2013

The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec st

The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operation

The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service

Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (sy

Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or caus

Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by trigger

CFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session cookies in response to a

The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local users

socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option,

Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whet

Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundl

The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML d

The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier

Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for

SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, al

Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitra

The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or

Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote a

Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote a

Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read o

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of servic

The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to caus

The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of se

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remo

The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, which

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to re

Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote

Directory traversal vulnerability in the attachment service in the Voice Message Web Service (aka VMWS or Cisco Unity We

The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM

I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows re

The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, w

The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allo

The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and read

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges

Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, w

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote a

Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before

Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 befo

Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to caus

Use-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in Xen 4.2.x and 4.3.x, w

The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be int

Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN in lib/rubygems/version.rb in RubyGems be

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.

The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundl

Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote auth

Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ru

Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow rem

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with th