Skip to content
OpenAdvisories

Archive

13 May 2013

Vulnerabilities first published on this day (UTC), newest first.

← April 2013 2013 / May /13 June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2013-1897

    The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1…

    389-ds-base Debian
  • Unscored —
    CVE-2013-1922

    qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows loc…

    qemu Debian
  • Unscored —
    CVE-2013-1919

    Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to…

    xen Debian
  • Unscored —
    CVE-2013-1940

    X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a ne…

    xorg-server Debian
  • Unscored —
    CVE-2013-1918

    Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV …

    xen Debian
  • Unscored —
    CVE-2013-1952

    Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessin…

    xen Debian
  • Unscored —
    CVE-2013-1917

    Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYS…

    xen Debian
  • Unscored —
    CVE-2013-3536 Public exploit

    SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and e…

  • Unscored —
    CVE-2013-3537 Public exploit

    Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2013-3535 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2013-3538 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inje…

  • Unscored —
    CVE-2013-3534

    Cross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla! allows remote attacke…

  • Unscored —
    CVE-2013-2021

    pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a c…

    clamav Debian
  • Unscored —
    CVE-2013-2020

    Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial …

    clamav Debian
  • Unscored —
    CVE-2013-1136

    The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage …