CVEs published in November 2013
470 vulnerabilities, 75 critical, 5 exploited.
- ruby-lang ruby, opensuse +1 more(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel...6.4 Medium
- novell zenworks configuration managementDirectory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks...5.0 Medium
- strongswanstrongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer...5.0 Medium
- xen, debian linux +1 moreXen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the...5.2 Medium
- thoughtbot cocaineCocaine Gem OS Command Injection vulnerability6.8 Medium
- redhat libvirtThe virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the...8.5 High
- andrew simpson webcollabCRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows...4.3 Medium
- openstack folsom, grizzly, havana +2 moreOpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image1.9 Low
- spice project spice, redhat enterprise linux, enterprise virtualization +2 moreStack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0...5.0 Medium
- cart66 lite pluginCross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin...6.8 Medium
- md-systems simplenewsCross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1...4.3 Medium
- linksalpha social sharing toolkit pluginCross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for...6.8 Medium
- cisco unified communications managerCisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a...4.3 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and...6.3 Medium
- cisco iosThe IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers...4.3 Medium
- ibm tivoli federated identity manager, tivoli federated identity manager business gateway +1 moreOpen redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6...5.8 Medium
- iodata rockdisk, rockdisk firmware +1 moreCross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1...3.5 Low
- varnish-cache varnish, varnish cache project cache +1 moreVarnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash...5.0 Medium
- moodleMoodle Authenticated Spelling Binary Remote Code Execution4.6 Medium
- strongswanThe compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1)...5.0 Medium