Skip to content
OpenAdvisories

Archive

July 2013

Vulnerabilities first published in this month (UTC), newest first.

← June 2013 2013 / July August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

486 results · Feed

  • Unscored —
    CVE-2013-4934

    The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x befor…

    wireshark Debian
  • Unscored —
    CVE-2013-4929

    The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and …

    wireshark Debian
  • Unscored —
    CVE-2013-4926

    epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not …

    wireshark Debian
  • Unscored —
    CVE-2013-4930

    The dissect_dvbci_tpdu_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before…

    wireshark Debian
  • Unscored —
    CVE-2013-4935

    The dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8…

    wireshark Debian
  • Unscored —
    CVE-2013-4928

    Integer signedness error in the dissect_headers function in epan/dissectors/packet-btobex.c in the Bluetooth OBEX disse…

    wireshark Debian
  • Unscored —
    CVE-2013-4933

    The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x befor…

    wireshark Debian
  • Unscored —
    CVE-2013-4920

    The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote …

    wireshark Debian
  • Unscored —
    CVE-2013-4936

    The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x bef…

    wireshark Debian
  • Unscored —
    CVE-2013-4922

    Double free vulnerability in the dissect_dcom_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in …

    wireshark Debian
  • Low —
    CVE-2011-1483

    JBossWS vulnerable to uncontrolled recursion

    wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Plat…

    org.jboss.ws:jbossws-common Maven
  • Unscored —
    CVE-2013-4851

    The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 a…

  • Unscored —
    CVE-2013-4163

    The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3…

    linux Debian
  • Unscored —
    CVE-2013-4162

    The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3…

    linux Debian
  • Unscored —
    CVE-2013-4129

    The bridge multicast implementation in the Linux kernel through 3.10.3 does not check whether a certain timer is armed …

  • Unscored —
    CVE-2013-4127

    Use-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the Linux kernel through 3…

    linux Debian
  • Unscored —
    CVE-2013-3033

    SQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1.2-TIV-TRC512-IF0015 a…

  • Unscored —
    CVE-2013-3580

    The TrustGo Antivirus & Mobile Security application before 1.3.6 for Android allows attackers to cause a denial of serv…

  • Unscored —
    CVE-2013-4854 EPSS 34%

    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and…

    bind9 Debian
  • Medium —
    CVE-2013-4940

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers…

    moodle/moodle yui npm Packagist
  • Medium —
    CVE-2013-4939

    Cross-Site Scripting in yui

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows rem…

    yui npm
  • Medium —
    CVE-2013-4941

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows…

    moodle/moodle yui npm Packagist
  • Medium —
    CVE-2013-4942

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, a…

    moodle/moodle yui npm Packagist
  • Unscored —
    CVE-2013-4938

    The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x …

  • Unscored —
    CVE-2013-2246

    mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x b…

  • Unscored —
    CVE-2013-2242

    mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, a…

  • Unscored —
    CVE-2013-2245

    rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.…

  • Unscored —
    CVE-2013-2244

    Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x befo…

  • Unscored —
    CVE-2013-2243

    mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.…

  • Unscored —
    CVE-2013-4798 Public exploit EPSS 67%

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4799

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4801

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4797

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4800 Public exploit EPSS 39%

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-2368

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknow…

  • Unscored —
    CVE-2013-2370 Public exploit EPSS 62%

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-2369

    Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown v…

  • Unscored —
    CVE-2013-4802

    Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allow…

  • Medium —
    CVE-2013-3300

    Lift Sensitive Information Disclosure

    The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (…

    net.liftweb:lift-webkit_2.9.0-1 net.liftweb:lift-webkit_2.7.7 net.liftweb:lift-webkit_2.8.1 net.liftweb:lift-webkit_2.9.0 Maven
  • Unscored —
    CVE-2013-3445

    The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote atta…