Skip to content
OpenAdvisories

Archive

January 2013

Vulnerabilities first published in this month (UTC), newest first.

← December 2012 2013 / January February 2013 →
  1. 16
  2. 214
  3. 316
  4. 422
  5. 54
  6. 6 
  7. 7 
  8. 81
  9. 915
  10. 1028
  11. 118
  12. 128
  13. 1329
  14. 141
  15. 1524
  16. 16 
  17. 1793
  18. 1811
  19. 194
  20. 20 
  21. 2110
  22. 2210
  23. 231
  24. 2444
  25. 253
  26. 265
  27. 2720
  28. 281
  29. 2918
  30. 301
  31. 3142
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High —
    CVE-2013-0333 Public exploit EPSS 96%

    activesupport in Rails vulnerable to incorrect data conversion

    lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL inject…

    rails activesupport Debian RubyGems
  • High —
    CVE-2013-0156 Public exploit EPSS 99%

    actionpack Improper Input Validation vulnerability

    active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks …

    rails actionpack Debian RubyGems
  • High 7.5
    CVE-2013-0629 Exploited Public exploit EPSS 66%

    Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted di…

    KEV Mar 7, 2022