Browse CVEs

MEDIUM 5.0 CVE-2013-4999 phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path i… phpMyAdmin Mitigation only Fix from $1,6002013-07-31 MEDIUM 5.0 CVE-2013-5000 phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path i… phpMyAdmin Mitigation only Fix from $1,6002013-07-31 HIGH 7.8 CVE-2013-4778 core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R… Openscape Session Border Controller Mitigation only Fix from $1,9502013-07-18 HIGH 7.8 CVE-2013-4780 core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R… Openscape Session Border Controller Mitigation only Fix from $1,9502013-07-18 MEDIUM 5.8 CVE-2013-2879 Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be considered a trusted process for s… Chrome after 28.0.1500.70 Fix from $1,6002013-07-10 MEDIUM 5.0 CVE-2013-0481 The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggeri… Sterling B2b Integrator Mitigation only Fix from $1,6002013-07-03 MEDIUM 5.0 CVE-2013-0558 IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about applicatio… Sterling B2b Integrator No fix yet Fix from $1,6002013-07-03 MEDIUM 5.0 CVE-2013-3398 The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pat… Prime Central For Hosted Collaboration Solution Mitigation only Fix from $1,6002013-06-26 MEDIUM 6.8 CVE-2013-3647 The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive… Cybozu Live after 2.0.0 Fix from $1,6002013-06-18 MEDIUM 5.0 CVE-2013-0599 IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remot… Rational Directory Server after 5.2.1 Fix from $1,6002013-05-28 MEDIUM 5.0 CVE-2013-2848 The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors. Chrome after 27.0.1453.91 Fix from $1,6002013-05-22 MEDIUM 5.0 CVE-2013-2737 A JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to obtain sensitive infor… Acrobat Reader Patch available Fix from $1,6002013-05-16 MEDIUM 5.0 CVE-2013-0519 IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-… Sterling Secure Proxy Mitigation only Fix from $1,6002013-05-10 MEDIUM 5.0 CVE-2013-1231 The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka … Webex Meetings Server Mitigation only Fix from $1,6002013-05-03 MEDIUM 5.0 CVE-2012-5657 The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attac… Zend Framework Mitigation only Fix from $1,6002013-05-02 MEDIUM 5.0 CVE-2012-5222 HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to obtain sensitive information via unspecified vectors. Service Manager Web Tier Mitigation only Fix from $1,6002013-05-02 MEDIUM 5.0 CVE-2013-1944 The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remot… Curl after 7.29.0 Fix from $1,6002013-04-29 HIGH 9.3 CVE-2013-1185 The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensi… Unified Computing System Infrastructure And Unified Computing System Software Mitigation only Fix from $1,9502013-04-25 MEDIUM 5.0 CVE-2013-0584 The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a l… Infosphere Replication Server Mitigation only Fix from $1,6002013-04-23 MEDIUM 5.0 CVE-2013-3210 Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by … Opera Browser after 12.14 Fix from $1,6002013-04-19 MEDIUM 5.0 CVE-2013-1194 The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages dependin… Adaptive Security Appliance Software Mitigation only Fix from $1,6002013-04-18 MEDIUM 5.0 CVE-2013-0284 Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obta… Ruby Agent Mitigation only Fix from $1,6002013-04-09 MEDIUM 5.0 CVE-2013-1665 The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products al… Folsom Patch available Fix from $1,6002013-04-03 MEDIUM 5.0 CVE-2013-2744 importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo actio… Backupbuddy No fix yet Fix from $1,6002013-04-02 MEDIUM 5.0 CVE-2013-2264 The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1… Open Source Mitigation only Fix from $1,6002013-04-01 MEDIUM 5.0 CVE-2013-1831 lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive… Moodle Patch available Fix from $1,6002013-03-25 MEDIUM 5.8 CVE-2013-0677 The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sensitive in… Simatic Pcs7 after 8.0 Fix from $1,6002013-03-21 MEDIUM 5.5 CVE-2013-0505 IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticate… Sterling Multi Channel Fulfillment Solution Mitigation only Fix from $1,6002013-03-19 MEDIUM 5.0 CVE-2013-2371 The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remo… Spotfire Statistics Services Mitigation only Fix from $1,6002013-03-15 MEDIUM 5.0 CVE-2013-0095EPSS 21% Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote UR… Office Mitigation only Fix from $1,6002013-03-13