Skip to content
OpenAdvisories

Archive

16 July 2013

Vulnerabilities first published on this day (UTC), newest first.

← June 2013 2013 / July /16 August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2013-0246

    The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to de…

  • Unscored —
    CVE-2013-0245

    The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not pr…

  • Unscored —
    CVE-2013-1925

    The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which al…

  • Unscored —
    CVE-2013-1908

    The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly res…

  • Unscored —
    CVE-2013-1907

    The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly res…

  • High —
    CVE-2013-2135 EPSS 14%

    Arbitrary code execution in Apache Struts 2

    Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted value that contains both "${}" and "%{}" sequences, which causes the OGNL code to be evaluated twice.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2013-2122

    The Edit Limit module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to comments, which allows rem…

  • High —
    CVE-2013-2134 Public exploit EPSS 70%

    Arbitrary code execution in Apache Struts 2

    Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2013-1935

    A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Lin…

  • Unscored —
    CVE-2013-1943

    The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocatio…

  • Unscored —
    CVE-2013-4117 Public exploit Scanner template EPSS 13%

    Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for…

  • Unscored —
    CVE-2013-3491

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote atta…

  • Unscored —
    CVE-2013-2188

    A certain Red Hat patch to the do_filp_open function in fs/namei.c in the kernel package before 2.6.32-358.11.1.el6 on …