CVEs published in October 2013
570 vulnerabilities, 75 critical, 2 exploited.
- rsyslogDouble free vulnerability in the writeDataError function in the ElasticSearch plugin ...6.8 Medium
- qemu, canonical ubuntu linux, opensuse +4 more +6 moreBuffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has...7.2 High
- apache camelImproper Control of Generation of Code in Apache Camel6.8 Medium
- redhat storage serverRed Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the ...3.6 Low
- wernerd zrtpcppGNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized...5.8 Medium
- wernerd zrtpcppMultiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause...6.8 Medium
- wernerd zrtpcppHeap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows...7.5 High
- ibm aixMultiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7...6.9 Medium
- apple mac os xDirectory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to...6.6 Medium
- hp color laserjet cm4540, laserjet m4555, scanjet enterprise 8500fn1 +19 more +21 moreHP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP...1.5 Low
- hp color laserjet cm4540, laserjet m4555, scanjet enterprise 8500fn1 +19 more +21 moreHP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP...4.3 Medium
- accelatech bizsearchCross-site scripting (XSS) vulnerability in Accela BizSearch 3.2 on Linux and Solaris allows...4.3 Medium
- ibm tivoli storage managerBuffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1...7.2 High
- corel pdf fusionUntrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain...9.3 High
- corel pdf fusionStack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary...9.3 High
- systemd project systemd, canonical ubuntu linux, debian linux +2 moresystemd does not properly use D-Bus for communication with a polkit authority, which allows local...6.9 Medium
- lennart poettering rkit, redhat enterprise linux +1 moreRealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority...4.6 Medium
- spice-gtk project spice-gtk, redhat enterprise linux +1 morespice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure...4.6 Medium
- redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 morelibvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows...4.6 Medium
- polkit project polkit, canonical ubuntu linux, opensuse +1 more +3 moreRace condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit...7.2 High
- ubuntu developers language-selector, canonical ubuntu linux +1 morelanguage-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not...4.6 Medium
- martin pitt jockey, canonical ubuntu linux +1 morebackend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with...4.6 Medium
- canonical apt-xapian-index, ubuntu linux +1 moreapt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D...4.6 Medium
- evan dandrea usb-creator, canonical ubuntu linux +1 moreusb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does...4.6 Medium
- michael vogt ubuntu-system-service, canonical ubuntu linux +1 moreubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does...4.6 Medium
- canonical ubuntu linux, marc deslauriers software-properties +1 moredbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0...4.6 Medium
- wearegumball comment-attachmentCross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for WordPress...4.3 Medium
- watchguard server centerMultiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe)...7.2 High
- open-xchange appsuiteCRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain...4.3 Medium
- open-xchange appsuiteMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow...3.5 Low
- siemens scalance x-200, scalance x-200 series firmware, scalance x-200irt +2 moreThe integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X...10.0 High
- cisco wireless lan controllerCross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN...4.3 Medium
- baramundi management suiteAn unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption...7.8 High
- baramundi management suiteThe OS deployment feature in Baramundi Management Suite 7.5 through 8.9 stores credentials in...7.8 High
- baramundi management suiteBaramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and...7.8 High
- emerson dl 8000 remote terminal unit, roc 800 remote terminal unit, roc 800l remote terminal unit +1 more +3 moreThe Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with...9.0 High
- enea ose, emerson dl 8000 remote terminal unit, roc 800 remote terminal unit +1 more +3 moreThe kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and...10.0 High
- enea ose, emerson dl 8000 remote terminal unit, roc 800 remote terminal unit +1 more +3 moreThe kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and...10.0 High
- emerson dl 8000 remote terminal unit, roc 800 remote terminal unit, roc 800l remote terminal unit +1 more +3 moreThe TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier,...10.0 High
- cisco unified computing systemThe high-availability service in the Fabric Interconnect component in Cisco Unified Computing...6.8 Medium
- xibosignage xiboDirectory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4...5.0 Medium
- cisco unified communications domain managerSQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager...5.5 Medium
- cisco ios xrThe UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet...7.8 High
- ibm infosphere information serverIBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers...5.8 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers...4.3 Medium
- cisco unified computing systemThe create certreq command in the fabric-interconnect component in Cisco Unified Computing System...6.8 Medium
- cisco unified computing systemrun-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows...6.8 Medium
- cisco unified computing systemThe clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System ...6.8 Medium
- cisco unified computing systemAbsolute path traversal vulnerability in the image-download process in the fabric-interconnect...6.6 Medium
- cisco unified computing systemethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows...6.8 Medium
- Show moreLoading…