Skip to content
OpenAdvisories

Archive

13 February 2013

Vulnerabilities first published on this day (UTC), newest first.

← January 2013 2013 / February /13 March 2013 →
  1. 11
  2. 251
  3. 319
  4. 41
  5. 510
  6. 615
  7. 72
  8. 821
  9. 9 
  10. 10 
  11. 111
  12. 1227
  13. 1379
  14. 149
  15. 1511
  16. 167
  17. 17 
  18. 1812
  19. 1918
  20. 2022
  21. 215
  22. 2210
  23. 2323
  24. 2434
  25. 251
  26. 262
  27. 2714
  28. 2810
All Critical High Medium Low Exploited only Public exploit

79 results · Feed

  • Unscored —
    CVE-2013-1111

    The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implem…

  • Unscored —
    CVE-2013-1122

    Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remo…

  • Unscored —
    CVE-2013-1100

    The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attac…

  • Unscored —
    CVE-2013-1114 Public exploit EPSS 10%

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject …

  • Unscored —
    CVE-2013-1131

    Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a deni…

  • Unscored —
    CVE-2013-0636

    Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via …

  • Unscored —
    CVE-2013-0635

    Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-3280

    Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain s…

  • Medium —
    CVE-2012-6531

    Zend Framework XEE Vulnerability

    (1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Medium —
    CVE-2012-6532

    Zend Framework XEE Vulnerability

    (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definitio…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Critical 9.1
    CVE-2012-3363 Public exploit EPSS 49%

    Zend Framework XXE Vulnerability

    Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element …

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Unscored —
    CVE-2013-0208

    The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authe…

    nova Debian
  • Unscored —
    CVE-2013-0019 Public exploit EPSS 35%

    Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary c…

  • High 7.5
    CVE-2013-0029 EPSS 30%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2013-0025 Public exploit EPSS 56%

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2013-0024 EPSS 20%

    Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2013-0076

    The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 …

  • Unscored —
    CVE-2013-0030 EPSS 27%

    The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate …

  • Unscored —
    CVE-2013-0015 EPSS 16%

    Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allow…

  • Unscored —
    CVE-2013-0075 EPSS 70%

    The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and S…

  • Unscored —
    CVE-2013-0023 EPSS 19%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2013-0018 EPSS 20%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2013-0021 EPSS 21%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2013-0077 EPSS 30%

    Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows re…

  • Unscored —
    CVE-2013-0028 EPSS 20%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2013-0073 EPSS 30%

    The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properl…

  • Critical 9.0
    CVE-2013-0022 EPSS 17%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2013-0020 EPSS 28%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2013-0027 EPSS 20%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2013-0026 EPSS 20%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2013-1249

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

  • Unscored —
    CVE-2013-1280

    The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2…

  • Unscored —
    CVE-2013-1313 EPSS 23%

    Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allo…

  • High 7.0
    CVE-2013-1265

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

  • Unscored —
    CVE-2013-1261

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

  • Unscored —
    CVE-2013-1270

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

  • Unscored —
    CVE-2013-1263

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

  • Unscored —
    CVE-2013-1269

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

  • Unscored —
    CVE-2013-1276

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

  • Unscored —
    CVE-2013-1255

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W…