Skip to content
OpenAdvisories

Archive

January 2013

Vulnerabilities first published in this month (UTC), newest first.

← December 2012 2013 / January February 2013 →
  1. 16
  2. 214
  3. 316
  4. 422
  5. 54
  6. 6 
  7. 7 
  8. 81
  9. 915
  10. 1028
  11. 118
  12. 128
  13. 1329
  14. 141
  15. 1524
  16. 16 
  17. 1793
  18. 1811
  19. 194
  20. 20 
  21. 2110
  22. 2210
  23. 231
  24. 2444
  25. 253
  26. 265
  27. 2720
  28. 281
  29. 2918
  30. 301
  31. 3142
All Critical High Medium Low Exploited only Public exploit

439 results · Feed

  • Unscored —
    CVE-2012-5157

    Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers t…

  • Unscored —
    CVE-2012-5150

    Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service …

    ffmpeg Debian
  • Unscored —
    CVE-2012-5149

    Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2012-5148

    The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has uns…

  • Unscored —
    CVE-2012-5146

    Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.

  • Unscored —
    CVE-2012-5147

    Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-5153

    Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of s…

    libv8-3.14 Ubuntu
  • Unscored —
    CVE-2012-3174

    Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrit…

  • Medium —
    CVE-2013-0155

    Active Record allows bypassing of database-query restrictions

    Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended data…

    rails activerecord Debian RubyGems
  • High —
    CVE-2013-0156 Public exploit EPSS 99%

    actionpack Improper Input Validation vulnerability

    active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks …

    rails actionpack Debian RubyGems
  • Unscored —
    CVE-2013-0746

    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunder…

  • Unscored —
    CVE-2013-0771

    Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firef…

  • Unscored —
    CVE-2013-0753 Public exploit EPSS 51%

    Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox …

  • Unscored —
    CVE-2013-0748

    The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x befo…

  • Unscored —
    CVE-2013-0761

    Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, …

  • Unscored —
    CVE-2013-0750

    Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 1…

  • Unscored —
    CVE-2013-0755

    Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Fi…

  • Unscored —
    CVE-2013-0759

    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunder…

  • Unscored —
    CVE-2013-0754

    Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2013-0752

    Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.…

  • Unscored —
    CVE-2013-0768

    Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2…

  • Unscored —
    CVE-2013-0760

    Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird bef…

  • Unscored —
    CVE-2013-0757 Public exploit EPSS 61%

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderb…

  • Unscored —
    CVE-2013-0762

    Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x b…

  • Unscored —
    CVE-2013-0745

    The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2,…

  • Unscored —
    CVE-2013-0770

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, a…

  • Unscored —
    CVE-2013-0769

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0…

  • Unscored —
    CVE-2013-0756

    Use-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.…

  • Unscored —
    CVE-2013-0763

    Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2,…

  • Unscored —
    CVE-2013-0744

    Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox be…

  • Unscored —
    CVE-2013-0764

    The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderb…

  • Unscored —
    CVE-2013-0767

    The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 1…

  • Unscored —
    CVE-2013-0751

    Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME eleme…

  • Unscored —
    CVE-2013-0747

    The gPluginHandler.handleEvent function in the plugin handler in Mozilla Firefox before 18.0, Firefox ESR 17.x before 1…

  • Unscored —
    CVE-2013-0758 Public exploit EPSS 73%

    Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunder…

  • Unscored —
    CVE-2013-0749

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0…

  • Unscored —
    CVE-2013-0766

    Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x be…

  • Unscored —
    CVE-2011-5252 Public exploit Scanner template EPSS 12%

    Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1…

  • Unscored —
    CVE-2011-5254

    Unspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact and attack vectors.

  • Unscored —
    CVE-2011-5253

    Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an author…