CVEs published in December 2013
472 vulnerabilities, 56 critical, 1 exploited.
- cisco ios xeCisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to...7.1 High
- cisco ons 15454The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a...7.1 High
- cisco prime collaborationMultiple cross-site scripting (XSS) vulnerabilities in the web interface in the Assurance...4.3 Medium
- uclouvain openjpegHeap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different...7.5 High
- uclouvain openjpegOpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified...5.0 Medium
- uclouvain openjpegMultiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to...7.5 High
- uclouvain openjpegOpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption...5.0 Medium
- samba, canonical ubuntu linux +1 moreThe winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1...3.6 Low
- cisco adaptive security appliance, adaptive security appliance software +1 moreCisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the...7.1 High
- cisco secure access control systemThe RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify...4.0 Medium
- djvulibre project djvulibreDjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products,...9.3 High
- suse webyast, novell suse lifecycle management server, suse studio onsite +2 moreWebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local...7.2 High
- novell suse cloudThe server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log...10.0 High
- opensuseyast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13...7.2 High
- novell suse linux enterprise for sap applicationsRace condition in sap_suse_cluster_connector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP...7.2 High
- opensuseLanItems.ycp in save_y2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi...7.8 High
- opensuse zypperzypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to...4.4 Medium
- novell suse managerCross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE...4.3 Medium
- novell open enterprise serverThe HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open...4.3 Medium
- alstom e-terracontrolThe DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate...4.7 Medium
- ibm advanced management module firmwareThe Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter...6.4 Medium
- novell iprintThe id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to...5.0 Medium