Skip to content
OpenAdvisories

Archive

18 July 2013

Vulnerabilities first published on this day (UTC), newest first.

← June 2013 2013 / July /18 August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

40 results · Feed

  • Unscored —
    CVE-2013-0559

    Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and c…

  • Unscored —
    CVE-2013-3274

    EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly d…

  • Unscored —
    CVE-2013-3436

    The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanis…

  • Unscored —
    CVE-2013-3275

    EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly r…

  • Unscored —
    CVE-2013-4011 Public exploit

    Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, …

  • Unscored —
    CVE-2013-4878 Public exploit EPSS 33%

    The default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business Panel 10.x on UNIX, has …

  • Unscored —
    CVE-2012-6349

    Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote…

  • Unscored —
    CVE-2013-1606 Public exploit EPSS 23%

    Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allo…

  • Unscored —
    CVE-2013-4781

    core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) befo…

  • Unscored —
    CVE-2013-4780

    core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) befo…

  • Unscored —
    CVE-2013-4877

    The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier fo…

  • Unscored —
    CVE-2013-4873

    The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensiti…

  • Unscored —
    CVE-2013-4778

    core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) befo…

  • Unscored —
    CVE-2013-4876

    The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for…

  • Unscored —
    CVE-2013-4668

    Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when l…

    file-roller Debian
  • Unscored —
    CVE-2013-4875

    The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass …

  • Unscored —
    CVE-2013-4874

    The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain…

  • Unscored —
    CVE-2013-4872

    Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attack…

  • Unscored —
    CVE-2013-4779

    Cross-site scripting (XSS) vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and …

  • Unscored —
    CVE-2013-3665

    Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allo…

  • Medium —
    CVE-2013-1879

    Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

    Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a message."

    org.apache.activemq:activemq-client Maven
  • Unscored —
    CVE-2013-1955

    Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x an…

  • Unscored —
    CVE-2013-4870

    SQL injection vulnerability in the News Search (news_search) extension 0.1.0 for TYPO3 allows remote attackers to execu…

  • Unscored —
    CVE-2013-4871

    Cross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo) extension before 5.0.1 for TY…

  • Unscored —
    CVE-2013-3656

    Cybozu Office 9.1.0 and earlier does not properly manage sessions, which allows remote attackers to bypass authenticati…

  • Unscored —
    CVE-2013-2070 EPSS 12%

    http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with…

    nginx Debian
  • Unscored —
    CVE-2013-2028 Public exploit EPSS 87%

    The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to ca…

  • Critical 9.8
    CVE-2013-2251 Exploited Public exploit Scanner template EPSS 100%

    Code injection in Apache Struts

    Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.

    org.apache.struts:struts2-core Maven
    KEV Mar 25, 2022
  • Medium —
    CVE-2013-2248 Public exploit Scanner template EPSS 95%

    Open redirect in Apache Struts

    Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a parameter using the (1) redirect: or (2) redirectAction: prefix.

    org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2013-1218

    Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remot…

  • Unscored —
    CVE-2013-1243

    The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules be…

  • Unscored —
    CVE-2013-4869

    Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service in Cisco Unified Presen…

  • Unscored —
    CVE-2013-3434

    Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local …

  • Unscored —
    CVE-2013-3404

    SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows remote attacke…

  • Unscored —
    CVE-2013-3410

    Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a …

  • Unscored —
    CVE-2013-3403

    Multiple untrusted search path vulnerabilities in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) al…

  • Unscored —
    CVE-2013-3411

    The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 mo…

  • Unscored —
    CVE-2013-3412

    SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenti…

  • Unscored —
    CVE-2013-3402

    An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticate…

  • Unscored —
    CVE-2013-3433

    Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local …