CVE-2012-5947Les utilisateurs d'IBM SPSS SamplePower 3.0 sont concernés par un dépassement de tampon (buffer overflow) dans le contrôle ActiveX vsflex7l. Un attaquant distant peut exploiter cet…
9.3 ÉLEVÉE
CVE-2012-5946Les utilisateurs d'IBM SPSS SamplePower 3.0 sont affectés par une faille de mémoire dans le contrôle ActiveX c1sizer. Un attaquant distant non authentifié peut exécuter du code arb…
9.3 ÉLEVÉE
CVE-2012-5945Les utilisateurs d'IBM SPSS SamplePower 3.0 sont affectés par des dépassements de tampon dans le contrôle ActiveX Vsflex8l. Un attaquant distant et non authentifié peut exécuter du…
9.3 ÉLEVÉE
CVE-2013-1944The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies vi…
5.0 MOYENNE
CVE-2013-1927The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, ak…
6.8 MOYENNE
CVE-2013-1926The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attack…
5.8 MOYENNE
CVE-2013-1914Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a den…
5.0 MOYENNE
CVE-2013-1196The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Netw…
6.8 MOYENNE
CVE-2012-5221Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P301…
5.0 MOYENNE
CVE-2013-3302Race condition in the smb_send_rqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (NULL pointer dereference and O…
4.4 MOYENNE
CVE-2013-3301Les noyaux Linux antérieurs à la version 3.8.8 sont affectés par une faille dans l'implémentation de ftrace. Un utilisateur local disposant de privilèges administratifs (`CAP_SYS_A…
7.2 ÉLEVÉE
CVE-2013-2015The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically p…
4.7 MOYENNE
CVE-2013-1928The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users …
4.7 MOYENNE
CVE-2013-1227Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via unsp…
4.3 MOYENNE
CVE-2013-1226The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a cr…
6.1 MOYENNE
CVE-2013-1219SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial of service (Regex hardware job failure and application hang) via a (1) initiate signature …
4.4 MOYENNE
CVE-2013-1216Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (memory consumption and process restart) via crafted SNMP packets, aka…
4.0 MOYENNE
CVE-2013-1198Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System (UCS) Central allows remote attackers to inject arbitrary web script or HTML via uns…
4.3 MOYENNE
CVE-2013-0553The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other produ…
3.5 FAIBLE
CVE-2013-0533Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML…
3.5 FAIBLE
CVE-2012-5219Cross-site scripting (XSS) vulnerability in HP Managed Printing Administration (MPA) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vec…
4.3 MOYENNE
CVE-2013-0593Les utilisateurs d'IBM SPSS SamplePower 3.0 sur Windows sont concernés par une faille dans le contrôle ActiveX olch2x32. Un attaquant distant pourrait exécuter du code arbitraire s…
9.3 ÉLEVÉE
CVE-2013-0572Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS …
2.3 FAIBLE
CVE-2013-0571Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS …
2.9 FAIBLE
CVE-2013-0569Cross-site scripting (XSS) vulnerability in the Communities component in IBM Connections 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3 MOYENNE
CVE-2013-1428Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote authenticated peers to cause a denial of se…
6.5 MOYENNE
CVE-2013-2709Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remote attackers to hijack the authentication of arbitrary users f…
6.8 MOYENNE
CVE-2013-2307The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site.
5.8 MOYENNE
CVE-2013-2306The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site.
5.8 MOYENNE
CVE-2013-0727Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) ibfs32.dll file in the current …
6.9 MOYENNE
CVE-2012-5220Les versions 6.20 à 7.01 de HP Storage Data Protector sont affectées par une faille qui permet à un utilisateur local d'élever ses privilèges vers un niveau supérieur. Un attaquant…
7.2 ÉLEVÉE
CVE-2013-3241export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote au…
4.0 MOYENNE
CVE-2013-3240Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified ot…
6.5 MOYENNE
CVE-2013-3239phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extens…
4.6 MOYENNE
CVE-2013-3238phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before makin…
6.0 MOYENNE
CVE-2013-1970Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-1969. Reason: This candidate is a duplicate of CVE-2013-1969. Notes: All CVE users should reference CVE-2…
CVE-2013-1969Les applications utilisant la bibliothèque libxml2 pour l'analyse de fichiers XML ou HTML sont concernées. Un attaquant non authentifié peut envoyer une requête réseau spécialement…
7.5 ÉLEVÉE
CVE-2013-1949Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally introduced modification (Trojan Horse), which allows remote attackers to force the upload …
5.0 MOYENNE
CVE-2013-1948Les systèmes utilisant la version 0.0.1 de la gem Ruby `md2pdf` sont vulnérables à l'exécution de code à distance. Un attaquant non authentifié peut prendre le contrôle total du se…
10.0 ÉLEVÉE
CVE-2013-1947La gem Ruby `kelredd-pruview` version 0.3.8 est vulnérable à l'exécution de commandes à distance via des noms de fichiers spécialement conçus. Un attaquant non authentifié disposan…
9.3 ÉLEVÉE
CVE-2013-1933La gem Ruby Karteek Docsplit (version 0.5.4) est vulnérable à l'exécution de commandes à distance lors du traitement des noms de fichiers PDF. Un attaquant non authentifié disposan…
9.3 ÉLEVÉE
CVE-2013-1915Les pare-feu d'applications web ModSecurity antérieurs à la version 2.7.3 sont sensibles à une faille de type XML External Entity (XXE). Un attaquant distant non authentifié peut e…
7.5 ÉLEVÉE
CVE-2013-0338libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long re…
4.3 MOYENNE
CVE-2013-0233Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when…
6.8 MOYENNE
CVE-2013-0175Les applications Ruby utilisant la gem `multi_xml` (version 0.5.2) ou le framework Grape (avant la version 0.2.6) sont vulnérables à des attaques d'exécution de code à distance ou …
7.5 ÉLEVÉE
CVE-2012-4466Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untain…
5.0 MOYENNE
CVE-2012-4464Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the (1) exc_to…
5.0 MOYENNE
CVE-2013-2767Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9…
5.4 MOYENNE
CVE-2013-2696Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary user…
6.8 MOYENNE
CVE-2013-1215The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID C…
6.8 MOYENNE