CVE List - 2013 / December
Showing 101 - 200 of 484 CVEs for December 2013 (Page 2 of 5)
CVE ID | Date | Title |
---|---|---|
CVE-2013-0854 | 2013-12-07 | The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows... |
CVE-2013-0855 | 2013-12-07 | Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg... |
CVE-2013-0856 | 2013-12-07 | The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows... |
CVE-2013-0857 | 2013-12-07 | The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows... |
CVE-2013-0858 | 2013-12-07 | The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows... |
CVE-2013-0859 | 2013-12-07 | The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows... |
CVE-2013-6385 | 2013-12-07 | The form API in Drupal 6.x before 6.29 and 7.x... |
CVE-2013-6386 | 2013-12-07 | Drupal 6.x before 6.29 and 7.x before 7.24 uses the... |
CVE-2013-6389 | 2013-12-07 | Open redirect vulnerability in the Overlay module in Drupal 7.x... |
CVE-2013-7000 | 2013-12-07 | The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS &... |
CVE-2013-7001 | 2013-12-07 | The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS &... |
CVE-2011-3934 | 2013-12-09 | Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in... |
CVE-2011-3935 | 2013-12-09 | The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows... |
CVE-2011-3941 | 2013-12-09 | The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows... |
CVE-2011-3944 | 2013-12-09 | The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows... |
CVE-2011-3946 | 2013-12-09 | The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows... |
CVE-2011-3949 | 2013-12-09 | The dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows... |
CVE-2011-3950 | 2013-12-09 | The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows... |
CVE-2011-4351 | 2013-12-09 | Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x... |
CVE-2013-1349 | 2013-12-09 | Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2... |
CVE-2013-1953 | 2013-12-09 | Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace... |
CVE-2013-4376 | 2013-12-09 | The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows... |
CVE-2013-4400 | 2013-12-09 | virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to... |
CVE-2013-6171 | 2013-12-09 | checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a... |
CVE-2013-6404 | 2013-12-09 | Quassel core (server daemon) in Quassel IRC before 0.9.2 does... |
CVE-2013-7008 | 2013-12-09 | The decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly... |
CVE-2013-7009 | 2013-12-09 | The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does... |
CVE-2013-7010 | 2013-12-09 | Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1... |
CVE-2013-7011 | 2013-12-09 | The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does... |
CVE-2013-7012 | 2013-12-09 | The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does... |
CVE-2013-7013 | 2013-12-09 | The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses... |
CVE-2013-7014 | 2013-12-09 | Integer signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in... |
CVE-2013-7015 | 2013-12-09 | The flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does... |
CVE-2013-7016 | 2013-12-09 | The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does... |
CVE-2013-7017 | 2013-12-09 | libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause... |
CVE-2013-7018 | 2013-12-09 | libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use... |
CVE-2013-7019 | 2013-12-09 | The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does... |
CVE-2013-7020 | 2013-12-09 | The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does... |
CVE-2013-7021 | 2013-12-09 | The filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does... |
CVE-2013-7022 | 2013-12-09 | The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does... |
CVE-2013-7023 | 2013-12-09 | The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does... |
CVE-2013-7024 | 2013-12-09 | The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does... |
CVE-2013-7025 | 2013-12-09 | Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert... |
CVE-2013-3929 | 2013-12-09 | Cross-site scripting (XSS) vulnerability in admin/editevent.php in CMS Made Simple... |
CVE-2013-5354 | 2013-12-09 | Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers... |
CVE-2013-5355 | 2013-12-09 | Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow... |
CVE-2013-6039 | 2013-12-09 | Multiple cross-site scripting (XSS) vulnerabilities in NagiosQL 3.2 SP2 allow... |
CVE-2013-6985 | 2013-12-09 | SQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly... |
CVE-2013-2929 | 2013-12-09 | The Linux kernel before 3.12.2 does not properly use the... |
