Archive

July 2013

Vulnerabilities first published in this month (UTC), newest first.

← June 2013 2013 / July August 2013 →

All Critical High Medium Low Exploited only Public exploit

486 results · Feed

Unscored —

CVE-2013-3724 Public exploit EPSS 14%

The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of ser…

Jul 31, 2013
Unscored —

CVE-2012-5460

Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.…

Jul 31, 2013
Unscored —

CVE-2013-3444

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1;…

Jul 31, 2013
Unscored —

CVE-2013-3443

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1…

Jul 31, 2013
Unscored —

CVE-2012-3913

The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service (WebUI outage) via crafted packet…

Jul 31, 2013
Unscored —

CVE-2013-4911

Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote att…

Jul 31, 2013
Unscored —

CVE-2013-4652

Unspecified vulnerability in the command-line management interface on Siemens Scalance W7xx devices with firmware befor…

Jul 31, 2013
Unscored —

CVE-2013-4651

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different cust…

Jul 31, 2013
Unscored —

CVE-2013-4912

Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect u…

Jul 31, 2013
Unscored —

CVE-2013-2994

IBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid session after unspecified in…

Jul 31, 2013
Unscored —

CVE-2013-1617

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1…

Jul 31, 2013
Unscored —

CVE-2013-1616 Public exploit EPSS 11%

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbi…

Jul 31, 2013
Unscored —

CVE-2013-4672

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which al…

Jul 31, 2013
Unscored —

CVE-2013-4670

Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) applian…

Jul 31, 2013
Unscored —

CVE-2013-4671

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance b…

Jul 31, 2013
Unscored —

CVE-2013-4673

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS auth…

Jul 31, 2013
Unscored —

CVE-2013-2993

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspec…

Jul 31, 2013
Unscored —

CVE-2013-0943

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging o…

Jul 31, 2013
Unscored —

CVE-2013-1968

Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS r…

subversion Debian

Jul 31, 2013
Unscored —

CVE-2013-4674

Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server…

Jul 31, 2013
Unscored —

CVE-2013-4156

Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or poss…

libreoffice Debian

Jul 31, 2013
Unscored —

CVE-2013-4131

The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote auth…

subversion Debian

Jul 31, 2013
Unscored —

CVE-2013-3697

Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003…

Jul 31, 2013
Unscored —

CVE-2013-3956 Public exploit

The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP…

Jul 31, 2013
Unscored —

CVE-2013-2630

Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject…

Jul 31, 2013
Unscored —

CVE-2013-2220

Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attac…

php-radius Debian

Jul 31, 2013
Unscored —

CVE-2013-2219

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attrib…

389-ds-base Debian

Jul 31, 2013
Unscored —

CVE-2013-2112

The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of se…

subversion Debian

Jul 31, 2013
Unscored —

CVE-2013-2189

Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or poss…

libreoffice Debian

Jul 31, 2013
Unscored —

CVE-2013-2113 Public exploit EPSS 21%

The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users …

Jul 31, 2013
Medium 6.1

CVE-2013-2209

Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown

Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name.

reviewboard PyPI

Jul 31, 2013
Unscored —

CVE-2013-2785

Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - …

Jul 31, 2013
High 7.5

CVE-2013-2056

Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of clients. This allows remote attackers to bypass the initial authentication proces…

Red Hat Red Hat Satellite 6 Red Hat Network Satellite Server v 5.4 Red Hat Network Satellite Server v 5.3

Jul 31, 2013
Unscored —

CVE-2013-2088 Public exploit EPSS 31%

contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit per…

subversion Debian

Jul 31, 2013
Unscored —

CVE-2013-2174

Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 al…

curl Debian

Jul 31, 2013
Unscored —

CVE-2013-2121 Public exploit EPSS 25%

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote…

Jul 31, 2013
Unscored —

CVE-2013-5019 Public exploit EPSS 64%

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resou…

Jul 31, 2013
Unscored —

CVE-2013-5020 Public exploit

Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to in…

Jul 31, 2013
Unscored —

CVE-2013-1377

Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory…

Jul 31, 2013
Unscored —

CVE-2013-4697

Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 throu…

Jul 31, 2013