Skip to content
OpenAdvisories

Archive

June 2013

Vulnerabilities first published in this month (UTC), newest first.

← May 2013 2013 / June July 2013 →
  1. 15
  2. 2 
  3. 36
  4. 4 
  5. 534
  6. 615
  7. 714
  8. 812
  9. 910
  10. 1010
  11. 11 
  12. 1226
  13. 131
  14. 1414
  15. 1529
  16. 161
  17. 1721
  18. 1846
  19. 195
  20. 2015
  21. 2123
  22. 22 
  23. 23 
  24. 244
  25. 259
  26. 2622
  27. 2711
  28. 2814
  29. 2914
  30. 30 
All Critical High Medium Low Exploited only Public exploit

34 results · Clear filters · Feed

  • Unscored —
    CVE-2013-3651 Public exploit

    LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a cr…

  • Unscored —
    CVE-2013-4093 Public exploit

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to …

  • Unscored —
    CVE-2013-4094 Public exploit

    The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0…

  • Unscored —
    CVE-2013-4095 Public exploit

    plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 al…

  • Unscored —
    CVE-2013-4096 Public exploit

    ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrar…

  • Unscored —
    CVE-2013-4097 Public exploit

    ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information v…

  • Unscored —
    CVE-2013-4092 Public exploit

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent at…

  • Unscored —
    CVE-2013-4091 Public exploit

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autoco…

  • Unscored —
    CVE-2013-4098 Public exploit

    ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via…

  • Critical —
    CVE-2013-4660 Public exploit EPSS 17%

    Deserialization Code Execution in js-yaml

    The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.

    js-yaml npm
  • High 8.8
    CVE-2013-1690 Exploited Public exploit EPSS 69%

    Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2013-4614 Public exploit

    English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX…

  • Unscored —
    CVE-2013-4615 Public exploit EPSS 16%

    The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause…

  • Unscored —
    CVE-2013-4631 Public exploit

    Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of s…

  • Unscored —
    CVE-2013-4630 Public exploit

    Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allo…

  • Unscored —
    CVE-2012-4960 Public exploit

    The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 660…

  • Unscored —
    CVE-2012-6568 Public exploit

    Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGI…

  • Unscored —
    CVE-2013-1612 Public exploit

    Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12…

  • Unscored —
    CVE-2013-2460 Public exploit EPSS 70%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, an…

  • Unscored —
    CVE-2013-2470 Public exploit EPSS 23%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Critical 9.8
    CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

    KEV Mar 28, 2022
  • Unscored —
    CVE-2013-2472 Public exploit EPSS 23%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-3520 Public exploit EPSS 56%

    VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers …

  • Unscored —
    CVE-2013-3576 Public exploit EPSS 67%

    ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands v…

  • Unscored —
    CVE-2013-3575 Public exploit

    hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or requ…

  • Unscored —
    CVE-2013-3574 Public exploit

    Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4…

  • Unscored —
    CVE-2013-3120 Public exploit EPSS 32%

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2013-3111 Public exploit EPSS 34%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-4074 Public exploit EPSS 61%

    The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1…

    wireshark Debian
  • Unscored —
    CVE-2013-0143 Public exploit

    cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in …

  • Unscored —
    CVE-2013-2852 Public exploit

    Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43…

    linux Debian
  • Unscored —
    CVE-2013-2333 Public exploit EPSS 90%

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2013-0984 Public exploit EPSS 14%

    Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial …

  • Unscored —
    CVE-2013-0136 Public exploit EPSS 40%

    Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allo…