CVE-2013-5943Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3 MOYENNE
CVE-2013-5942Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote…
6.8 MOYENNE
CVE-2013-5481Les équipements Cisco IOS (versions 12.2 et 15.0 à 15.3) utilisant PPTP avec NAT sont susceptibles de subir un plantage à distance. Un attaquant non authentifié sur le réseau peut …
7.1 ÉLEVÉE
CVE-2013-5480Les équipements Cisco IOS (versions 12.2 et 15.0 à 15.3) utilisant le NAT sont susceptibles de planter s'ils traitent un flux DNS-over-TCP spécifiquement malformé. Un attaquant dis…
7.8 ÉLEVÉE
CVE-2013-5479Les équipements Cisco IOS exécutant les versions 12.2 et 15.0 à 15.3 sont concernés lorsqu'ils sont configurés pour utiliser le NAT. Un attaquant distant non authentifié peut provo…
7.8 ÉLEVÉE
CVE-2013-5478Les appareils Cisco IOS et IOS XE disposant d'interfaces VRF configurées sont vulnérables à une attaque par déni de service. Un attaquant distant non authentifié peut provoquer le …
7.8 ÉLEVÉE
CVE-2013-5477Les équipements Cisco IOS utilisant des pilotes HDLC32 sur des interfaces T1/E1 sont vulnérables à une attaque par déni de service. Un attaquant distant peut provoquer le plantage …
7.8 ÉLEVÉE
CVE-2013-5476Les appareils Cisco IOS exécutant les versions 15.1 à 15.2 sont concernés s'ils ont activé le filtrage de contenu du pare-feu basé sur des zones (Zone-Based Firewall) ou l'inspecti…
7.8 ÉLEVÉE
CVE-2013-5475Les appareils Cisco IOS et IOS XE agissant comme serveurs DHCP ou agents de relais sont affectés par cette faille. Un attaquant distant et non authentifié peut provoquer le plantag…
7.8 ÉLEVÉE
CVE-2013-5474Les appareils Cisco IOS (versions 12.2–12.4 et 15.0–15.3) sont susceptibles de subir un plantage ou un blocage du système en raison de la manière dont ils traitent les paquets IPv6…
7.8 ÉLEVÉE
CVE-2013-5473Les routeurs Cisco IOS et IOS XE sont affectés par une fuite de mémoire déclenchée par des paquets IKEv1 malformés. Un attaquant distant non authentifié peut exploiter cette faille…
7.8 ÉLEVÉE
CVE-2013-5472Les appareils Cisco IOS et IOS XE sont susceptibles de subir un plantage forçant le système à redémarrer. Un attaquant distant non authentifié peut déclencher cet état de déni de s…
7.1 ÉLEVÉE
CVE-2013-5093The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute ar…
6.8 MOYENNE
CVE-2013-4626Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to …
4.3 MOYENNE
CVE-2013-5575Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security iss…
CVE-2013-2229Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2218. Reason: This candidate is a reservation duplicate of CVE-2013-2218. Notes: All CVE users should ref…
CVE-2013-2026Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4971. Reason: This candidate is a reservation duplicate of CVE-2011-4971. Notes: All CVE users should ref…
CVE-2013-0341Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.…
CVE-2012-4092The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-…
5.8 MOYENNE
CVE-2012-4088The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files …
4.3 MOYENNE
CVE-2012-4079The XML API service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service (API service outage) via a mal…
5.0 MOYENNE
CVE-2013-5938Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form.
4.3 MOYENNE
CVE-2013-5937Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for request…
6.8 MOYENNE
CVE-2013-5586Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.
4.3 MOYENNE
CVE-2013-5936The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 allows remote attackers to obtain sensitive information about (1) runtime a…
4.3 MOYENNE
CVE-2013-5935The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not properly restrict the set of network interfaces that can receive A…
4.3 MOYENNE
CVE-2013-5934Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by …
4.0 MOYENNE
CVE-2013-5933Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to g…
6.9 MOYENNE
CVE-2013-5750The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that…
5.0 MOYENNE
CVE-2013-5634arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and hos…
4.3 MOYENNE
CVE-2013-5373The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to ga…
6.9 MOYENNE
CVE-2013-5200Open-Xchange AppSuite (versions 7.0.x et 7.2.x) contient une API de cluster Hazelcast non sécurisée qui ne requiert pas d'authentification. Un attaquant ayant un accès réseau au se…
7.5 ÉLEVÉE
CVE-2013-5118Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail …
4.3 MOYENNE
CVE-2013-4777A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, wh…
6.9 MOYENNE
CVE-2013-4350The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec en…
5.0 MOYENNE
CVE-2013-4343Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing …
6.9 MOYENNE
CVE-2013-4300Les noyaux Linux antérieurs à la version 3.11 sont affectés par une faille dans la manière dont le système vérifie les identifiants d'utilisateur lors de la communication entre les…
7.2 ÉLEVÉE
CVE-2013-4025IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have…
1.9 FAIBLE
CVE-2013-4024IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTT…
4.3 MOYENNE
CVE-2013-4022IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspe…
3.5 FAIBLE
CVE-2013-2140The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial …
3.8 FAIBLE
CVE-2013-1060A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable t…
6.9 MOYENNE
CVE-2012-4086A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commands via invalid parameters, aka Bug ID CSCt…
5.1 MOYENNE
CVE-2013-5911Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message par…
4.3 MOYENNE
CVE-2013-5221The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privil…
3.5 FAIBLE
CVE-2013-3616Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attackers to inject arbitrary web script or HTML via the username p…
4.3 MOYENNE
CVE-2013-3611Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security iss…
CVE-2013-3589Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with f…
4.3 MOYENNE
CVE-2012-4094Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service by reading an…
5.4 MOYENNE
CVE-2012-4089MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) …
6.6 MOYENNE