified Computing System (UCS) allows local users to cause a...4.6 Medium
- cisco unified computing systemMultiple buffer overflows in the administrative web interface in Cisco Unified Computing System ...4.0 Medium
- cisco unified computing systemThe Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified...5.8 Medium
- cisco unified computing systemThe KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509...5.8 Medium
- cisco unified computing systemThe KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate...4.3 Medium
- adobe coldfusionThe authentication process in Adobe ColdFusion before 10 does not require knowledge of the...10.0 High
- iij seil\%2fb1 firmware, seil\%2fneu 2fe plus firmware, seil\%2fturbo firmware +9 more +11 moreBuffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82,...6.8 Medium
- dlink des-3810, des-3810 firmware +1 moreThe SSH implementation on D-Link Japan DES-3810 devices with firmware before R2.20.011 allows...6.3 Medium
- dlink dwl-2100ap, dwl-2100ap firmware +1 moreThe SSH implementation on the D-Link Japan DWL-2100AP with firmware before R252JP-RC572 allows...6.3 Medium
- ibm lotus domino, lotus inotes +1 moreBuffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote...7.1 High
- glpi-project glpiinc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php...6.8 Medium
- glpi-project glpiMultiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute...7.5 High
- glpi-project glpiinc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary...6.4 Medium
- cisco intrusion prevention systemThe authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS...4.3 Medium
- cisco nx-osThe regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is...5.4 Medium
- apple iphone osWebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain...4.3 Medium
- apple iphone osThe Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of...2.1 Low
- apple iphone osThe Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter...5.0 Medium
- apple iphone osThe Telephony subsystem in Apple iOS before 7 does not require API conformity for access to...4.3 Medium
- apple iphone osThe Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service ...7.1 High
- apple iphone osThe Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #!...4.3 Medium
- apple iphone osSpringboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which...2.1 Low
- apple iphone osMobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted...4.3 Medium
- apple iphone osMobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served...4.3 Medium
- apple iphone osThe history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward...1.9 Low
- apple iphone osThe Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an...4.3 Medium
- Show moreLoading…