CVEs published in December 2013
472 vulnerabilities, 56 critical, 1 exploited.
- microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows local users to bypass the Protected Mode...6.2 Medium
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection...6.2 Medium
- microsoft asp.net signalr, visual studio team foundation server +1 moreCross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0...4.3 Medium
- microsoft windows 7, windows 8, windows rt +3 more +5 moreportcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2...7.2 High
- microsoft windows 8, windows rt, windows server 2012 +1 more +3 moreArray index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server...4.7 Medium
- microsoft windows 7Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server...7.2 High
- microsoft winverifytrust function, windows 10 version 1507, windows 10 version 1607 +42 more +44 moreWinVerifyTrust Signature Validation Vulnerability5.5 Medium
- microsoft windows xp, windows server 2003 +1 morewin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2...7.2 High
- microsoft windows xp, windows server 2003 +1 moreStack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server...6.9 Medium
- cisco scientific atlanta dpr2325, scientific atlanta dpr2325 firmware, scientific atlanta dpr\/epr2320 +1 more +3 moreMultiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2...8.3 High
- ibm rational quality manager, rational requirements composer, rational team concert +2 moreCross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality...3.5 Low
- cisco scientific atlanta dpc2420, scientific atlanta dpc3000\/epc3000, scientific atlanta dpc3008\/epc3008 +34 more +36 moreCross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta...4.3 Medium
- bsd mailx, debian linux, redhat enterprise linux desktop +5 more +7 moreBSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted...7.8 High
- bsd mailx project mailx, oracle linux, redhat enterprise linux +2 moreThe expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier...7.5 High
- livezillaMultiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote...4.3 Medium
- supermicro intelligent platform management firmwareMultiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the...10.0 High
- supermicro intelligent platform management firmwareBuffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with...9.0 High
- novell suse lifecycle management serverSUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the...4.6 Medium
- siemens comosSiemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local...6.9 Medium
- islonline isl desktop plugin, isl light +1 moreThe ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote...3.5 Low
- novell suse lifecycle management serverSUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the...4.3 Medium
- cisco cloud portalCisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct...5.0 Medium
- ibm forms viewerStack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows...6.8 Medium
- hp linux imaging and printing projectupgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11...6.8 Medium
- emc rsa netwitness nextgen, rsa security analytics +1 moreEMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure...6.8 Medium
- enorth webpublisher cmsSQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly 5...7.5 High
- nagiosqlMultiple cross-site scripting (XSS) vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to...4.3 Medium
- sharetronixMultiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote...6.8 Medium
- sharetronixMultiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute...7.5 High
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in admin/editevent.php in CMS Made Simple (CMSMS) 1.11.9...2.1 Low
- sonicwall analyzer, global management system, uma e5000 firmware +2 moreMultiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert...3.5 Low
- ffmpegThe jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not...6.8 Medium
- ffmpegThe ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly...6.8 Medium
- ffmpegThe g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly...6.8 Medium
- ffmpegThe filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure...6.8 Medium
- ffmpeg, debian linux +1 moreThe read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce...6.8 Medium
- ffmpegThe get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate...6.8 Medium
- ffmpeglibavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block...6.8 Medium
- ffmpeglibavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service ...6.8 Medium
- ffmpegThe get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the...6.8 Medium
- ffmpegThe flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly...6.8 Medium
- ffmpegInteger signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2...6.8 Medium
- ffmpegThe g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect...6.8 Medium
- ffmpegThe get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not prevent attempts...6.8 Medium
- ffmpegThe read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to...6.8 Medium
- ffmpegMultiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote...6.8 Medium
- ffmpegThe rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly...6.8 Medium
- ffmpegThe decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on...6.8 Medium
- redhat libvirtvirt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files...7.2 High
- x2go serverThe setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows...7.5 High
- Show moreLoading…