CVEs published in October 2013

570 vulnerabilities, 75 critical, 2 exploited.

• cisco ios xe, asr 1001, asr 1002 +4 more +6 more Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of... CVE-2013-5547 7.8 HighOctober 31, 2013
• cisco ios xe, asr 1001, asr 1002 +4 more +6 more The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR... CVE-2013-5546 7.8 HighOctober 31, 2013
• cisco ios xe, asr 1001, asr 1002 +4 more +6 more The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote... CVE-2013-5545 7.8 HighOctober 31, 2013
• cisco ios xe, asr 1001, asr 1002 +4 more +6 more Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers... CVE-2013-5543 7.8 HighOctober 31, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0,... CVE-2013-5604 9.3 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function... CVE-2013-5603 10.0 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before... CVE-2013-5602 10.0 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla... CVE-2013-5601 10.0 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in... CVE-2013-5600 10.0 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka... CVE-2013-5599 10.0 HighOctober 30, 2013
• mozilla firefox PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle... CVE-2013-5598 8.3 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox... CVE-2013-5597 10.0 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before... CVE-2013-5596 6.8 MediumOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x... CVE-2013-5595 4.3 MediumOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1,... CVE-2013-5593 4.3 MediumOctober 30, 2013
• mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow... CVE-2013-5592 10.0 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x... CVE-2013-5591 10.0 HighOctober 30, 2013
• mozilla firefox, seamonkey, thunderbird +1 more +3 more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0,... CVE-2013-5590 10.0 HighOctober 30, 2013
• openstack folsom, grizzly, redhat openstack +2 more OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend... CVE-2013-4261 Fix available 3.5 LowOctober 29, 2013
• openstack compute, redhat openstack +1 more OpenStack Nova Denial of Service in network source security groups CVE-2013-4185 Fix available 4.0 MediumOctober 29, 2013
• broadcom siteminder, ca web agents +1 more Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6... CVE-2013-5968 4.3 MediumOctober 29, 2013
• triplc nano-10 plc, nano-10 plc firmware +1 more Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do... CVE-2013-5741 7.8 HighOctober 29, 2013
• No product listed CGI directory traversal (URL parsing) PSF-2013-3 No scoreOctober 29, 2013
• ingo renner apache solr Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS) CVE-2013-6289 Fix available 4.3 MediumOctober 28, 2013
• ingo renner apache solr Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize CVE-2013-6288 Fix available 10.0 HighOctober 28, 2013
• juniper junos Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12... CVE-2013-6014 9.3 CriticalOctober 28, 2013
• juniper junos Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate... CVE-2013-6012 8.5 HighOctober 28, 2013
• fengoffice feng office Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote... CVE-2013-5744 4.3 MediumOctober 28, 2013
• systemd project systemd journald in systemd, when the origin of native messages is set to file, allows local users to... CVE-2013-4393 Fix available 2.1 LowOctober 28, 2013
• systemd project systemd systemd, when updating file permissions, allows local users to change the permissions and SELinux... CVE-2013-4392 3.3 LowOctober 28, 2013
• novell libzypp The RPM GPG key import and handling feature in libzypp 12.15.0 and earlier reports a different... CVE-2013-3704 4.3 MediumOctober 28, 2013
• opentext opentext\/ixos ecm for sap netweaver Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to... CVE-2013-3243 6.8 MediumOctober 28, 2013
• andreas krennmair tpp tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP... CVE-2013-2208 Fix available 6.8 MediumOctober 28, 2013
• kth snack sound toolkit, wavesurfer, opensuse +2 more Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack... CVE-2012-6303 Public exploitFix available EPSS 10.2% 6.8 MediumOctober 28, 2013
• drupal The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows... CVE-2012-0827 3.5 LowOctober 28, 2013
• redhat jboss enterprise brms platform, jboss enterprise portal platform, jboss enterprise web server +2 more +4 more Arbitrary file write in Apache Commons Fileupload CVE-2013-2186 Public exploitFix available EPSS 12.7% 7.5 HighOctober 28, 2013
• redhat jboss enterprise portal platform The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics... CVE-2013-2102 3.3 LowOctober 28, 2013
• redhat jboss enterprise application platform, jboss enterprise portal platform +1 more Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0... CVE-2012-4572 3.7 LowOctober 28, 2013
• redhat jboss community application server, jboss enterprise application platform +1 more The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and... CVE-2012-4529 4.3 MediumOctober 28, 2013
• tylertech taxweb The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows... CVE-2013-6285 5.0 MediumOctober 28, 2013
• tylertech taxweb passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes... CVE-2013-6020 5.8 MediumOctober 28, 2013
• tylertech taxweb Cross-site scripting (XSS) vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote... CVE-2013-6019 4.3 MediumOctober 28, 2013
• tylertech taxweb Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3... CVE-2013-6018 6.8 MediumOctober 28, 2013
• ibm security appscan The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default... CVE-2013-5430 5.5 MediumOctober 28, 2013
• roundcube webmail steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote... CVE-2013-6172 Fix available 7.5 HighOctober 27, 2013
• openstack glance, canonical ubuntu linux +1 more OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and... CVE-2013-4428 Fix available 3.5 LowOctober 27, 2013
• f5 nginx The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions... CVE-2013-0337 7.5 HighOctober 27, 2013
• f5 big-ip access policy manager, big-ip application security manager, big-ip edge gateway +6 more +8 more The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link... CVE-2013-6016 7.8 HighOctober 26, 2013
• sap erp central component Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the... CVE-2013-6284 7.5 HighOctober 26, 2013
• binarymoon timthumb TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list... CVE-2011-4106 Public exploit EPSS 23.3% 6.8 MediumOctober 26, 2013
• Show olderLoading…