Archive
May 2013
Vulnerabilities first published in this month (UTC), newest first.
356 results · Feed
-
Unscored —CVE-2013-1327 EPSS 21%
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafte…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —CVE-2013-1323 EPSS 21%
Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attac…
-
Unscored —CVE-2013-1301 EPSS 17%
Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document con…
-
Unscored —
dxgkrnl.sys (aka the DirectX graphics kernel subsystem) in the kernel-mode drivers in Microsoft Windows Vista SP2, Wind…
-
Unscored —
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2013-1321 EPSS 22%
Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote …
-
Unscored —CVE-2013-1319 EPSS 25%
Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote att…
-
Unscored —CVE-2013-1316 EPSS 22%
Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers…
-
Unscored —CVE-2013-1336 EPSS 19%
The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check s…
-
Unscored —CVE-2013-1328 EPSS 21%
Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Pu…
-
Unscored —CVE-2013-1337 EPSS 21%
Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (…
-
Unscored —CVE-2013-1305 EPSS 55%
HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2013-1302 EPSS 22%
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in m…
-
Unscored —CVE-2013-1297 EPSS 17%
Microsoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which allows remote attacke…
-
Unscored —CVE-2013-1307 EPSS 21%
Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code v…
-
High 8.4
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data …
KEV Sep 15, 2022 -
Unscored —
The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1…
-
Unscored —
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows loc…
-
Unscored —
Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to…
-
Unscored —
X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a ne…
-
Unscored —
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV …
-
Unscored —
Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessin…
-
Unscored —
Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYS…
-
Unscored —CVE-2013-3536 Public exploit
SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and e…
-
Unscored —CVE-2013-3537 Public exploit
Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2013-3535 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitr…
-
Unscored —CVE-2013-3538 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inje…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla! allows remote attacke…
-
Unscored —
pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a c…
-
Unscored —
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial …
-
Unscored —
The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage …
-
Unscored —
SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands …
-
Unscored —
Multiple SQL injection vulnerabilities in Virtual Access Monitor 3.10.17 and earlier allow attackers to execute arbitra…
-
Unscored —CVE-2013-3529 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wo…
-
Unscored —CVE-2013-3531 Public exploit
SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2013-3528 Public exploit
Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attac…
-
Unscored —CVE-2013-3527 Public exploit
Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2013-3530 Public exploit
SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers …
-
Unscored —
SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlie…