Skip to content
OpenAdvisories

Archive

February 2013

Vulnerabilities first published in this month (UTC), newest first.

← January 2013 2013 / February March 2013 →
  1. 11
  2. 251
  3. 319
  4. 41
  5. 510
  6. 615
  7. 72
  8. 821
  9. 9 
  10. 10 
  11. 111
  12. 1227
  13. 1379
  14. 149
  15. 1511
  16. 167
  17. 17 
  18. 1812
  19. 1918
  20. 2022
  21. 215
  22. 2210
  23. 2323
  24. 2434
  25. 251
  26. 262
  27. 2714
  28. 2810
All Critical High Medium Low Exploited only Public exploit

405 results · Feed

  • Unscored —
    CVE-2013-0703

    Cross-site scripting (XSS) vulnerability in imgboard.com imgboard before 1.22R6.1 u and 20xx before 2010u allows remote…

  • Unscored —
    CVE-2013-0705

    Directory traversal vulnerability in LSI 3ware Disk Manager (3DM) before 2 allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2013-1405

    VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.…

  • Unscored —
    CVE-2013-1123

    Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attack…

  • Unscored —
    CVE-2013-1128

    Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.200…

  • Unscored —
    CVE-2012-4712

    Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtai…

  • Unscored —
    CVE-2012-4701

    Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive fil…

  • Unscored —
    CVE-2012-4711 Public exploit EPSS 61%

    Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView…

  • Unscored —
    CVE-2012-4694

    Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SS…

  • Unscored —
    CVE-2013-0153

    The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the sam…

    xen Debian
  • Unscored —
    CVE-2013-1402 Public exploit

    DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain se…

  • Unscored —
    CVE-2012-5564

    android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files via a symlink attack …

    android-platform-system-core android-tools Debian Ubuntu
  • Unscored —
    CVE-2012-5634

    Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting …

    xen Debian
  • Unscored —
    CVE-2013-0702

    Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 3.5.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2013-0701

    SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary…

  • High 7.8
    CVE-2013-0640 Exploited Public exploit EPSS 87%

    Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2013-0641 Exploited EPSS 32%

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2012-5188

    Untrusted search path vulnerability in mora Downloader before 1.0.0.1 allows remote attackers to trigger the launch of …

  • Unscored —
    CVE-2013-1111

    The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implem…

  • Unscored —
    CVE-2013-1122

    Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remo…

  • Unscored —
    CVE-2013-1100

    The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attac…

  • Unscored —
    CVE-2013-1114 Public exploit EPSS 10%

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject …

  • Unscored —
    CVE-2013-1131

    Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a deni…

  • Unscored —
    CVE-2013-0636

    Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via …

  • Unscored —
    CVE-2013-0635

    Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2012-3280

    Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain s…

  • Medium —
    CVE-2012-6531

    Zend Framework XEE Vulnerability

    (1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Medium —
    CVE-2012-6532

    Zend Framework XEE Vulnerability

    (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via recursive or circular references in an XML entity definitio…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Critical 9.1
    CVE-2012-3363 Public exploit EPSS 49%

    Zend Framework XXE Vulnerability

    Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element …

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Unscored —
    CVE-2013-0208

    The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authe…

    nova Debian
  • Unscored —
    CVE-2013-0019 Public exploit EPSS 35%

    Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary c…

  • High 7.5
    CVE-2013-0029 EPSS 30%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2013-0025 Public exploit EPSS 56%

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2013-0024 EPSS 20%

    Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2013-0076

    The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 …

  • Unscored —
    CVE-2013-0030 EPSS 27%

    The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate …

  • Unscored —
    CVE-2013-0015 EPSS 16%

    Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allow…

  • Unscored —
    CVE-2013-0075 EPSS 70%

    The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and S…

  • Unscored —
    CVE-2013-0023 EPSS 19%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2013-0018 EPSS 20%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary co…