2013

The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-t

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the pas

Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware

The SSH implementation on D-Link Japan DES-3810 devices with firmware before R2.20.011 allows remote authenticated users

The SSH implementation on the D-Link Japan DWL-2100AP with firmware before R252JP-RC572 allows remote authenticated user

Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to exe

The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly han

The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound r

WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive i

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, whi

The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces,

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an applica

The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of t

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximat

Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site.

Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content

The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, whi

The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user appro

Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attackers

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows loc

The kernel in Apple iOS before 7 does not initialize unspecified kernel data structures, which allows local users to obt

The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable, which allows attackers to c

The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device rest

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service

IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference a

IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control o

Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web

Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (m

Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr

The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a deni

Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote at

Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and conseq

The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU co

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throug