Skip to content
OpenAdvisories

Archive

May 2013

Vulnerabilities first published in this month (UTC), newest first.

← April 2013 2013 / May June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

356 results · Feed

  • Unscored —
    CVE-2013-1884 Public exploit EPSS 51%

    The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial …

    subversion Debian
  • Unscored —
    CVE-2013-1847 Public exploit EPSS 51%

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote att…

    subversion Debian
  • Unscored —
    CVE-2013-1845

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote auth…

    subversion Debian
  • Unscored —
    CVE-2013-1846

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote auth…

    subversion Debian
  • Unscored —
    CVE-2013-1849

    The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote att…

    subversion Debian
  • Unscored —
    CVE-2013-2944

    strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers…

    strongswan Debian
  • Unscored —
    CVE-2012-0864

    Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-de…

  • Unscored —
    CVE-2012-4481

    The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method…

  • Medium —
    CVE-2012-5657

    Zend Framework XXE Vulnerability

    The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (…

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Unscored —
    CVE-2009-5029 Public exploit

    Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denia…

    glibc Debian
  • Unscored —
    CVE-2013-3266

    The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE…

  • Unscored —
    CVE-2009-5135 Public exploit

    The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a re…

  • Unscored —
    CVE-2013-1338 EPSS 21%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2013-2321

    Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attacker…

  • Unscored —
    CVE-2012-5222

    HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to obtain sensitive information via unspec…

  • Unscored —
    CVE-2013-0538

    Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim F…

  • Unscored —
    CVE-2013-0699 Public exploit

    The Galil RIO-47100 Pocket PLC allows remote attackers to cause a denial of service via a session that includes "repeat…

  • Unscored —
    CVE-2013-0140 Public exploit

    SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x …

  • Unscored —
    CVE-2013-0141

    Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remot…

  • Unscored —
    CVE-2013-0127

    IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML …

  • Unscored —
    CVE-2013-0666

    The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service (unh…

  • Unscored —
    CVE-2013-0673

    Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0…

  • Unscored —
    CVE-2013-1157

    Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) Java servlet container in Cisco Prime Centr…

  • Unscored —
    CVE-2013-1230

    Cisco Unified Communications Domain Manager allows remote attackers to cause a denial of service (CPU consumption) via …

  • Unscored —
    CVE-2013-1158

    Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hoste…

  • Unscored —
    CVE-2013-1156

    Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to r…

  • Unscored —
    CVE-2013-1160

    Cross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solu…

  • Unscored —
    CVE-2013-1159

    Cross-site scripting (XSS) vulnerability in the Netcool Impact (NCI) web menus in Cisco Prime Central for Hosted Collab…

  • Unscored —
    CVE-2013-1229

    TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite (TMS) on 64-bit platforms allows remo…

  • Unscored —
    CVE-2013-3079

    VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary progr…

  • Unscored —
    CVE-2013-3061

    The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcar…

  • Unscored —
    CVE-2013-3062

    The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Contro…

  • Unscored —
    CVE-2013-3107

    VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote a…

  • Unscored —
    CVE-2013-3080

    VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arb…

  • Unscored —
    CVE-2013-3063

    SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via …

  • Unscored —
    CVE-2012-4952

    Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different custome…