Skip to content
OpenAdvisories

Archive

19 August 2013

Vulnerabilities first published on this day (UTC), newest first.

← July 2013 2013 / August /19 September 2013 →
  1. 16
  2. 2 
  3. 35
  4. 47
  5. 54
  6. 69
  7. 715
  8. 82
  9. 934
  10. 10 
  11. 11 
  12. 124
  13. 134
  14. 1424
  15. 156
  16. 1624
  17. 171
  18. 184
  19. 1923
  20. 2030
  21. 2121
  22. 226
  23. 2320
  24. 241
  25. 2524
  26. 26 
  27. 279
  28. 2834
  29. 2912
  30. 309
  31. 3119
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium —
    CVE-2013-2160 Public exploit EPSS 32%

    Missing XML Validation in Apache CXF

    The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) n…

    org.apache.cxf:cxf-rt-frontend-jaxrs Maven
  • Medium —
    CVE-2012-5575 Public exploit

    Inadequate Encryption Strength in Apache CXF

    Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force…

    org.apache.cxf:cxf-rt-transports-http Maven
  • Unscored —
    CVE-2013-5314 Public exploit

    Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allow…

  • Unscored —
    CVE-2013-5312 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2013-5311 Public exploit

    Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2013-4881 Public exploit

    Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earli…