Skip to content
OpenAdvisories

Archive

March 2013

Vulnerabilities first published in this month (UTC), newest first.

← February 2013 2013 / March April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.8
    CVE-2013-1609

    Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Sy…

  • High 7.6
    CVE-2013-0335

    Openstack nova: vnc proxy can connect to the wrong vm

    OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

    Red Hat Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.2 Debian PyPI
  • High —
    CVE-2013-1875

    Shell command injection in command_wrap

    command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

    command_wrap RubyGems
  • High —
    CVE-2013-2615

    fastreader Gem for Ruby URI Handling Arbitrary Command Injection

    lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

    fastreader RubyGems
  • High —
    CVE-2013-2617

    Curl Gem insufficient URL escaping command injection

    lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

    curl RubyGems
  • High —
    CVE-2013-2616

    MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection

    lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

    mini_magick RubyGems
  • High —
    CVE-2013-1655

    Puppet Improper Input Validation vulnerability

    Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to "serialized attributes."

    puppet puppet Debian RubyGems
  • High 7.4
    CVE-2013-1842

    TYPO3 SQL injection vulnerability in the Extbase Framework

    SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object …

    typo3/cms-core Packagist
  • High 7.8
    CVE-2013-0074 Exploited · Ransomware Public exploit EPSS 79%

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML ob…

    KEV May 25, 2022
  • High 8.8
    CVE-2013-0090 Public exploit EPSS 38%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • High 8.8
    CVE-2013-2551 Exploited · Ransomware Public exploit EPSS 74%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2013-0261

    Packstack: packstack: arbitrary file overwrite via symlink attack

    A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system …

    Red Hat OpenStack Folsom for RHEL 6 Red Hat OpenStack Platform 4 Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) Linux
  • High 7.5
    CVE-2010-5107 EPSS 17%

    The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and …

    openssh Debian