Skip to content
OpenAdvisories

Archive

13 February 2013

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2013-1114 Public exploit EPSS 10%

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject …

  • Critical 9.1
    CVE-2012-3363 Public exploit EPSS 49%

    Zend Framework XXE Vulnerability

    Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element …

  • Unscored —
    CVE-2013-0019 Public exploit EPSS 35%

    Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2013-0025 Public exploit EPSS 56%

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a c…

  • High —
    CVE-2013-0269 Public exploit EPSS 14%

    JSON gem has Improper Input Validation vulnerability

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creatio…

  • Unscored —
    CVE-2013-0238 Public exploit

    The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which all…

  • Unscored —
    CVE-2013-1453 Public exploit

    plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unser…