CVE-2013-4832: Exposure of Sensitive Information to an Unauthorized Actor

HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors...

PT-2013-4990 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.11.4 Description: The issue is related to the improper handling of UDP Fragmentation Offload UFO processing in the Linux kernel, which can be triggered by network traffic that causes a large response packet. Th...

CVE-2013-4153

Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemuagent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service daemon crash via a cpu count request, as demonstrated by the "virsh vcpucount dom --guest" command...

CVE-2013-3893: Use After Free

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll...

CVE-2013-3208: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2013-3205: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2013-3184: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2013-4015: Undefined Security Weakness

Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the 1 Protected Mode or 2 Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code...

Oracle Linux 5 : xen (ELSA-2009-1472)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1472 advisory. 3.0.3-94.el54.1 - Fix race condition on domain reboot rhbz 525143 - Avoid multiple restarts of a domain rhbz 525141 - Add grub.conf password protection support ...

CVE-2013-3144: Improper Control of Generation of Code

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3151 and CVE-2013-3163...

CVE-2013-3151: Improper Control of Generation of Code

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3163...

CVE-2013-3153: Improper Control of Generation of Code

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3148...

CVE-2013-3166: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of the Shift JIS encoding, leading to cross-domain scrolling events, aka "Shift JIS Character Encoding...

CVE-2013-3147: Improper Control of Generation of Code

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2013-3162: Improper Control of Generation of Code

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3115...

CVE-2013-3148: Improper Control of Generation of Code

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3153...

CVE-2013-3142: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3121, an...

CVE-2013-3112: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3113, CVE-2013-3121, CVE-2013-3139, an...

CVE-2013-1297: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which allows remote attackers to perform cross-domain reading of JSON files via a crafted web site, aka "JSON Array Information Disclosure Vulnerability."...

CVE-2013-1309: Use After Free

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and...