Skip to content
OpenAdvisories

Archive

17 September 2013

Vulnerabilities first published on this day (UTC), newest first.

← August 2013 2013 / September /17 October 2013 →
  1. 1 
  2. 2 
  3. 3 
  4. 43
  5. 517
  6. 617
  7. 7 
  8. 89
  9. 915
  10. 1014
  11. 1165
  12. 1223
  13. 1329
  14. 14 
  15. 15 
  16. 1642
  17. 1712
  18. 1820
  19. 1943
  20. 2020
  21. 21 
  22. 22 
  23. 2327
  24. 249
  25. 2522
  26. 264
  27. 2716
  28. 289
  29. 29 
  30. 3038
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2013-3615 Public exploit

    Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependen…

  • Unscored —
    CVE-2013-3613 Public exploit

    Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain acces…

  • Unscored —
    CVE-2013-3612 Public exploit EPSS 10%

    Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, whic…

  • Unscored —
    CVE-2013-3614 Public exploit

    Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to …

  • Unscored —
    CVE-2013-2788

    The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a d…

  • Unscored —
    CVE-2013-5709

    The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does …

  • Unscored —
    CVE-2013-5754

    The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the ro…

  • Medium —
    CVE-2013-4766

    Eucalyptus Unauthorized Access to CC/NC Log Files

    The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.

    org.jclouds.api:eucalyptus Maven
  • Unscored —
    CVE-2013-2296

    Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus,…

  • Unscored —
    CVE-2013-2297

    Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 24253…

  • Unscored —
    CVE-2013-5711

    Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin befo…

  • Unscored —
    CVE-2012-4067

    Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consump…