CVE-2013-2930 | 2013-12-09 | The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before... |
CVE-2013-4270 | 2013-12-09 | The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before... |
CVE-2013-6180 | 2013-12-09 | EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA... |
CVE-2013-6427 | 2013-12-09 | upgrade.py in the hp-upgrade service in HP Linux Imaging and... |
CVE-2013-6431 | 2013-12-09 | The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before... |
CVE-2013-6432 | 2013-12-09 | The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before... |
CVE-2013-7026 | 2013-12-09 | Multiple race conditions in ipc/shm.c in the Linux kernel before... |
CVE-2013-7027 | 2013-12-09 | The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before... |
CVE-2013-4408 | 2013-12-10 | Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in... |
CVE-2013-5447 | 2013-12-10 | Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3... |
CVE-2013-6708 | 2013-12-10 | Cisco Cloud Portal 9.4 allows remote attackers to read files... |
CVE-2013-3710 | 2013-12-10 | SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate... |
CVE-2013-6237 | 2013-12-10 | The ISL Desktop plugin for Windows before 1.4.7 for ISL... |
CVE-2013-6840 | 2013-12-10 | Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before... |
CVE-2013-7042 | 2013-12-10 | SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions... |
CVE-2013-3622 | 2013-12-10 | Buffer overflow in logout.cgi in the Intelligent Platform Management Interface... |
CVE-2013-3623 | 2013-12-10 | Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface... |
CVE-2013-6224 | 2013-12-10 | Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow... |
CVE-2012-3047 | 2013-12-10 | Cross-site scripting (XSS) vulnerability in the web-wizard setup page on... |
CVE-2013-5404 | 2013-12-10 | Cross-site scripting (XSS) vulnerability in the search implementation in IBM... |
CVE-2013-7043 | 2013-12-10 | Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta... |
CVE-2013-3878 | 2013-12-11 | Stack-based buffer overflow in the LRPC client in Microsoft Windows... |
CVE-2013-3899 | 2013-12-11 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2... |
CVE-2013-3902 | 2013-12-11 | Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft... |
CVE-2013-3903 | 2013-12-11 | Array index error in win32k.sys in the kernel-mode drivers in... |
CVE-2013-3907 | 2013-12-11 | portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2,... |
CVE-2013-5042 | 2013-12-11 | Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before... |
CVE-2013-5045 | 2013-12-11 | Microsoft Internet Explorer 10 and 11 allows local users to... |
CVE-2013-5046 | 2013-12-11 | Microsoft Internet Explorer 7 through 11 allows local users to... |
CVE-2013-5047 | 2013-12-11 | Microsoft Internet Explorer 6 through 11 allows remote attackers to... |
CVE-2013-5048 | 2013-12-11 | Microsoft Internet Explorer 6 through 11 allows remote attackers to... |
CVE-2013-5049 | 2013-12-11 | Microsoft Internet Explorer 6 through 9 allows remote attackers to... |
CVE-2013-5051 | 2013-12-11 | Microsoft Internet Explorer 10 and 11 allows remote attackers to... |
CVE-2013-5052 | 2013-12-11 | Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary... |
CVE-2013-5054 | 2013-12-11 | Microsoft Office 2013 and 2013 RT allows remote attackers to... |
CVE-2013-5056 | 2013-12-11 | Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft... |
CVE-2013-5057 | 2013-12-11 | hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and... |
CVE-2013-5058 | 2013-12-11 | Integer overflow in the kernel-mode drivers in Microsoft Windows XP... |
CVE-2013-5059 | 2013-12-11 | Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and... |
CVE-2013-5072 | 2013-12-11 | Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft... |
CVE-2013-3900 | 2013-12-11 | WinVerifyTrust Signature Validation Vulnerability |
CVE-2013-5331 | 2013-12-11 | Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before... |
CVE-2013-5332 | 2013-12-11 | Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before... |
CVE-2013-5333 | 2013-12-11 | Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary... |
CVE-2013-5334 | 2013-12-11 | Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary... |
CVE-2013-5609 | 2013-12-11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox... |
CVE-2013-5610 | 2013-12-11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox... |
CVE-2013-5611 | 2013-12-11 | Mozilla Firefox before 26.0 does not properly remove the Application... |
CVE-2013-5612 | 2013-12-11 | Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and... |
CVE-2013-5613 | 2013-12-11 | Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before... |
CVE-2013-5614 | 2013-12-11 | Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not... |