Skip to content
OpenAdvisories

Archive

July 2013

Vulnerabilities first published in this month (UTC), newest first.

← June 2013 2013 / July August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

486 results · Feed

  • Unscored —
    CVE-2013-4015 Public exploit

    Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected M…

  • Unscored —
    CVE-2013-4937

    Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT…

  • Unscored —
    CVE-2013-3430 Public exploit

    Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive,…

  • Unscored —
    CVE-2013-3431 Public exploit

    Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages…

  • Unscored —
    CVE-2013-3414

    Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) de…

  • Unscored —
    CVE-2013-3429 Public exploit EPSS 10%

    Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attack…

  • Unscored —
    CVE-2013-3979

    Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\Content\Help\ in the Web Client in IBM Cog…

  • Unscored —
    CVE-2013-3999

    Cross-site scripting (XSS) vulnerability in IBM Social Media Analytics 1.2 before FP1 allows remote attackers to inject…

  • Unscored —
    CVE-2012-6578

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" …

    request-tracker4 Debian
  • Unscored —
    CVE-2012-6581

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers …

    request-tracker4 Debian
  • Unscored —
    CVE-2012-6579

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers …

    request-tracker4 Debian
  • Unscored —
    CVE-2012-6580

    Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the…

    request-tracker4 Debian
  • Unscored —
    CVE-2013-3438

    The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intend…

  • Unscored —
    CVE-2013-3439

    Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2013-3440

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Man…

  • Unscored —
    CVE-2013-2249 EPSS 15%

    mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations fo…

    apache2 Debian
  • High —
    CVE-2013-4002 Public exploit EPSS 25%

    Missing XML Validation in Apache Xerces2

    XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u6…

    xerces:xercesImpl Maven
  • Unscored —
    CVE-2013-3007

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 a…

  • Unscored —
    CVE-2013-3008

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to a…

  • Unscored —
    CVE-2013-3011

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.…

  • Unscored —
    CVE-2013-3006

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to a…

  • Unscored —
    CVE-2013-3010

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 a…

  • Unscored —
    CVE-2013-3009

    The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before…

  • Unscored —
    CVE-2013-3012

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.…

  • Unscored —
    CVE-2013-4890 Public exploit

    The DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial of service (daemon cra…

  • Unscored —
    CVE-2013-3441

    Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device cras…

  • High —
    CVE-2013-2165 Public exploit EPSS 13%

    Remote code execution due to insecure deserialization

    ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat…

    org.richfaces:richfaces Maven
  • Unscored —
    CVE-2013-3435

    The Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of service (networking outage) …

  • Unscored —
    CVE-2013-3437

    SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticat…

  • Unscored —
    CVE-2013-4882 Public exploit

    Multiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePolicy Orchestrator (…

  • Unscored —
    CVE-2013-4883 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the ePO Exten…

  • Unscored —
    CVE-2013-2361

    Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to…

  • Unscored —
    CVE-2013-2360

    Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to caus…

  • Unscored —
    CVE-2013-2357

    Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to caus…

  • Unscored —
    CVE-2013-2358

    Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to caus…

  • Unscored —
    CVE-2013-2365

    HP Database and Middleware Automation (DMA) 10.x before 10.10, when SSL is used, allows remote attackers to obtain sens…

  • Unscored —
    CVE-2013-2363

    HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecifie…

  • Unscored —
    CVE-2013-2364

    Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticate…

  • Unscored —
    CVE-2013-2359

    Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to caus…

  • Unscored —
    CVE-2013-2356

    HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecifie…