CVE-2013-5693Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/edit…
4.3 MOYENNE
CVE-2013-5692Les versions de X2CRM antérieures à 3.5 sont affectées par une faille dans le gestionnaire de traduction. Un attaquant disposant d'identifiants d'administrateur peut utiliser des s…
8.5 ÉLEVÉE
CVE-2013-4623The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows r…
4.3 MOYENNE
CVE-2013-4362Les systèmes Linux utilisant `davfs2` (versions 1.4.6 et 1.4.7) pour monter des partages WebDAV sont concernés. Un utilisateur local peut exploiter cette vulnérabilité pour obtenir…
7.2 ÉLEVÉE
CVE-2013-4222OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote a…
6.5 MOYENNE
CVE-2013-2238Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly e…
6.8 MOYENNE
CVE-2013-1839Les serveurs proxy Squid versions 3.2.x (avant la 3.2.9) et 3.3.x (avant la 3.3.3) sont affectés par cette faille. Un attaquant distant peut provoquer le plantage du service ou le …
7.8 ÉLEVÉE
CVE-2013-1444A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222.
3.3 FAIBLE
CVE-2013-0211Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-d…
5.0 MOYENNE
CVE-2013-5963Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a fi…
6.8 MOYENNE
CVE-2013-5962Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arb…
5.1 MOYENNE
CVE-2013-5961Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then…
6.8 MOYENNE
CVE-2013-4378Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a c…
4.3 MOYENNE
CVE-2013-5697Les serveurs Apache utilisant le module `mod_accounting` (version 0.5 et antérieures) sont vulnérables à une faille d'injection SQL. Un attaquant distant peut exécuter des commande…
7.5 ÉLEVÉE
CVE-2013-5651The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted…
5.0 MOYENNE
CVE-2013-4316Les frameworks Apache Struts (versions 2.0.0 à 2.3.15.1) sont affectés par une configuration qui autorise l'invocation dynamique de méthodes (Dynamic Method Invocation) par défaut.…
10.0 ÉLEVÉE
CVE-2013-4314The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows …
4.3 MOYENNE
CVE-2013-4310Apache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted action: prefix.
5.8 MOYENNE
CVE-2013-4297The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service (uninitialized pointer derefere…
4.0 MOYENNE
CVE-2013-4296The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows rem…
4.0 MOYENNE
CVE-2013-4292libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large number of domain migrate parameters in certain RPC calls in (1) daemon/remo…
2.1 FAIBLE
CVE-2013-4291The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which al…
6.9 MOYENNE
CVE-2013-4239The xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote authenticated users to cause a denial of service (memory corruption and crash) via ve…
4.0 MOYENNE
CVE-2013-4154The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and cras…
4.3 MOYENNE
CVE-2013-4153Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service (daemon crash) …
5.0 MOYENNE
CVE-2013-2230The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via unspecified vectors involving "multip…
4.0 MOYENNE
CVE-2013-2218Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (li…
5.0 MOYENNE
CVE-2013-5965The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive…
5.0 MOYENNE
CVE-2013-5964Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flag…
2.1 FAIBLE
CVE-2013-4372Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers…
4.3 MOYENNE
CVE-2013-4359Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to cause a denial of service (memory consumption) via a large response count value in…
5.0 MOYENNE
CVE-2013-4136ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a …
4.4 MOYENNE
CVE-2013-1442Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a sa…
1.2 FAIBLE
CVE-2013-5960The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist ta…
5.8 MOYENNE
CVE-2013-5679The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0 does not properly resist tamp…
2.6 FAIBLE
CVE-2013-5505Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an uns…
4.3 MOYENNE
CVE-2013-5504Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script…
4.3 MOYENNE
CVE-2013-3417The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a c…
5.0 MOYENNE
CVE-2013-5959Les proxys web Blue Coat ProxySG sont sensibles à une attaque par déni de service pouvant provoquer le plantage du système ou l'interruption des connexions par épuisement de la mém…
7.1 ÉLEVÉE
CVE-2013-4276Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color pr…
4.3 MOYENNE
CVE-2013-4244The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly e…
6.8 MOYENNE
CVE-2013-4112The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execu…
5.4 MOYENNE
CVE-2013-2068Red Hat CloudForms Management Engine 2.0 est affecté par une faille dans son AgentController qui permet à des attaquants distants de créer ou d'écraser n'importe quel fichier sur l…
9.4 ÉLEVÉE
CVE-2013-1921PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.
1.9 FAIBLE
CVE-2013-5161Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement, and open th…
4.4 MOYENNE
CVE-2013-5160Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by…
3.3 FAIBLE
CVE-2013-0598Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attacke…
6.8 MOYENNE
CVE-2013-5498The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service…
5.0 MOYENNE
CVE-2013-5403Les appliances IBM WebSphere DataPower XC10 utilisant les versions 2.0 à 2.5.0.1 sont concernées. Un attaquant distant peut obtenir un accès administratif complet au système, lui p…
10.0 ÉLEVÉE
CVE-2012-1313The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSC…
6.5 MOYENNE