Skip to content
OpenAdvisories

Archive

8 July 2013

Vulnerabilities first published on this day (UTC), newest first.

← June 2013 2013 / July /8 August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2013-4784 Public exploit EPSS 50%

    The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbi…

  • Unscored —
    CVE-2013-4782 Public exploit EPSS 26%

    The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands …

  • Unscored —
    CVE-2013-4785

    The web interface on the Dell iDRAC6 with firmware before 1.95 allows remote attackers to modify the CLP interface for …

  • Unscored —
    CVE-2013-4783

    The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, all…

  • Unscored —
    CVE-2013-4786 Public exploit EPSS 98%

    The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remot…

  • Unscored —
    CVE-2013-0236

    Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrar…

    wordpress Debian
  • Unscored —
    CVE-2013-0235 Public exploit EPSS 30%

    The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct…

    wordpress Debian
  • Unscored —
    CVE-2013-0237

    Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before…

    wordpress Debian
  • Unscored —
    CVE-2013-3273

    EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleart…

  • Unscored —
    CVE-2013-3272

    EMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for …

  • Unscored —
    CVE-2013-2205

    The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, whi…

    wordpress Debian
  • Unscored —
    CVE-2013-2204

    moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other produc…

    wordpress Debian
  • Unscored —
    CVE-2013-2201

    Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrar…

    wordpress Debian
  • Unscored —
    CVE-2013-2199

    The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecifie…

    wordpress Debian
  • Unscored —
    CVE-2013-2200

    WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to by…

    wordpress Debian
  • Unscored —
    CVE-2013-2202

    WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing a…

    wordpress Debian
  • Unscored —
    CVE-2013-2203

    WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive in…

    wordpress Debian
  • Unscored —
    CVE-2013-1613

    SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (…

  • Unscored —
    CVE-2013-1059

    net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointe…

    linux Debian
  • Unscored —
    CVE-2013-1414 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3…

  • Unscored —
    CVE-2013-1614

    Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Securi…

  • Unscored —
    CVE-2013-1615

    The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x…