CVEs published in December 2013
472 vulnerabilities, 56 critical, 1 exploited.
- openstack folsom, grizzly, havana +1 more +3 moreOpenStack Nova uses insecure keystone middleware tmpdir by default2.1 Low
- xen, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreXen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP),...5.5 Medium
- apple quicktimeUntrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows...9.3 High
- redhat enterprise virtualization hypervisorlibspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev...7.4 High
- zimbra collaboration serverUnspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0...10.0 High
- etoshop classifieds creatorMultiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to...7.5 High
- ffmpegThe av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running...2.6 Low
- ffmpegThe prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers...4.3 Medium
- ffmpegThe mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows...5.0 Medium
- ffmpegThe ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows...4.3 Medium
- xenXen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1)...5.2 Medium
- xenThe XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always...5.2 Medium
- redhat jboss operations networkRed Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2)...2.1 Low
- ffmpeglibavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service ...5.0 Medium
- duckcorp bip, fedoraproject fedora +1 moreconnection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers...4.3 Medium
- rackspace openstack windows guest agentThe Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote...9.3 High
- optimizepressMultiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload...6.8 Medium
- typo3TYPO3 Improper Access Control vulnerability4.9 Medium
- typo3TYPO3 is vulnerable to Mass Assignment in the Extension table administration library5.8 Medium
- typo3TYPO3 OpenID extension Open redirect vulnerability5.8 Medium
- typo3TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component6.5 Medium
- typo3TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component4.0 Medium
- znc znc-msvcStack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows ...4.3 Medium
- redhat jboss enterprise portal platformMultiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat...4.3 Medium
- cisco ios xeThe VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly...5.4 Medium
- opensslThe ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version...4.3 Medium
- redhat subscription asset managerCandlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme...9.3 High
- ibm security access manager for enterprise single sign-onThe IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM...3.5 Low
- redhat enterprise mrgSQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4...7.5 High
- redhat enterprise mrgCross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG...4.3 Medium
- redhat enterprise mrgMultiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red...6.8 Medium
- redhat enterprise mrgcumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows...6.5 Medium
- idleman leedLeed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization...5.0 Medium
- vmware esx, esxi +1 moreVMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary...4.4 Medium
- ibm security access manager for enterprise single sign-onCross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access...3.5 Low
- ibm websphere portalIBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6...5.0 Medium
- ibm websphere portalIBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always"...5.0 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere...4.3 Medium
- ibm websphere portalIBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not...4.3 Medium
- ibm security access manager for enterprise single sign-onCross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access...4.3 Medium
- ibm websphere portalIBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does...4.9 Medium
- novell clientThe VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users...4.9 Medium
- phil schwartz denyhosts, debian linux, fedoraproject fedora +2 moredenyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which...5.0 Medium
- cisco unified communications managerThe disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1)...4.0 Medium
- hp autonomy ultraseekCross-site scripting (XSS) vulnerability in HP Autonomy Ultraseek 5 allows remote authenticated...3.5 Low
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a...4.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject...4.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreMultiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File...6.5 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of...4.9 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreMultiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and...3.5 Low
- Show moreLoading…