CVEs published in October 2013
570 vulnerabilities, 75 critical, 2 exploited.
- call-cc chickenBuffer overflow in the "read-string!" procedure in the "extras" unit in CHICKEN stable before 4.8...7.5 High
- google site search project site search moduleCross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and...4.3 Medium
- redhat enterprise mrgCumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of...5.0 Medium
- microsoft internet explorerUse-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet...8.8 High
- microsoft silverlightMicrosoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to...5.5 Medium
- microsoft sharepoint server, office web apps +1 moreMicrosoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct...6.8 Medium
- microsoft windows 7, windows 8, windows rt +5 more +7 moreThe kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...9.3 High
- microsoft wordMicrosoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute...9.3 High
- microsoft wordMicrosoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office...9.3 High
- microsoft excel, excel viewer, office compatibility pack +2 moreMicrosoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers...9.3 High
- microsoft excel, excel viewer, office +4 more +6 moreMicrosoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2,...9.3 High
- microsoft windows 7, windows server 2008, windows vista +2 moredxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2...7.2 High
- microsoft internet explorerMicrosoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft windows 7win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1...7.2 High
- microsoft windows 8, windows rt, windows server 2012 +2 moreThe App Container feature in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012,...3.5 Low
- microsoft windows 7, windows 8, windows rt +5 more +7 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to...7.8 High
- microsoft .net frameworkMicrosoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly parse a DTD...7.8 High
- microsoft windows 7, windows 8, windows rt +5 more +7 moreThe USB drivers in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server...7.2 High
- microsoft windows 7, windows 8, windows rt +5 more +7 moreThe DSA_InsertItem function in Comctl32.dll in the Windows common control library in Microsoft...10.0 High
- microsoft .net framework, windows 7, windows 8 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...9.3 High
- adaptivecomputing torque resource managerpbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x,...9.0 High
- radscan network audio systemFormat string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System...7.5 High
- radscan network audio system, canonical ubuntu linux +1 moreMultiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow...4.6 Medium
- gnu glibc, fedoraproject fedora +1 morept_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions...2.6 Low
- mcafee agentFrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927...5.0 Medium
- asus rt-n10e, rt-n10e firmware +1 moreqis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require...6.1 Medium
- philips xper information management physiomonitoring 5, xper information management vascular monitoring 5, xperconnect +1 more +3 moreHeap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5...9.3 High
- cisco nx-osDirectory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create...6.2 Medium
- cisco nx-osThe CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and...6.2 Medium
- cisco nx-osThe BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote...5.0 Medium
- cisco nx-osThe RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service ...5.0 Medium
- cisco nexus 7000, nx-os, nexus 7000 10-slot +2 more +4 moreThe management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users...4.0 Medium
- cisco unified computing systemCross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric...6.8 Medium
- cisco nx-osCisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell...7.2 High
- brickcom fb-100ap, md-100ap, ob-100ae +4 more +6 moreBrickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera...7.8 High
- axis media control activex controlThe AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network...8.8 High
- ovislink airlive wl2600camDirectory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly...7.8 High
- ovislink airlive poe2600hd, airlive od-2025hd, airlive od-2060hd +3 more +5 moreCross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD,...6.8 Medium
- vtiger crmSQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows...6.5 Medium
- iconcool pdfcool studioStack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3...6.8 Medium
- citrix netscaler application delivery controller, netscaler application delivery controller firmware +1 moreCitrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote...7.8 High
- polarsslThe RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery...4.3 Medium
- Show moreLoading…