CVEs published in November 2013
470 vulnerabilities, 75 critical, 5 exploited.
- sap netweaverGRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors,...10.0 High
- sap netweaverDirectory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows...5.0 Medium
- sap netweaver development infrastructureUnrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI)...9.3 High
- sap netweaverCross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote...4.3 Medium
- sap netweaver logviewerSAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended...6.4 Medium
- sap network interface routerHeap-based buffer overflow in SAP Network Interface Router (SAProuter) 7.30 allows remote...6.8 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2)...4.3 Medium
- sap netweaverThe SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31...5.0 Medium
- sap netweaverThe J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect...5.8 Medium
- gnu gnutls, opensuse +1 moreOff-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16...5.0 Medium
- gnu gnutlsBuffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x...5.0 Medium
- theforeman foreman, redhat openstack +1 moreMultiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1...7.5 High
- linux kernelThe (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and...8.8 High
- open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25...4.3 Medium
- zkoss zk frameworkCross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to...4.3 Medium
- dlink dsl-2740b, dsl-2740b firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with...6.8 Medium
- foscam wireless ip cameraCross-site scripting (XSS) vulnerability in the web interface "WiFi scan" option in FOSCAM...4.3 Medium
- linux kernelMemory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel...4.0 Medium
- linux kernelThe ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the...4.3 Medium
- linux kernel, canonical ubuntu linux +1 moreThe udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when...7.1 High
- collectiveaccess pawtucket, providence +1 moreCross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3...4.3 Medium
- dlink dir865l, dir865l firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1)...6.8 Medium
- canonical ubuntu linux, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...7.5 High
- canonical ubuntu linux, ibm forms viewer, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...9.3 High
- canonical ubuntu linux, ibm forms viewer, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...7.5 High
- ibm forms viewer, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect...7.6 High
- microsoft wordMicrosoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of...7.1 High
- vmware player, workstation +1 moreVMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly...7.2 High
- mozilla network security servicesThe CERT_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS)...5.8 Medium
- mozilla network security servicesMozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote...7.5 High
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...3.5 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0...4.3 Medium
- ibm websphere application serverThe migration functionality in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0...3.5 Low
- ibm websphere application serverIBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions...4.3 Medium
- mozilla network security servicesInteger overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote...7.5 High
- mit kerberos, kerberos 5 +1 moreAn unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos...4.0 Medium
- apple mac os xApple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic)...4.7 Medium
- blackberry linkBlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not...5.8 Medium
- apple iphone osThe App Store component in Apple iOS before 7.0.4 does not properly enforce an intended...4.7 Medium
- cisco unified communications managerCisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass...6.9 Medium
- cisco unified communications managerDirectory traversal vulnerability in the license-upload interface in the Enterprise License...6.3 Medium
- cisco iosThe SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users...6.8 Medium
- cisco nexus 1000vThe license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for...6.8 Medium
- ibm websphere portalIBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27,...4.3 Medium
- ibm websphere virtual enterpriseCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual...3.5 Low
- hp integrated lights-out 4, integrated lights-out firmware +1 moreUnspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows...6.8 Medium
- hp integrated lights-out 4, integrated lights-out firmware +1 moreCross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware...4.3 Medium
- ibm cognos business intelligenceIBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0...4.0 Medium
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreDirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and...7.1 High
- blackberry linkBlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require...6.8 Medium
- Show moreLoading…