CVEs published in November 2013
470 vulnerabilities, 75 critical, 5 exploited.
- quassel-irc quassel irc Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID... 4.0 Medium
- ganglia ganglia-web Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows... 4.3 Medium
- apache subversion, mod dav svn +1 more The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in... 3.5 Low
- apache subversion, mod dontdothat +1 more The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0... 2.6 Low
- satechi smart travel router The web interface on the Satechi travel router 1.5, when Wi-Fi is used for WAN access, exposes... 5.8 Medium
- checkpoint endpoint security Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does... 3.3 Low
- checkpoint endpoint security Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly... 3.3 Low
- codeaurora android-msm The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as... 4.9 Medium
- twibright links Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash)... 4.3 Medium
- microsoft enhanced mitigation experience toolkit Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for... 4.3 Medium
- ibm qradar security information and event manager Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote... 3.5 Low
- ibm qradar security information and event manager The WinCollect agent in IBM Security QRadar SIEM before 7.1.1.569824 allows remote attackers to... 4.3 Medium
- ibm qradar security information and event manager Cross-site scripting (XSS) vulnerability in the Right Click Plugin context menus in IBM Security... 3.5 Low
- cisco ios xe The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a... 5.4 Medium
- cisco ios xr The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process... 5.0 Medium
- hp service manager, service center +1 more Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and... 7.5 High
- wouter verhelst nbd, canonical ubuntu linux, debian linux +2 more nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which... 7.5 High
- php, apple mac os x, canonical ubuntu linux +2 more +4 more The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly... 5.0 Medium
- ibm sterling selling and fulfillment foundation Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and... 3.5 Low
- thomsonreuters velocity analytics vhayu analytic server VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows... 10.0 High
- microsoft windows, windows xp, windows 2003 server +2 more NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local... 7.8 High
- civicrm Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2... 7.5 High
- jahia xcm Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow... 4.3 Medium
- jahia xcm Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the... 5.0 Medium
- jahia xcm Cross-site scripting (XSS) vulnerability in Jahia xCM before 6.6.2 allows remote authenticated... 3.5 Low
- linux kernel Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the... 6.9 Medium
- ibm infosphere master data management server for product information management, infosphere master data management collaboration server +1 more Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for... 3.5 Low
- cisco prime network registrar Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8... 4.3 Medium
- supmua sup Sup Code Injection vulnerability 6.8 Medium
- supmua sup Sup Code Injection vulnerability 6.8 Medium
- nagios xi SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios... 7.5 High
- vortexgroup light alloy Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute... 9.3 High
- testa online test management system SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote... 7.5 High
- savysoda wifi free hd Directory traversal vulnerability in SavySoda WiFi HD Free before 7.0 allows remote attackers to... 5.0 Medium
- moodle Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in... 3.5 Low
- moodle Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3... 6.8 Medium
- moodle Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x... 3.5 Low
- moodle Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor 5.0 Medium
- drupal Drupal has open redirect vulnerability in the Overlay module 5.8 Medium
- drupal Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows... 4.3 Medium
- drupal Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows... 2.1 Low
- drupal Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random... 6.8 Medium
- drupal The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third... 5.1 Medium
- linux kernel The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12... 4.7 Medium
- quagga The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the... 4.3 Medium
- splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote... 4.3 Medium
- jenkins-ci build failure analyzer Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS) 3.5 Low
- jenkins-ci exclusion Jenkins Exclusion Plugin allows Access to Resource Locks 5.5 Medium
- mediawiki Cross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1... 4.3 Medium
- gummybearstudios ftp drive \+ http server Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier... 7.8 High
- Show olderLoading…