13.10 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2014-4909	189		DoS Exec Code Overflow	2014-07-29	2014-11-14	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
2	CVE-2014-4699	362	1	DoS +Priv	2014-07-09	2020-08-14	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls.
3	CVE-2014-4167	264		DoS	2014-07-11	2018-10-22	3.5	None	Remote	Medium	???	None	None	Partial
The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by attaching an IPv6 private subnet to a L3 router.
4	CVE-2014-3730	20			2014-05-16	2018-10-30	4.3	None	Remote	Medium	Not required	None	Partial	None
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."
5	CVE-2014-3145	125		DoS	2014-05-11	2020-08-19	4.9	None	Local	Low	Not required	None	None	Complete
The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.
6	CVE-2014-3144	190		DoS	2014-05-11	2020-08-19	4.9	None	Local	Low	Not required	None	None	Complete
The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.
7	CVE-2014-2427				2014-04-16	2022-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
8	CVE-2014-2423				2014-04-16	2022-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.
9	CVE-2014-2421				2014-04-16	2022-05-13	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
10	CVE-2014-2414				2014-04-16	2022-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.
11	CVE-2014-2413				2014-04-16	2022-05-13	4.3	None	Remote	Medium	Not required	None	Partial	None
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.
12	CVE-2014-2412				2014-04-16	2022-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.
13	CVE-2014-2403				2014-04-16	2022-05-13	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
14	CVE-2014-2402				2014-04-16	2022-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.
15	CVE-2014-2398				2014-04-16	2022-05-13	3.5	None	Remote	Medium	???	None	Partial	None
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
16	CVE-2014-2397				2014-04-16	2022-05-13	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
17	CVE-2014-2241	20		DoS	2014-03-18	2014-04-01	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file.
18	CVE-2014-2038	200		+Info	2014-02-28	2020-08-26	2.1	None	Local	Low	Not required	Partial	None	None
The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain sensitive information from kernel memory in opportunistic circumstances by writing to a file in an NFS filesystem and then reading the same file.
19	CVE-2014-2030	787		DoS Exec Code Overflow	2020-02-06	2020-02-11	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-1947.
20	CVE-2014-1958	120		Exec Code Overflow	2020-02-06	2020-02-12	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030.
21	CVE-2014-1874	20		DoS	2014-02-28	2020-08-26	4.9	None	Local	Low	Not required	None	None	Complete
The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context.
22	CVE-2014-1739	200		+Info	2014-06-23	2020-08-19	2.1	None	Local	Low	Not required	Partial	None	None
The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call.
23	CVE-2014-1690	200		+Info	2014-02-28	2020-08-28	2.6	None	Remote	High	Not required	Partial	None	None
The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.
24	CVE-2014-1532	416		DoS Exec Code Mem. Corr.	2014-04-30	2020-08-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to host resolution.
25	CVE-2014-1531	416		DoS Exec Code Mem. Corr.	2014-04-30	2020-08-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving an imgLoader object that is not properly handled during an image-resize operation.
26	CVE-2014-1530	79		XSS	2014-04-30	2020-08-07	4.3	None	Remote	Medium	Not required	None	Partial	None
The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the loading of a URL with a spoofed baseURI property, and conduct cross-site scripting (XSS) attacks, via a crafted web site that performs history navigation.
27	CVE-2014-1529	269		Exec Code Bypass	2014-04-30	2020-08-06	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass intended source-component restrictions and execute arbitrary JavaScript code in a privileged context via a crafted web page for which Notification.permission is granted.
28	CVE-2014-1528	119		DoS Exec Code Overflow	2014-04-30	2018-10-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.
29	CVE-2014-1526	269		Bypass	2014-04-30	2020-08-14	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that is visited in the debugger, leading to unwrapping operations and calls to DOM methods on the unwrapped objects.
30	CVE-2014-1525	787		DoS Exec Code Mem. Corr.	2014-04-30	2020-08-14	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.
31	CVE-2014-1524	120		DoS Exec Code Overflow	2014-04-30	2020-08-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.
32	CVE-2014-1523	787		DoS Overflow	2014-04-30	2020-08-07	4.3	None	Remote	Medium	Not required	None	None	Partial
Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image.
33	CVE-2014-1522	125		DoS Exec Code Mem. Corr.	2014-04-30	2020-08-14	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the Web Audio subsystem in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read, memory corruption, and application crash) via crafted content.
34	CVE-2014-1519			DoS Exec Code Mem. Corr.	2014-04-30	2020-08-14	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
35	CVE-2014-1518			DoS Exec Code Mem. Corr.	2014-04-30	2020-08-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
36	CVE-2014-1514	787		DoS Exec Code	2014-03-19	2020-08-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.
37	CVE-2014-1513	787		DoS Exec Code	2014-03-19	2020-08-11	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site.
38	CVE-2014-1512	416		Exec Code	2014-03-19	2020-08-10	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.
39	CVE-2014-1511	269		Bypass	2014-03-19	2020-08-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
40	CVE-2014-1510	269		Exec Code	2014-03-19	2020-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.
41	CVE-2014-1509	120		Exec Code Overflow	2014-03-19	2020-08-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.
42	CVE-2014-1508	125		DoS Bypass +Info	2014-03-19	2020-08-03	6.4	None	Remote	Low	Not required	Partial	None	Partial
The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly bypass the Same Origin Policy via vectors involving MathML polygon rendering.
43	CVE-2014-1505	200		Bypass +Info	2014-03-19	2020-08-05	5.0	None	Remote	Low	Not required	Partial	None	None
The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-correlation information, and possibly bypass the Same Origin Policy and read text from a different domain, via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.
44	CVE-2014-1497	125		DoS +Info	2014-03-19	2020-08-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information from process heap memory, cause a denial of service (out-of-bounds read and application crash), or possibly have unspecified other impact via a crafted WAV file.
45	CVE-2014-1493	119		DoS Exec Code Overflow Mem. Corr.	2014-03-19	2020-08-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
46	CVE-2014-1491	326		Bypass	2014-02-06	2020-07-31	4.3	None	Remote	Medium	Not required	Partial	None	None
Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value.
47	CVE-2014-1490	362		DoS	2014-02-06	2020-07-31	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket.
48	CVE-2014-1489	264		DoS	2014-02-06	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service (session restore) via a crafted web site.
49	CVE-2014-1488			Exec Code	2014-02-06	2020-08-21	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js.
50	CVE-2014-1487	346		Bypass +Info	2014-02-06	2020-08-11	5.0	None	Remote	Low	Not required	Partial	None	None
The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages.

Total number of vulnerabilities : 124 Page : 1 (This Page)2 3