CVEs published in November 2013
470 vulnerabilities, 75 critical, 5 exploited.
- busybox, redhat enterprise linux, t-mobile tm-ac1900 +2 moreutil-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when...7.2 High
- clusterlabs pacemaker, redhat enterprise linux +1 morePacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management...4.3 Medium
- canonical ubuntu linux, quassel-irc quassel irc +1 morectcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a...5.0 Medium
- duckcorp bip, fedoraproject fedora +1 moreBip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file...5.1 Medium
- graphicsmagick, fedoraproject fedora, novell suse linux enterprise debuginfo +2 more +4 moreThe ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow...4.3 Medium
- gnu glibc, suse linux enterprise debuginfo, linux enterprise server +2 moreStack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C...5.0 Medium
- memcachedMultiple integer signedness errors in the (1) process_bin_sasl_auth, (2)...5.0 Medium
- cisco wireless lan controllerThe Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation on Cisco...5.0 Medium
- cisco wireless lan controllerThe web interface on Cisco Wireless LAN Controller (WLC) devices does not properly restrict use...4.3 Medium
- cisco iosThe IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service (MTU...4.3 Medium
- ibm rational performance tester, rational service tester +1 moreUnspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and...5.0 Medium
- kingsoft kdriveKingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from...5.8 Medium
- dlink des-3800, des-3800 firmware +1 moreUnspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with...7.8 High
- dlink des-3800, des-3800 firmware +1 moreUnspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with...6.8 Medium
- emc rsa data protection manager applianceCross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3...4.3 Medium
- tweet-blenderCross-site scripting (XSS) vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress...4.3 Medium
- hp 2620-24-poe\+ switchCross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows...6.8 Medium
- cisco 7600 router, ios +1 moreThe MLDP implementation in Cisco IOS 15.3(3)S and earlier on 7600 routers, when many VRFs are...5.4 Medium
- cisco ios xeCisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP...6.3 Medium
- catapultsoftware catapult dnp3 i\/o driver, ge intelligent platforms proficy dnp3 i\/o driver, intelligent platforms proficy hmi\/scada cimplicity +1 more +3 moreThe (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy...4.7 Medium
- catapultsoftware catapult dnp3 i\/o driver, ge intelligent platforms proficy dnp3 i\/o driver, intelligent platforms proficy hmi\/scada cimplicity +1 more +3 moreThe (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy...7.1 High
- ruby-lang rubyHeap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before...6.8 Medium
- freebsdThe ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does...4.9 Medium
- freebsdThe qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does...4.9 Medium
- freebsdThe nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD...4.9 Medium
- emc document sciences xpressionDirectory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2...3.5 Low
- emc document sciences xpressionMultiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47...6.5 Medium
- emc document sciences xpressionMultiple cross-site scripting (XSS) vulnerabilities in EMC Document Sciences xPression 4.1 SP1...4.3 Medium
- emc document sciences xpressionMultiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1...5.8 Medium
- emc document sciences xpressionMultiple cross-site request forgery (CSRF) vulnerabilities in EMC Document Sciences xPression 4.1...6.8 Medium
- lockon ec-cubeMultiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON...4.3 Medium
- lockon ec-cubedata/class/helper/SC_Helper_Address.php in the front-features implementation in LOCKON EC-CUBE 2...5.5 Medium
- lockon ec-cubedata/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0...5.0 Medium
- lockon ec-cubeCross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows...6.8 Medium
- lockon ec-cubeCross-site scripting (XSS) vulnerability in the displaySystemError function in html/handle_error...4.3 Medium
- lockon ec-cubeThe displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5...4.3 Medium
- f5 nginx, opensuse, suse lifecycle management server +2 more +4 morenginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended...7.5 High
- http-body project http-bodyHTTP::Body::Multipart in the HTTP-Body 1.08, 1.17, and earlier module for Perl uses the part of...6.8 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreFormat string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler...5.0 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreStack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler...7.5 High
- scipy, debian linux, fedoraproject fedora +1 more +3 moreSciPy creates insecure temporary directories7.8 High
- pineapp mail-secure 5099skPineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does...7.2 High
- pineapp mail-secure 5099skadmin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms...7.5 High
- pineapp mail-secureadmin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary...7.5 High
- pineapp mail-secureadmin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and...6.4 Medium
- pineapp mail-secureAbsolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote...5.0 Medium
- mozilla firefox, netscape portable runtime, seamonkey +2 moreInteger overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR)...7.5 High
- mit kerberos 5do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4...3.5 Low
- fortinet fortianalyzer-1000d, fortianalyzer-2000b, fortianalyzer-200d +4 more +6 morecgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does...6.8 Medium
- sap netweaverGRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via...6.4 Medium
- Show moreLoading…