Skip to content
OpenAdvisories

Archive

2 May 2013

Vulnerabilities first published on this day (UTC), newest first.

← April 2013 2013 / May /2 June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2013-0582

    Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 b…

  • Unscored —
    CVE-2013-0535

    Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2…

  • Unscored —
    CVE-2013-1091

    Stack-based buffer overflow in Novell iPrint Client before 5.90 allows remote attackers to execute arbitrary code via u…

  • Unscored —
    CVE-2011-4609

    The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of servic…

  • Medium 4.3
    CVE-2013-0305

    Django Data leakage via admin history log

    The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.

    python-django django Debian PyPI
  • Medium 5.3
    CVE-2013-0306

    Django is vulnerable to Denial of Service attack in formset

    The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a mod…

    python-django django Debian PyPI
  • Unscored —
    CVE-2013-1884 Public exploit EPSS 51%

    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial …

    subversion Debian
  • Unscored —
    CVE-2013-1847 Public exploit EPSS 51%

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote att…

    subversion Debian
  • Unscored —
    CVE-2013-1845

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote auth…

    subversion Debian
  • Unscored —
    CVE-2013-1846

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote auth…

    subversion Debian
  • Unscored —
    CVE-2013-1849

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote att…

    subversion Debian
  • Unscored —
    CVE-2013-2944

    strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers…

    strongswan Debian
  • Unscored —
    CVE-2012-0864

    Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-de…

  • Unscored —
    CVE-2012-4481

    The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method…

  • Medium —
    CVE-2012-5657

    Zend Framework XXE Vulnerability

    The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Unscored —
    CVE-2009-5029 Public exploit

    Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denia…

    glibc Debian
  • Unscored —
    CVE-2013-3266

    The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE…

  • Unscored —
    CVE-2009-5135 Public exploit

    The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a re…

  • Unscored —
    CVE-2013-1338 EPSS 21%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2013-2321

    Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attacker…

  • Unscored —
    CVE-2012-5222

    HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to obtain sensitive information via unspec…