CVEs published in November 2013
470 vulnerabilities, 75 critical, 5 exploited.
- ajaxplorerMultiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow...5.5 Medium
- juniper junosjsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12...9.0 High
- opsviewMultiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote...4.3 Medium
- opsviewSQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote...7.5 High
- openstack folsom, grizzly, havana +2 moreOpenStack Compute Nova Improper Access Control6.4 Medium
- ldap-account-manager ldap account managerCross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3...4.3 Medium
- libguestfs, novell suse linux enterprise server, suse linux enterprise software development kit +2 moreThe guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or -...6.8 Medium
- smackcoders wp ultimate email marketer pluginThe WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly...6.4 Medium
- smackcoders wp ultimate email marketer pluginMultiple cross-site scripting (XSS) vulnerabilities in the WP Ultimate Email Marketer plugin 1.1...4.3 Medium
- saltstack saltSaltStack Privilege Escalation vulnerability10.0 High
- citrix xendesktopCitrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule...5.8 Medium
- s9y serendipityCross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea...4.3 Medium
- saltstack saltMinion identity not validated in saltstack4.9 Medium
- saltstack saltSalt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via...7.5 High
- saltstack saltSaltStack insecurely uses /tmp10.0 High
- saltstack saltSaltStack MITM SSH attack in salt-ssh9.3 High
- saltstack saltSalt has insufficient argument validation in several modules6.0 Medium
- wikiwig project wikiwigMultiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the...4.3 Medium
- vmware hyperic hqThe Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators...6.5 Medium
- wiresharkThe dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector...4.3 Medium
- cisco prime central for hosted collaboration solutionThe Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution ...5.0 Medium
- cisco adaptive security appliance cx context-aware security softwareThe Safe Search enforcement feature in Cisco Adaptive Security Appliance (ASA) CX Context-Aware...5.0 Medium
- cisco anyconnect secure mobility clientBuffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco...6.8 Medium
- hp loadrunnerUnspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote...7.5 High
- hp loadrunnerUnspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote...10.0 High
- hp loadrunnerUnspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote...10.0 High
- hp alm synchronizerUnspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer...7.5 High
- hp sitescopeThe APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote...7.5 High
- hp application lifecycle managementUnspecified vulnerability in the client component in HP Application LifeCycle Management (ALM)...7.5 High
- apple motionInteger overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote...5.0 Medium
- wiresharkepan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x...4.3 Medium
- wiresharkThe dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark...4.3 Medium
- wiresharkUnspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x...4.3 Medium
- wiresharkThe ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4...4.3 Medium
- trytonTryton Directory Traversal vulnerability7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12...7.1 High
- mcafee email gatewayMcAfee Email Gateway (MEG) 7.0 before 7.0.4 and 7.5 before 7.5.1 allows remote authenticated...8.5 High
- apache strutsApache Struts is vulnerable to Cross-site Scripting4.3 Medium
- modpagespeed mod pagespeedCross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.x, 1.0.22.7, 1.1.x, 1.24.1...4.3 Medium
- tvt dvr, dvr firmware +1 moreDirectory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and...7.8 High
- novell zenworks configuration managementSession fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4...6.8 Medium
- novell zenworks configuration managementCross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration...6.8 Medium
- novell zenworks configuration managementUnspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM)...10.0 High
- novell zenworks configuration managementThe ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to...4.3 Medium
- openstack grizzly, havana +1 moreOpenStack Identity Keystone Privilege Escalation vulnerability3.3 Low
- xenThe Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest...5.2 Medium
- nas4freeNAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code...6.0 Medium
- openbravo erpThe XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read...3.5 Low
- dell emc unisphereEMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP...1.9 Low
- emc networkerThe NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active...3.5 Low
- Show moreLoading…