2013

Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attacker

Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications

Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c in libdigidoc 3.6.0.0, a

Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attacke

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote a

Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attacke

Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-t

Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote

Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote

Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow re

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypas

Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cau

Buffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a

Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a r

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in

Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers

Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmo

The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunder

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9

Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows att

Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware

Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local us

MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges

The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 b

inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installati

The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server,

Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the

Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attacker

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python

Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary

Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 be