Skip to content
OpenAdvisories

Archive

April 2013

Vulnerabilities first published in this month (UTC), newest first.

← March 2013 2013 / April May 2013 →
  1. 14
  2. 26
  3. 319
  4. 414
  5. 58
  6. 6 
  7. 72
  8. 87
  9. 931
  10. 1015
  11. 1116
  12. 1210
  13. 132
  14. 14 
  15. 15 
  16. 1614
  17. 17152
  18. 1814
  19. 197
  20. 20 
  21. 213
  22. 2222
  23. 235
  24. 2416
  25. 2528
  26. 2610
  27. 274
  28. 283
  29. 2915
  30. 303
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.5
    CVE-2013-3239 Public exploit

    phpMyAdmin Remote Code Execution

    phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file a…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • High —
    CVE-2013-0175

    Improper Input Validation in multi_xml

    multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of serv…

    multi_xml RubyGems
  • High —
    CVE-2013-1933

    Karteek Docsplit vulnerable to OS Command Injection

    The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename.

    karteek-docsplit RubyGems
  • High 7.8
    CVE-2013-2596 Exploited Public exploit

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

    linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
    KEV Sep 15, 2022
  • High 7.0
    CVE-2013-1294

    Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows S…

  • High 7.4
    CVE-2013-1292

    Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, an…

  • High —
    CVE-2013-0285

    nori contains Improper Input Validation

    The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service …

    nori RubyGems
  • High —
    CVE-2013-1800

    crack does not properly restrict casts of string values

    The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leverag…

    crack ruby-crack Debian RubyGems
  • High —
    CVE-2013-1801

    HTTParty does not restrict casts of string values

    The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leve…

    httparty RubyGems
  • High —
    CVE-2013-1898

    Thumbshooter vulnerable to Code Injection

    lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

    thumbshooter RubyGems
  • High —
    CVE-2013-1802

    extlib does not properly restrict casts of string values

    The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by lever…

    extlib ruby-extlib Debian RubyGems