Skip to content
OpenAdvisories

Archive

20 March 2013

Vulnerabilities first published on this day (UTC), newest first.

← February 2013 2013 / March /20 April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High —
    CVE-2013-1875

    Shell command injection in command_wrap

    command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

    command_wrap RubyGems
  • High —
    CVE-2013-2615

    fastreader Gem for Ruby URI Handling Arbitrary Command Injection

    lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

    fastreader RubyGems
  • High —
    CVE-2013-2617

    Curl Gem insufficient URL escaping command injection

    lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

    curl RubyGems
  • High —
    CVE-2013-2616

    MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection

    lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

    mini_magick RubyGems
  • High —
    CVE-2013-1655

    Puppet Improper Input Validation vulnerability

    Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to "serialized attributes."

    puppet puppet Debian RubyGems
  • High 7.4
    CVE-2013-1842

    TYPO3 SQL injection vulnerability in the Extbase Framework

    SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object …

    typo3/cms-core Packagist