Browse CVEs

MEDIUM 5.0 CVE-2013-7112 The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.12 and 1.10.x before 1.10.4 does n… Wireshark Patch available Fix from $1,6002013-12-19 MEDIUM 5.0 CVE-2013-7113 epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote … Wireshark Patch available Fix from $1,6002013-12-19 MEDIUM 5.0 CVE-2013-6701 The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritiz… Cisco Ons 15454 System Software Mitigation only Fix from $1,6002013-12-18 HIGH 7.1 CVE-2013-2814 Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled exception and process crash) via… Dnp3 Master Opc Server No fix yet Fix from $1,9502013-12-17 HIGH 7.1 CVE-2013-2813 The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service (reboot or link outage) … Smp 16 Gateway \(data Concentrator\) Mitigation only Fix from $1,9502013-12-17 MEDIUM 5.8 CVE-2013-6966 Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing atta… Webex Training Center Mitigation only Fix from $1,6002013-12-17 MEDIUM 5.8 CVE-2013-6959 Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Webex Sales Center Mitigation only Fix from $1,6002013-12-14 MEDIUM 5.8 CVE-2013-6967 Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web si… Webex Sales Center No fix yet Fix from $1,6002013-12-14 MEDIUM 5.8 CVE-2013-6971 Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing atta… Webex Training Center Mitigation only Fix from $1,6002013-12-14 HIGH 7.2 CVE-2013-4587 Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows loca… Linux Kernel 3.2.54 / 3.4.75+ Fix from $1,9502013-12-14 MEDIUM 6.2 CVE-2013-6368 The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC sy… Linux Kernel after 3.12.5 Fix from $1,6002013-12-14 MEDIUM 5.8 CVE-2013-7085 Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filena… Devscripts No fix yet Fix from $1,6002013-12-14 MEDIUM 5.0 CVE-2013-6048 The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop … Munin after 2.0.17 Fix from $1,6002013-12-13 MEDIUM 6.8 CVE-2013-7015 The flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote… Ffmpeg after 2.0.1 Fix from $1,6002013-12-09 MEDIUM 6.8 CVE-2013-7019 The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers … Ffmpeg after 2.0.1 Fix from $1,6002013-12-09 MEDIUM 5.8 CVE-2013-6389 Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and cond… Drupal Patch available Fix from $1,6002013-12-07 HIGH 9.3 CVE-2013-0846 Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified im… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0849 The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1)… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0854 The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0856 The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossles… Ffmpeg after 1.0 Fix from $1,9502013-12-07 HIGH 9.3 CVE-2013-0857 The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height va… Ffmpeg after 1.0 Fix from $1,9502013-12-07 MEDIUM 5.0 CVE-2013-6414EPSS 21% actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause … Rails after 4.0.1 Fix from $1,6002013-12-07 HIGH 7.1 CVE-2013-6703 The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service (card reset) via crafted (1) TLS or (2)… Ons 15454 Mitigation only Fix from $1,9502013-12-03 MEDIUM 6.1 CVE-2013-6705 The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and device re… iOS Mitigation only Fix from $1,6002013-12-03 HIGH 7.1 CVE-2013-6696 Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attacker… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-12-02 MEDIUM 5.0 CVE-2013-6700 The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process reload) via a request for an unspecified MIB, aka Bug I… Ios Xr Mitigation only Fix from $1,6002013-11-29 MEDIUM 5.4 CVE-2013-6706 The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via crafted MPLS … Ios Xe Mitigation only Fix from $1,6002013-11-29 HIGH 9.3 CVE-2013-0867 The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remo… Ffmpeg after 1.1.1 Fix from $1,9502013-11-23 HIGH 10.0 CVE-2013-0873 The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel … Ffmpeg after 1.1.2 Fix from $1,9502013-11-23 MEDIUM 5.0 CVE-2013-4474EPSS 10% Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial o… Ubuntu Linux after 0.24.1 Fix from $1,6002013-11-23