Skip to content
OpenAdvisories

Archive

15 March 2013

Vulnerabilities first published on this day (UTC), newest first.

← February 2013 2013 / March /15 April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2013-2372

    Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.…

  • Unscored —
    CVE-2013-2373

    The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.…

  • Unscored —
    CVE-2013-2371

    The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and …

  • Unscored —
    CVE-2013-2492 Public exploit EPSS 42%

    Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Wind…

  • Unscored —
    CVE-2013-0967

    CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attac…

  • Unscored —
    CVE-2013-0960

    WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

    qtwebkit-source Ubuntu
  • Medium 6.8
    CVE-2013-0248

    Incorrect Default Permissions in Apache Commons FileUpload

    The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

    commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven
  • Unscored —
    CVE-2013-0970

    Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a …

  • Unscored —
    CVE-2013-0973

    Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, whi…

  • Unscored —
    CVE-2013-0969

    Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which a…

  • Unscored —
    CVE-2013-0961

    WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2013-0971

    Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2013-0976

    IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial…

  • Unscored —
    CVE-2013-0966

    The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle igno…

  • Unscored —
    CVE-2013-2560 Public exploit

    Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote …