NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 37327 | CVE-2013-1064 | apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. | 2 | 4.6 | Medium | 2017-01-18 | 2013-10-08 | View | |
| 37583 | CVE-2013-1346 | mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file. | 2 | 9.3 | High | 2017-01-18 | 2013-05-15 | View | |
| 37839 | CVE-2013-1673 | The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versions, which allows local users to gain privileges by leveraging write access to a "trusted path." | 2 | 6.9 | Medium | 2017-01-18 | 2013-11-02 | View | |
| 38351 | CVE-2013-2275 | The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors. | 2 | 4 | Medium | 2017-01-18 | 2013-04-12 | View | |
| 38607 | CVE-2013-2627 | SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action. | 2 | 7.5 | High | 2017-01-18 | 2013-12-23 | View |
Page 14384 of 17672, showing 5 records out of 88360 total, starting on record 71916, ending on 71920
