CVEs published in November 2013
470 vulnerabilities, 75 critical, 5 exploited.
- microsoft office, office 2013 rt +1 moreStack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and...9.3 High
- microsoft officeMicrosoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a...9.3 High
- tapbots tweetbotTweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1)...6.8 Medium
- qualcomm quic mobile station modem kernelgoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in...6.9 Medium
- qualcomm quic mobile station modem kernelgoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in...6.9 Medium
- linux kernelBuffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux...4.7 Medium
- microsoft windows, windows 7, windows 8 +8 more +10 moreThe InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2...8.8 High
- linux kernelThe uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not...6.9 Medium
- linux kernelThe mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux kernel before 3.12...4.9 Medium
- linux kernelThe bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does...4.9 Medium
- linux kernelMultiple buffer overflows in drivers/staging/wlags49_h2/wl_priv.c in the Linux kernel before 3.12...4.7 Medium
- linux kernelBuffer overflow in the oz_cdev_write function in drivers/staging/ozwpan/ozcdev.c in the Linux...4.9 Medium
- spipThe Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3...7.5 High
- spipCross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php)...4.3 Medium
- spipCross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24...6.8 Medium
- ibm lotus sametimeThe Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict...2.9 Low
- ibm lotus sametimeThe Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated...3.5 Low
- ibm lotus sametimeThe Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated...3.5 Low
- ibm lotus sametimeThe Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated...3.5 Low
- ffmpegThe aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2...9.3 High
- ffmpeg, debian linux +1 moreThe atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote...9.3 High
- ffmpegThe decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers...9.3 High
- ffmpegThe mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1...9.3 High
- ffmpegThe wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote...9.3 High
- ffmpegThe decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote...9.3 High
- ffmpegOff-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4...9.3 High
- openbsd opensshThe mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES...6.0 Medium
- ibm lotus sametimeIBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service ...4.3 Medium
- isc bindThe Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6...6.8 Medium
- cisco nx-osCisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of...5.0 Medium
- cisco ios xrThe OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service...4.3 Medium
- cisco telepresence vx clinical assistantThe WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin...10.0 High
- cisco wide area application services mobileDirectory traversal vulnerability in the web-management interface in the server in Cisco Wide...7.5 High
- cisco iosMultiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial...7.8 High
- pineapp mail-securePineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by...8.5 High
- tattyan hptownCross-site scripting (XSS) vulnerability in Tattyan HP TOWN 5_9_3 and earlier allows remote...4.3 Medium
- lighttpd, debian linux, opensuse +2 morelighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier...7.5 High
- ibm lotus dominoCross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM...3.5 Low
- ibm lotus dominoCross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM...3.5 Low
- ibm lotus dominoCross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in...6.0 Medium
- linux kernelThe net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not...3.6 Low
- cisco security monitoring analysis and response systemCross-site scripting (XSS) vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring...4.3 Medium
- cisco prime central for hosted collaboration solutionThe ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote...5.0 Medium
- ibm platform symphonyBuffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a...4.3 Medium
- tiki tikiwiki cms\/groupwareSQL injection vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS,...7.5 High
- tiki tikiwiki cms\/groupwareTiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability4.3 Medium
- microsoft lync, office, office compatibility pack +6 more +8 moreGDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1...7.8 High
- attachmate verastream host integratorDirectory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator ...9.3 High
- emc documentum eroomMultiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom before 7.4.4 P11...4.3 Medium
- emc documentum administrator, documentum capital projects, documentum digital asset manager +4 more +6 moreCross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum...4.3 Medium
- Show moreLoading…