Browse CVEs

HIGH 10.0 CVE-2012-0261EPSS 74% license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via she… Monitor after 5.5.1 Fix from $1,9502013-12-31 HIGH 9.3 CVE-2013-6795EPSS 5% The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted s… Openstack Windows Guest Agent after 1.2.5.0 Fix from $1,9502013-12-24 HIGH 7.5 CVE-2013-6824 Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a n… Zabbix after 1.8.18 Fix from $1,9502013-12-19 HIGH 7.5 CVE-2013-7086 The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbit… Webbynode after 1.0.5.3 Fix from $1,9502013-12-19 MEDIUM 6.8 CVE-2013-7069 ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in… Ack Mitigation only Fix from $1,6002013-12-14 MEDIUM 6.8 CVE-2013-7050 The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbi… Devscripts after 2.13.7 Fix from $1,6002013-12-13 HIGH 7.5 CVE-2013-6421 The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands vi… Sprout No fix yet Fix from $1,9502013-12-12 HIGH 10.0 CVE-2013-2751EPSS 72% Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x befo… Raidiator 4.1.12 / 4.2.24+ Fix from $1,9502013-12-12 HIGH 10.0 CVE-2013-6810EPSS 17% The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Adv… Connectrix Manager Mitigation only Fix from $1,9502013-12-12 CRITICAL 9.8 CVE-2013-6671EPSS 11% The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before… Firefox 24.2 / 26.0+ Fix from $2,3002013-12-11 HIGH 9.3 CVE-2013-5332EPSS 5% Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR … Flash Player 3.9.0.1380 / 11.2.202.332+ Fix from $1,9502013-12-11 HIGH 9.3 CVE-2013-5331EPSS 72% Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR … Flash Player 3.9.0.1380 / 11.2.202.332+ Fix from $1,9502013-12-11 MEDIUM 6.8 CVE-2013-5059EPSS 11% Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page c… Office Web Apps Mitigation only Fix from $1,6002013-12-11 MEDIUM 6.8 CVE-2013-6427 upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows m… Linux Imaging And Printing Project No fix yet Fix from $1,6002013-12-09 HIGH 7.5 CVE-2013-4376 The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecifie… X2go Server after 4.0.0.1 Fix from $1,9502013-12-09 HIGH 7.5 CVE-2013-1349EPSS 23% Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter. Opensis Patch available Fix from $1,9502013-12-09 MEDIUM 5.1 CVE-2013-6385 The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even when CSRF v… Drupal Patch available Fix from $1,6002013-12-07 MEDIUM 6.8 CVE-2013-4212EPSS 81% Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions vi… Roller after 5.0.1 Fix from $1,6002013-12-07 MEDIUM 6.8 CVE-2013-4446 The _json_decode function in plugins/context_reaction_block.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal, w… Context Patch available Fix from $1,6002013-12-07 MEDIUM 6.8 CVE-2013-4478 Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an e… Sup after 0.13.2 Fix from $1,6002013-12-07 MEDIUM 6.8 CVE-2013-4479 lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metachara… Sup after 0.13.2 Fix from $1,6002013-12-07 HIGH 9.3 CVE-2012-6535 DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or c… Djvulibre after 3.5.25 Fix from $1,9502013-12-02 HIGH 10.0 CVE-2013-5912EPSS 31% VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in … Velocity Analytics Vhayu Analytic Server Mitigation only Fix from $1,9502013-11-28 HIGH 9.0 CVE-2013-6865 SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows re… Adaptive Server Enterprise Mitigation only Fix from $1,9502013-11-23 HIGH 9.0 CVE-2013-6866 SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote au… Adaptive Server Enterprise Mitigation only Fix from $1,9502013-11-23 HIGH 7.5 CVE-2013-6829EPSS 80% admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost param… Mail Secure Mitigation only Fix from $1,9502013-11-20 HIGH 7.5 CVE-2013-6830EPSS 9% admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attackers to execute arbitrary comman… Mail Secure 5099sk No fix yet Fix from $1,9502013-11-20 HIGH 10.0 CVE-2013-4495 The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows… Torque Resource Manager after 4.2.5 Fix from $1,9502013-11-20 HIGH 7.5 CVE-2013-4557EPSS 25% The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execu… Spip Patch available Fix from $1,9502013-11-18 HIGH 7.8 CVE-2013-3906 KEVEPSS 85% GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 201… Excel Viewer Patch available Fix from $1,9502013-11-06