Skip to content
OpenAdvisories

Archive

August 2013

Vulnerabilities first published in this month (UTC), newest first.

← July 2013 2013 / August September 2013 →
  1. 16
  2. 2 
  3. 35
  4. 47
  5. 54
  6. 69
  7. 715
  8. 82
  9. 934
  10. 10 
  11. 11 
  12. 124
  13. 134
  14. 1424
  15. 156
  16. 1624
  17. 171
  18. 184
  19. 1923
  20. 2030
  21. 2121
  22. 226
  23. 2320
  24. 241
  25. 2524
  26. 26 
  27. 279
  28. 2834
  29. 2912
  30. 309
  31. 3119
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium —
    CVE-2013-2035

    Improper Control of Generation of Code in HawtJNI

    Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predic…

    org.fusesource.hawtjni:hawtjni-runtime hawtjni hawtjni Debian Ubuntu Maven
  • Medium —
    CVE-2013-4761

    Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service

    Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: th…

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2013-4155

    OpenStack Swift allows authenticated users to cause a denial of service

    OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.

    swift swift Debian PyPI
  • Medium —
    CVE-2013-2172

    Inefficient Algorithmic Complexity in Apache Santuario XML Security

    jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify …

    org.apache.santuario:xmlsec libxml-security-java Debian Maven
  • Medium —
    CVE-2013-2160 Public exploit EPSS 32%

    Missing XML Validation in Apache CXF

    The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) n…

    org.apache.cxf:cxf-rt-frontend-jaxrs Maven
  • Medium —
    CVE-2012-5575 Public exploit

    Inadequate Encryption Strength in Apache CXF

    Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force…

    org.apache.cxf:cxf-rt-transports-http Maven
  • Medium —
    CVE-2013-2022

    jplayer Cross Site Scripting vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.23 allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id parameters, a different…

    jplayer jplayer Ubuntu npm
  • Medium 6.2
    CVE-2013-1888

    Improper Link Resolution Before File Access in pip

    pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

    pip PyPI
  • Medium —
    CVE-2013-2132

    Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

    bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

    pymongo pymongo Debian PyPI