CVEs published in October 2013
570 vulnerabilities, 75 critical, 2 exploited.
- apple mac os xThe kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2...7.1 High
- apple mac os xCoreGraphics in Apple Mac OS X before 10.9 allows local users to bypass secure input mode and log...3.3 Low
- apple mac os xBuffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute...6.8 Medium
- apple mac os xCoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that...1.9 Low
- apple mac os xConsole in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary...6.8 Medium
- apple mac os xCFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session...5.0 Medium
- apple mac os xThe Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces,...4.9 Medium
- apple mac os xsocketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement...6.4 Medium
- apple iphone osMultiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate...3.3 Low
- apple iphone osPasscode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers...2.1 Low
- apple iphone osPasscode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers...3.3 Low
- apple remote desktopApple Remote Desktop before 3.7 does not properly use server authentication-type information...4.3 Medium
- apple remote desktop, mac os x +1 moreFormat string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple...7.5 High
- apache sling, sling auth core component +1 moreApache Sling Auth Core bundle vulnerable to Open Redirection5.8 Medium
- redhat jboss operations networkThe storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2...3.2 Low
- apache shindigApache Shindig PHP Sensitive Information Disclosure5.0 Medium
- redhat jboss operations networkThe server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which...2.1 Low
- sybase adaptive server enterpriseUnspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3....10.0 High
- sap netweaverThe Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP...5.0 Medium
- sap erp central componentMultiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project...6.0 Medium
- landing pages project pages pluginSQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for...7.5 High
- boltwireMultiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote...4.3 Medium
- draytek vigor 2700 router, vigor 2700 router firmware +1 moreThe DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code,...6.8 Medium
- ibm lotus dominoCross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0...4.3 Medium
- ibm lotus dominoCross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0...4.3 Medium
- mozilla network security servicesMozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are...5.0 Medium
- cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to...4.6 Medium
- cisco adaptive security appliance softwareThe VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows...5.4 Medium
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreThe console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process...10.0 High
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreIBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all...7.1 High
- nodejsThe HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers...5.0 Medium
- vmware vcenter serverSession fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0...6.8 Medium
- vmware esx, esxi +1 morehostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to...7.1 High
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0...8.5 High
- cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM...5.8 Medium
- polarsslBuffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using...6.8 Medium
- vbulletinThe install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create...7.5 High
- dlink dir-100Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100...8.5 High
- dlink di-524up, di-604s, di-604up +10 more +12 moreThe web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and...10.0 High
- sybase adaptive server enterpriseThe XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote...4.0 Medium
- watchguard firewareBuffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to...9.3 High
- watchguard fireware, system manager +1 moreMultiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware...4.3 Medium
- cisco unity connectionDirectory traversal vulnerability in the attachment service in the Voice Message Web Service (aka...4.0 Medium
- ibm websphere message brokerThe XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0...4.3 Medium
- iodata hdl-a\/e, hdl-a firmware, hdl-ah +4 more +6 moreI-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage...6.8 Medium
- cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly...5.8 Medium
- cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM...4.3 Medium
- cisco unified computing systemThe fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video...5.8 Medium
- cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to...4.6 Medium
- cisco unified computing systemThe Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local...6.8 Medium
- Show moreLoading…