Skip to content
OpenAdvisories

Archive

13 February 2013

Vulnerabilities first published on this day (UTC), newest first.

← January 2013 2013 / February /13 March 2013 →
  1. 11
  2. 251
  3. 319
  4. 41
  5. 510
  6. 615
  7. 72
  8. 821
  9. 9 
  10. 10 
  11. 111
  12. 1227
  13. 1379
  14. 149
  15. 1511
  16. 167
  17. 17 
  18. 1812
  19. 1918
  20. 2022
  21. 215
  22. 2210
  23. 2323
  24. 2434
  25. 251
  26. 262
  27. 2714
  28. 2810
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2012-3363 Public exploit EPSS 49%

    Zend Framework XXE Vulnerability

    Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element …

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Critical 9.0
    CVE-2013-0022 EPSS 17%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Critical —
    CVE-2013-0277

    Active Record contains deserialization of arbitrary YAML

    ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.

    rails activerecord Debian RubyGems