PUBLIÉES EN
octobre 2013
634 CVE, des plus récentes aux plus anciennes.
CVE-2013-5184The kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing of multicast Wi-Fi packets, which allows remote attackers to cause a denial of ser…
5.7 MOYENNE
CVE-2013-5183Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows remote attackers to obtain sensitive inf…
2.6 FAIBLE
CVE-2013-5182Mail in Apple Mac OS X before 10.9 allows remote attackers to spoof the existence of a cryptographic signature for an e-mail message by using the multipart/signed content type with…
5.0 MOYENNE
CVE-2013-5181The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified servers that support CRAM-MD5 authentication, which allows rem…
4.3 MOYENNE
CVE-2013-5180The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random va…
4.3 MOYENNE
CVE-2013-5179Les versions d'Apple Mac OS X antérieures à 10.9 sont affectées par une faille dans l'App Sandbox. Un attaquant peut contourner les restrictions du bac à sable pour accéder à des d…
7.5 ÉLEVÉE
CVE-2013-5178LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a cra…
5.0 MOYENNE
CVE-2013-5177The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec structure.
4.9 MOYENNE
CVE-2013-5176The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operations, which allows local users to cause a denial of service (sy…
4.9 MOYENNE
CVE-2013-5175The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service (out-of-bounds read and system crash) via a crafted Mach-O …
6.6 MOYENNE
CVE-2013-5174Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a crafted tty read operation.
4.9 MOYENNE
CVE-2013-5173The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processing of large requests, which allows local users to cause a deni…
2.1 FAIBLE
CVE-2013-5172Les versions d'Apple Mac OS X antérieures à la 10.9 sont affectées par une faille dans la manière dont le noyau gère les fonctions de hachage SHA-2. Un attaquant distant peut provo…
7.1 ÉLEVÉE
CVE-2013-5171CoreGraphics in Apple Mac OS X before 10.9 allows local users to bypass secure input mode and log an arbitrary application's keystrokes via a hotkey event registration.
3.3 FAIBLE
CVE-2013-5170Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF …
6.8 MOYENNE
CVE-2013-5169CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks the visibility of all windows, which allows physically proxi…
1.9 FAIBLE
CVE-2013-5168Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL.
6.8 MOYENNE
CVE-2013-5167CFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session cookies in response to a reset operation, which makes it easier for remote web server…
5.0 MOYENNE
CVE-2013-5166The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local users to cause a denial of service (system crash) via a crafted a…
4.9 MOYENNE
CVE-2013-5165socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option, which allows remote attackers to bypass intended access rest…
6.4 MOYENNE
CVE-2013-5164Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Con…
3.3 FAIBLE
CVE-2013-5162Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-failure disabled state by leveraging certain incorrect visibi…
2.1 FAIBLE
CVE-2013-5144Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by…
3.3 FAIBLE
CVE-2013-5136Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message, wh…
4.3 MOYENNE
CVE-2013-5135Apple Mac OS X (versions antérieures à 10.9) et Apple Remote Desktop (versions antérieures à 3.5.4) sont concernés via leur serveur de partage d'écran. Un attaquant peut exécuter d…
7.5 ÉLEVÉE
CVE-2013-4390Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to re…
5.8 MOYENNE
CVE-2013-4373The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to t…
3.2 FAIBLE
CVE-2013-4295The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunc…
5.0 MOYENNE
CVE-2013-4293The server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which allows local users to obtain sensitive information by reading the log files.
2.1 FAIBLE
CVE-2013-2236Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line opt…
2.6 FAIBLE
CVE-2013-6245Les versions de SAP Sybase Adaptive Server Enterprise (ASE) antérieures aux correctifs spécifiés sont vulnérables à l'exécution de code à distance. Un attaquant peut envoyer des re…
10.0 ÉLEVÉE
CVE-2013-6244The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directo…
5.0 MOYENNE
CVE-2013-3244Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to ex…
6.0 MOYENNE
CVE-2013-6243Les sites WordPress utilisant l'extension Landing Pages (version 1.2.3 ou antérieure) sont vulnérables à une attaque par injection SQL via le paramètre « post ». Un attaquant dista…
7.5 ÉLEVÉE
CVE-2013-4422SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via …
6.8 MOYENNE
CVE-2013-2651Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) "p" or (2) content paramet…
4.3 MOYENNE
CVE-2013-5703The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properl…
6.8 MOYENNE
CVE-2013-5389Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecif…
4.3 MOYENNE
CVE-2013-5388Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecif…
4.3 MOYENNE
CVE-2013-1739Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial o…
5.0 MOYENNE
CVE-2013-5550The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via crafted command parameters that trigger hardware-compo…
4.6 MOYENNE
CVE-2013-5544The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (device reload) by sending many userna…
5.4 MOYENNE
CVE-2013-5446Les appliances IBM WebSphere DataPower XC10 utilisant les versions 2.1.0 ou 2.5.0 sont affectées par une faille dans la manière dont la console gère les actions de déconnexion. Un …
10.0 ÉLEVÉE
CVE-2013-5428Les appliances IBM WebSphere DataPower XC10 exécutant la version 2.5.0 sont affectées par une faille qui permet d'effectuer des actions administratives sans authentification. Un at…
7.1 ÉLEVÉE
CVE-2013-4382Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5937. Reason: This candidate is a duplicate of CVE-2013-5937. Notes: All CVE users should reference CVE-2…
CVE-2013-4381Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5938. Reason: This candidate is a duplicate of CVE-2013-5938. Notes: All CVE users should reference CVE-2…
CVE-2013-4450The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number…
5.0 MOYENNE
CVE-2013-5971Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via …
6.8 MOYENNE
CVE-2013-5970Les hôtes VMware ESXi (4.0–5.0) et ESX (4.0–4.1) sont susceptibles de subir une attaque par déni de service pouvant provoquer le plantage du service de gestion hostd-vmdb. Un attaq…
7.1 ÉLEVÉE
CVE-2013-5542Les pare-feu Cisco ASA utilisant certaines versions des logiciels 8.4, 8.7, 9.0 ou 9.1 sont vulnérables à cette faille. Un attaquant peut provoquer le plantage de l'appareil ou int…
8.5 ÉLEVÉE