Skip to content
OpenAdvisories

Archive

March 2013

Vulnerabilities first published in this month (UTC), newest first.

← February 2013 2013 / March April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

33 results · Clear filters · Feed

  • Unscored —
    CVE-2013-1080 Public exploit EPSS 77%

    The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform …

  • Unscored —
    CVE-2012-6534 Public exploit

    Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text…

  • Unscored —
    CVE-2013-1861 Public exploit EPSS 19%

    MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69…

  • Unscored —
    CVE-2013-2690 Public exploit

    SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2012-5879 Public exploit

    An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows re…

  • Unscored —
    CVE-2012-6550 Public exploit

    Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web …

    db4o Debian
  • Unscored —
    CVE-2013-2501 Public exploit

    Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attacke…

  • Unscored —
    CVE-2013-1828 Public exploit

    The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size…

  • Unscored —
    CVE-2013-0126 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I rou…

  • Unscored —
    CVE-2013-0232 Public exploit EPSS 48%

    includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitr…

    zoneminder Debian
  • Unscored —
    CVE-2013-0332 Public exploit EPSS 10%

    Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrar…

    zoneminder Debian
  • Unscored —
    CVE-2013-2492 Public exploit EPSS 42%

    Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Wind…

  • Unscored —
    CVE-2013-2560 Public exploit

    Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote …

  • Medium 5.9
    CVE-2013-2566 Public exploit EPSS 84%

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for…

  • Medium —
    CVE-2013-1814 Public exploit EPSS 74%

    Apache Rave information disclosure vulnerability

    The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field…

    org.apache.rave:rave-core org.apache.rave:rave-portal-resources org.apache.rave:rave-web Maven
  • Unscored —
    CVE-2013-1469 Public exploit EPSS 56%

    Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbi…

  • High 7.8
    CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

    KEV May 25, 2022
  • High 8.8
    CVE-2013-0090 Public exploit EPSS 38%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2013-1468 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote at…

  • Unscored —
    CVE-2013-1081 Public exploit EPSS 68%

    Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote a…

  • Unscored —
    CVE-2013-1627 Public exploit

    Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 an…

  • Unscored —
    CVE-2013-2503 Public exploit

    Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server …

    privoxy Debian
  • High 8.8
    CVE-2013-2551 Exploited · Ransomware Public exploit EPSS 74%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2012-5202 Public exploit EPSS 21%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Net…

  • Unscored —
    CVE-2012-5204 Public exploit EPSS 18%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Net…

  • Unscored —
    CVE-2012-5201 Public exploit EPSS 64%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Net…

  • Unscored —
    CVE-2012-5203 Public exploit EPSS 21%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Net…

  • Unscored —
    CVE-2013-0249 Public exploit EPSS 22%

    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl …

    curl Debian
  • Unscored —
    CVE-2013-1491 Public exploit EPSS 16%

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Up…

  • Unscored —
    CVE-2013-1488 Public exploit EPSS 87%

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows rem…

  • Unscored —
    CVE-2013-0292 Public exploit

    The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender…

    dbus-glib Debian
  • Unscored —
    CVE-2013-1775 Public exploit

    sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypa…

    sudo Debian
  • Unscored —
    CVE-2013-1493 Public exploit EPSS 86%

    The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and…