Skip to content
OpenAdvisories

Archive

May 2013

Vulnerabilities first published in this month (UTC), newest first.

← April 2013 2013 / May June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

356 results · Feed

  • Unscored —
    CVE-2013-3557

    The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.…

    wireshark Debian
  • Medium —
    CVE-2013-2082

    Moodle does not enforce capability requirements for reading blog comments

    Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request.

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-2083

    Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class

    The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filteri…

    moodle/moodle moodle Ubuntu Packagist
  • Unscored —
    CVE-2013-2079

    mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider …

  • Medium —
    CVE-2013-2080

    Moodle is vulnerable to Sensitive Information Disclosure

    The core_grade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and…

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-2081

    Moodle does not consider "don't send" attributes during hub registration

    Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data.

    moodle/moodle moodle Ubuntu Packagist
  • High 7.8
    CVE-2013-3660 Exploited Public exploit EPSS 39%

    The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Wind…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2013-3633

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for …

  • Unscored —
    CVE-2013-3661 Public exploit

    The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis…

  • Unscored —
    CVE-2013-3634

    A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for …

  • Unscored —
    CVE-2013-0989

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-0988

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-0986

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-0987

    Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —
    CVE-2013-1017 Public exploit EPSS 33%

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-1022

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-1015

    Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —
    CVE-2013-1018

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-1019

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-1020

    Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —
    CVE-2013-1016

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2013-1021

    Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of …

  • Unscored —
    CVE-2011-4520 Public exploit

    Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a…

  • Unscored —
    CVE-2011-4518 Public exploit EPSS 26%

    Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows rem…

  • Unscored —
    CVE-2011-4519 Public exploit

    Stack-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause …

  • Unscored —
    CVE-2012-4697

    TURCK BL20 Programmable Gateway and BL67 Programmable Gateway have hardcoded accounts, which allows remote attackers to…

  • Unscored —
    CVE-2012-6561

    Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject…

  • Unscored —
    CVE-2012-6554 Public exploit EPSS 17%

    functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execut…

  • Unscored —
    CVE-2012-6559 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2012-6556 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote …

  • Unscored —
    CVE-2012-6553

    Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable…

  • Unscored —
    CVE-2012-6562

    engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows re…

  • Unscored —
    CVE-2012-6563

    engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows…

  • Unscored —
    CVE-2012-6555 Public exploit

    Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to …

  • Unscored —
    CVE-2012-6557 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attacke…

  • Unscored —
    CVE-2012-6560 Public exploit

    SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2012-6558

    Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the…

  • Unscored —
    CVE-2013-1204

    Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service (memory consumptio…

  • Unscored —
    CVE-2013-2781

    Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause …

  • Unscored —
    CVE-2013-0942

    Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Informat…