Skip to content
OpenAdvisories

Archive

January 2013

Vulnerabilities first published in this month (UTC), newest first.

439 results · Feed

  • Unscored —

    Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified…

  • Unscored —
    CVE-2013-0230 Public exploit EPSS 69%

    Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP…

  • Unscored —
    CVE-2013-0229 Public exploit EPSS 76%

    The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attack…

  • Unscored —

    The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote at…

  • Unscored —

    Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP Mi…

  • Unscored —
    CVE-2012-5958 Public exploit EPSS 83%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5965 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5960 Public exploit EPSS 33%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5962 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5959 Public exploit EPSS 76%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5964 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5963 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5961 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —

    Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute…

  • Low 3.7
    CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

    KEV May 25, 2022
  • Unscored —

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, …

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to byp…

  • Unscored —

    Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short malform…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inje…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Infor…

  • Unscored —

    InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Informa…

  • Unscored —

    InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 d…

  • Unscored —

    Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properl…

  • Unscored —

    The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Ser…

  • Unscored —

    Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Serve…

  • Unscored —

    Open redirect vulnerability in Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 befor…

  • Unscored —

    The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 do…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operatio…

  • Unscored —

    Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere B…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 F…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers…

  • Unscored —
    CVE-2012-6529 Public exploit

    Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2012-6525 Public exploit

    SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2012-6528 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2012-6530 Public exploit EPSS 46%

    Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users …

  • Unscored —
    CVE-2012-6523 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2012-6524 Public exploit

    SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2012-6526 Public exploit

    SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-6522 Public exploit

    Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to…