Skip to content
OpenAdvisories

Archive

May 2013

Vulnerabilities first published in this month (UTC), newest first.

← April 2013 2013 / May June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

51 results · Clear filters · Feed

  • Unscored —
    CVE-2013-3721 Public exploit

    SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL comman…

  • High 7.8
    CVE-2013-3660 Exploited Public exploit EPSS 39%

    The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Wind…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2013-3661 Public exploit

    The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis…

  • Unscored —
    CVE-2013-1017 Public exploit EPSS 33%

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2011-4520 Public exploit

    Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a…

  • Unscored —
    CVE-2011-4518 Public exploit EPSS 26%

    Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows rem…

  • Unscored —
    CVE-2011-4519 Public exploit

    Stack-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause …

  • Unscored —
    CVE-2012-6554 Public exploit EPSS 17%

    functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execut…

  • Unscored —
    CVE-2012-6559 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2012-6556 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote …

  • Unscored —
    CVE-2012-6555 Public exploit

    Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to …

  • Unscored —
    CVE-2012-6557 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attacke…

  • Unscored —
    CVE-2012-6560 Public exploit

    SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2013-2842 Public exploit EPSS 12%

    Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service …

  • Low —
    CVE-2013-2006 Public exploit

    OpenStack Keystone Sensitive information disclosure via log files

    OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

    keystone keystone Debian PyPI
  • Unscored —
    CVE-2013-0145 Public exploit

    Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service (daemon cras…

  • Unscored —
    CVE-2013-1670 Public exploit EPSS 12%

    The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderb…

  • Unscored —
    CVE-2013-2730 Public exploit EPSS 79%

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack…

  • High 8.8
    CVE-2013-2729 Exploited Public exploit EPSS 67%

    Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attac…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2013-1306 Public exploit EPSS 33%

    Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2013-1311 Public exploit EPSS 21%

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2013-1309 Public exploit EPSS 39%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • High 8.4
    CVE-2013-2094 Exploited Public exploit EPSS 48%

    The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data …

    linux Debian
    KEV Sep 15, 2022
  • Unscored —
    CVE-2013-3536 Public exploit

    SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and e…

  • Unscored —
    CVE-2013-3537 Public exploit

    Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2013-3535 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2013-3538 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inje…

  • Unscored —
    CVE-2013-3529 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wo…

  • Unscored —
    CVE-2013-3531 Public exploit

    SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2013-3528 Public exploit

    Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attac…

  • Unscored —
    CVE-2013-3527 Public exploit

    Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2013-3530 Public exploit

    SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers …

  • Unscored —
    CVE-2013-3522 Public exploit EPSS 27%

    SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlie…

  • Unscored —
    CVE-2013-3532 Public exploit

    SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remot…

  • Unscored —
    CVE-2013-3525 Public exploit

    SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2013-3524 Public exploit

    SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remo…

  • Unscored —
    CVE-2013-3526 Public exploit EPSS 14%

    Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earl…

  • Unscored —
    CVE-2013-0946 Public exploit EPSS 29%

    Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to e…

  • Unscored —
    CVE-2013-2977 Public exploit

    Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5…

  • Unscored —
    CVE-2013-3336 Public exploit EPSS 74%

    Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files…