Skip to content
OpenAdvisories

Archive

25 May 2013

Vulnerabilities first published on this day (UTC), newest first.

← April 2013 2013 / May /25 June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2013-3560

    The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark…

    wireshark Debian
  • Unscored —
    CVE-2013-3559

    epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data…

    wireshark Debian
  • Unscored —
    CVE-2013-3555

    epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in cert…

    wireshark Debian
  • Unscored —
    CVE-2013-3556

    The fragment_add_seq_common function in epan/reassemble.c in the ASN.1 BER dissector in Wireshark before r48943 has an …

  • Unscored —
    CVE-2013-3558

    The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before…

    wireshark Debian
  • Unscored —
    CVE-2013-3562

    Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket …

    wireshark Debian
  • Unscored —
    CVE-2013-3561

    Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or…

  • Unscored —
    CVE-2013-3557

    The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.…

    wireshark Debian
  • Medium —
    CVE-2013-2082

    Moodle does not enforce capability requirements for reading blog comments

    Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request.

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-2083

    Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class

    The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filteri…

    moodle/moodle moodle Ubuntu Packagist
  • Unscored —
    CVE-2013-2079

    mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider …

  • Medium —
    CVE-2013-2080

    Moodle is vulnerable to Sensitive Information Disclosure

    The core_grade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and…

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-2081

    Moodle does not consider "don't send" attributes during hub registration

    Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data.

    moodle/moodle moodle Ubuntu Packagist