Skip to content
OpenAdvisories

Archive

13 February 2013

Vulnerabilities first published on this day (UTC), newest first.

← January 2013 2013 / February /13 March 2013 →
  1. 11
  2. 251
  3. 319
  4. 41
  5. 510
  6. 615
  7. 72
  8. 821
  9. 9 
  10. 10 
  11. 111
  12. 1227
  13. 1379
  14. 149
  15. 1511
  16. 167
  17. 17 
  18. 1812
  19. 1918
  20. 2022
  21. 215
  22. 2210
  23. 2323
  24. 2434
  25. 251
  26. 262
  27. 2714
  28. 2810
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2012-6531

    Zend Framework XEE Vulnerability

    (1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Medium —
    CVE-2012-6532

    Zend Framework XEE Vulnerability

    (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definitio…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Medium —
    CVE-2013-0276

    ActiveRecord vulnerable to modification of protected model attributes

    ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.

    rails activerecord Debian RubyGems