CVEs published December 14, 2013
41 CVEs were published on December 14, 2013: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 41
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 41
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 41
- CVE-2013-3042Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x…
- CVE-2013-3043Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x…
- CVE-2013-4000Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the…
- CVE-2013-4001Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an…
- CVE-2013-4845Cross-site scripting (XSS) vulnerability on HP Officejet Pro 8500 (aka A909) All-in-One printers allows remote attackers to inject…
- CVE-2013-5438Cross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0 through 1.3 allows remote attackers to…
- CVE-2013-6709The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows…
- CVE-2013-6710Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of…
- CVE-2013-6711Cross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers…
- CVE-2013-6959Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct…
- CVE-2013-6960Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or…
- CVE-2013-6961Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote…
- CVE-2013-6962Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject…
- CVE-2013-6963Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject…
- CVE-2013-6964Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via…
- CVE-2013-6965The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which…
- CVE-2013-6967Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to…
- CVE-2013-6968Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists…
- CVE-2013-6969The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors…
- CVE-2013-6970Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server…
- CVE-2013-6971Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct…
- CVE-2013-6972Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance…
- CVE-2013-6973Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.
- CVE-2013-4520xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service (crash) via a stylesheet that embeds a…
- CVE-2013-6271Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that…
Show all 41 entriesShow fewer entries
- CVE-2013-7105Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0…
- CVE-2013-4587Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5…
- CVE-2013-6367The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause…
- CVE-2013-6368The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via…
- CVE-2013-6376The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to…
- CVE-2013-1364The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf…
- CVE-2013-5107Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2013-6051The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote…
- CVE-2013-6391The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped…
- CVE-2013-6411The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service…
- CVE-2013-6426The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not…
- CVE-2013-6428The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users…
- CVE-2013-7069ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a…
- CVE-2013-7085Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character…
- CVE-2013-7103McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value…
- CVE-2013-7104McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value…