Skip to content
OpenAdvisories

Archive

January 2013

Vulnerabilities first published in this month (UTC), newest first.

← December 2012 2013 / January February 2013 →
  1. 16
  2. 214
  3. 316
  4. 422
  5. 54
  6. 6 
  7. 7 
  8. 81
  9. 915
  10. 1028
  11. 118
  12. 128
  13. 1329
  14. 141
  15. 1524
  16. 16 
  17. 1793
  18. 1811
  19. 194
  20. 20 
  21. 2110
  22. 2210
  23. 231
  24. 2444
  25. 253
  26. 265
  27. 2720
  28. 281
  29. 2918
  30. 301
  31. 3142
All Critical High Medium Low Exploited only Public exploit

72 results · Clear filters · Feed

  • Unscored —
    CVE-2013-0230 Public exploit EPSS 69%

    Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP…

  • Unscored —
    CVE-2013-0229 Public exploit EPSS 76%

    The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attack…

  • Unscored —
    CVE-2012-5958 Public exploit EPSS 83%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5965 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5960 Public exploit EPSS 33%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5962 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5959 Public exploit EPSS 76%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5964 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5963 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Unscored —
    CVE-2012-5961 Public exploit EPSS 37%

    Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portabl…

  • Low 3.7
    CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

    KEV May 25, 2022
  • Unscored —
    CVE-2012-6529 Public exploit

    Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2012-6525 Public exploit

    SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2012-6528 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2012-6530 Public exploit EPSS 46%

    Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users …

  • Unscored —
    CVE-2012-6523 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2012-6524 Public exploit

    SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2012-6526 Public exploit

    SQL injection vulnerability in show_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-6522 Public exploit

    Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to…

  • Unscored —
    CVE-2010-5287 Public exploit

    SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute …

  • High —
    CVE-2013-0333 Public exploit EPSS 96%

    activesupport in Rails vulnerable to incorrect data conversion

    lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL inject…

    rails activesupport Debian RubyGems
  • Unscored —
    CVE-2013-1451 Public exploit EPSS 20%

    Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values i…

  • Unscored —
    CVE-2013-0653 Public exploit EPSS 19%

    Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy…

  • Unscored —
    CVE-2012-4914 Public exploit EPSS 28%

    Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2012-6276 Public exploit

    Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3…

  • Unscored —
    CVE-2012-6272 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0…

  • Unscored —
    CVE-2011-4618 Public exploit EPSS 10%

    Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress …

  • Unscored —
    CVE-2012-1922 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the aut…

  • Unscored —
    CVE-2012-6510 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arb…

  • Unscored —
    CVE-2012-6508 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hij…

  • Unscored —
    CVE-2012-6520 Public exploit

    Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2012-6505 Public exploit

    Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remo…

  • Unscored —
    CVE-2012-6518 Public exploit

    Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authent…

  • Unscored —
    CVE-2012-6517 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2012-6504 Public exploit

    SQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers …

  • Unscored —
    CVE-2012-6519 Public exploit

    SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2012-6516 Public exploit

    SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2012-6513 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to …

  • Unscored —
    CVE-2012-6506 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote att…

  • Unscored —
    CVE-2012-6509 Public exploit

    Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP …