Skip to content
OpenAdvisories

Archive

9 July 2013

Vulnerabilities first published on this day (UTC), newest first.

10 results · Feed

  • Unscored —
    CVE-2013-1362 Public exploit EPSS 71%

    Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote at…

  • Unscored —
    CVE-2013-1950 Public exploit

    The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind…

  • Unscored —

    The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterpr…

  • Unscored —
    CVE-2013-4787 Public exploit EPSS 14%

    Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allow…

  • Unscored —

    The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypas…

  • Medium —

    OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image

    OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by creating an image with a large virtual size that does not cont…

  • Unscored —
    CVE-2013-2118 Public exploit

    SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "t…

  • Unscored —

    Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA ke…

  • Unscored —

    Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key…

  • Unscored —

    Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and a…