2013

Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 f

Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attac

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B rout

Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read support

The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to ga

Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which

The web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management

Cisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall rule, which allows remo

Apple Keynote before 6.0 does not properly handle the interaction between Keynote presentation mode and the Screen Lock

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified cir

WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticate

Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and

Multiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11;

Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x a

Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attacker

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sens

The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via

The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveraging

Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allow

Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates

The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not requi

The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Scree

Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power assert

The ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly process the minssf confi

The kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing of multicast Wi-Fi pac

Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext

Mail in Apple Mac OS X before 10.9 allows remote attackers to spoof the existence of a cryptographic signature for an e-

The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified se

The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, p

App Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox restrictions via a crafted app tha

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows co

The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec st

The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operation

The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service

Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (sy

The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processing

The kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2 digest function calls,

CoreGraphics in Apple Mac OS X before 10.9 allows local users to bypass secure input mode and log an arbitrary applicati

Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or caus

CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks

Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by trigger

CFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session cookies in response to a

The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local users

socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option,

Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the l

Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass the passcode-f

Passcode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers to bypass an intended pa