2013

The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of t

Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site.

Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content

The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user appro

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows loc

The kernel in Apple iOS before 7 does not initialize unspecified kernel data structures, which allows local users to obt

IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference a

Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web

Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr

Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote at

Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and conseq

The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU co

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9

Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows att

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9

The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when

Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross

Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9

The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key me

The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunder

The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a de

Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin befor

The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request t

Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 242535

Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus,

Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumpt

Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified v

Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and

Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows r

Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmo

Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers

The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Gr

Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red