Skip to content
OpenAdvisories

Archive

26 July 2013

Vulnerabilities first published on this day (UTC), newest first.

← June 2013 2013 / July /26 August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2013-4854 EPSS 34%

    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and…

    bind9 Debian
  • Medium —
    CVE-2013-4940

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers…

    moodle/moodle yui npm Packagist
  • Medium —
    CVE-2013-4939

    Cross-Site Scripting in yui

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows rem…

    yui npm
  • Medium —
    CVE-2013-4941

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows…

    moodle/moodle yui npm Packagist
  • Medium —
    CVE-2013-4942

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, a…

    moodle/moodle yui npm Packagist
  • Unscored —
    CVE-2013-4938

    The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x …

  • Unscored —
    CVE-2013-2246

    mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x b…

  • Unscored —
    CVE-2013-2242

    mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, a…

  • Unscored —
    CVE-2013-2245

    rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.…

  • Unscored —
    CVE-2013-2244

    Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x befo…

  • Unscored —
    CVE-2013-2243

    mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.…

  • Unscored —
    CVE-2013-4798 Public exploit EPSS 67%

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4799

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4801

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4797

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4800 Public exploit EPSS 39%

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-2368

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknow…

  • Unscored —
    CVE-2013-2370 Public exploit EPSS 62%

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-2369

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4802

    Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allow…

  • Medium —
    CVE-2013-3300

    Lift Sensitive Information Disclosure

    The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (…

    net.liftweb:lift-webkit_2.9.0-1 net.liftweb:lift-webkit_2.7.7 net.liftweb:lift-webkit_2.8.1 net.liftweb:lift-webkit_2.9.0 Maven
  • Unscored —
    CVE-2013-3445

    The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote atta…

  • Unscored —
    CVE-2013-4015 Public exploit

    Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected M…

  • Unscored —
    CVE-2013-4937

    Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT…