Skip to content
OpenAdvisories

Archive

March 2013

Vulnerabilities first published in this month (UTC), newest first.

← February 2013 2013 / March April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low —
    CVE-2013-1833

    Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module

    Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted fi…

    moodle/moodle moodle Ubuntu Packagist
  • Low —
    CVE-2013-1835

    Moodle's login_as feature leaks information from external repositories

    Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature.

    moodle/moodle moodle Ubuntu Packagist
  • Low —
    CVE-2013-1844

    Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    matomo/matomo piwik/piwik Packagist
  • Low —
    CVE-2013-0162

    ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name

    The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

    ruby-parser ruby_parser Ubuntu RubyGems