Skip to content
OpenAdvisories

Archive

16 August 2013

Vulnerabilities first published on this day (UTC), newest first.

← July 2013 2013 / August /16 September 2013 →
  1. 16
  2. 2 
  3. 35
  4. 47
  5. 54
  6. 69
  7. 715
  8. 82
  9. 934
  10. 10 
  11. 11 
  12. 124
  13. 134
  14. 1424
  15. 156
  16. 1624
  17. 171
  18. 184
  19. 1923
  20. 2030
  21. 2121
  22. 226
  23. 2320
  24. 241
  25. 2524
  26. 26 
  27. 279
  28. 2834
  29. 2912
  30. 309
  31. 3119
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2013-4114

    The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username …

    nagstamon Debian
  • Unscored —
    CVE-2013-3319 Public exploit EPSS 21%

    The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensiti…

  • Unscored —
    CVE-2013-5304

    SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to …

  • Unscored —
    CVE-2013-5307

    Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remo…

  • Unscored —
    CVE-2013-5308

    Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for …

  • Unscored —
    CVE-2013-5302

    SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2013-5301

    Directory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2013-5310

    SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to e…

  • Unscored —
    CVE-2013-5303

    Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote…

  • Unscored —
    CVE-2013-5305

    Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote …

  • Unscored —
    CVE-2013-5306

    SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote…

  • Unscored —
    CVE-2013-5309

    Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier,…

  • Unscored —
    CVE-2013-4128

    Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, whi…

  • Unscored —
    CVE-2013-4213

    Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API…

  • Medium 6.2
    CVE-2013-1888

    Improper Link Resolution Before File Access in pip

    pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

    pip PyPI
  • Unscored —
    CVE-2013-5097

    Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict …

  • Unscored —
    CVE-2013-5096

    Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement…

  • Unscored —
    CVE-2013-5095

    Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on …

  • Unscored —
    CVE-2013-0587

    Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers …

  • Unscored —
    CVE-2013-0585

    Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through F…

  • Unscored —
    CVE-2013-4698

    Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for diffe…

  • Unscored —
    CVE-2013-4007

    Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET befor…

  • Unscored —
    CVE-2013-3040

    IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating …

  • Unscored —
    CVE-2013-3034

    Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1…