Skip to content
OpenAdvisories

Archive

July 2013

Vulnerabilities first published in this month (UTC), newest first.

← June 2013 2013 / July August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

81 results · Clear filters · Feed

  • Unscored —
    CVE-2013-3763 Public exploit EPSS 60%

    Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows re…

  • High —
    CVE-2013-2134 Public exploit EPSS 70%

    Arbitrary code execution in Apache Struts 2

    Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2013-4117 Public exploit Scanner template EPSS 13%

    Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for…

  • Unscored —
    CVE-2013-2765 Public exploit EPSS 14%

    The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NU…

    modsecurity-apache Debian
  • Unscored —
    CVE-2013-2784 Public exploit

    Triangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an incorrect algorithm for b…

  • High —
    CVE-2013-1966 Public exploit EPSS 74%

    Arbitrary code execution in Apache Struts

    Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2013-1868 Public exploit EPSS 11%

    Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of se…

    vlc Debian
  • High —
    CVE-2013-1965 Public exploit Scanner template EPSS 94%

    Improper Control of Generation of Code in Apache Struts

    Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.

    org.apache.struts:struts2-core Maven
  • High 8.1
    CVE-2013-2115 Public exploit EPSS 75%

    Code injection in Apache Struts

    Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. NOTE: this issue is due to an incomplete fix for CVE-…

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • Unscored —
    CVE-2013-1300 Public exploit EPSS 12%

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2013-3161 Public exploit EPSS 25%

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —
    CVE-2013-3153 Public exploit EPSS 25%

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • High 8.8
    CVE-2013-3163 Exploited Public exploit EPSS 71%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

    KEV Mar 30, 2023
  • Unscored —
    CVE-2013-3162 Public exploit EPSS 25%

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-3145 Public exploit EPSS 25%

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2013-3150 Public exploit EPSS 25%

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2013-3147 Public exploit EPSS 25%

    Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2013-3174 Public exploit EPSS 32%

    DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and…

  • Unscored —
    CVE-2013-3164 Public exploit EPSS 24%

    Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2013-3151 Public exploit EPSS 23%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-3149 Public exploit EPSS 25%

    Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —
    CVE-2013-3166 Public exploit EPSS 16%

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject …

  • Unscored —
    CVE-2013-3146 Public exploit EPSS 24%

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2013-3115 Public exploit EPSS 25%

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-3152 Public exploit EPSS 24%

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2013-3144 Public exploit EPSS 23%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-3143 Public exploit EPSS 33%

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —
    CVE-2013-3148 Public exploit EPSS 25%

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-1362 Public exploit EPSS 71%

    Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote at…

    nagios-nrpe Debian
  • Unscored —
    CVE-2013-1950 Public exploit

    The svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind…

  • Unscored —
    CVE-2013-4787 Public exploit EPSS 14%

    Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allow…

  • Unscored —
    CVE-2013-2118 Public exploit

    SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "t…

    spip Debian
  • Unscored —
    CVE-2013-4784 Public exploit EPSS 50%

    The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbi…

  • Unscored —
    CVE-2013-4782 Public exploit EPSS 26%

    The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands …

  • Unscored —
    CVE-2013-4786 Public exploit EPSS 98%

    The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remot…

  • Unscored —
    CVE-2013-0235 Public exploit EPSS 30%

    The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct…

    wordpress Debian
  • Unscored —
    CVE-2013-1414 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3…

  • Unscored —
    CVE-2013-3299 Public exploit

    RealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of service (resource consumptio…

  • Unscored —
    CVE-2013-3563 Public exploit EPSS 49%

    Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a d…

  • Unscored —
    CVE-2013-2343 Public exploit EPSS 62%

    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attack…