Skip to content
OpenAdvisories

Archive

27 September 2013

Vulnerabilities first published on this day (UTC), newest first.

← August 2013 2013 / September /27 October 2013 →
  1. 1 
  2. 2 
  3. 3 
  4. 43
  5. 517
  6. 617
  7. 7 
  8. 89
  9. 915
  10. 1014
  11. 1165
  12. 1223
  13. 1329
  14. 14 
  15. 15 
  16. 1642
  17. 1712
  18. 1820
  19. 1943
  20. 2020
  21. 21 
  22. 22 
  23. 2327
  24. 249
  25. 2522
  26. 264
  27. 2716
  28. 289
  29. 29 
  30. 3038
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2013-5403

    Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to …

  • Unscored —
    CVE-2013-5498

    The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisc…

  • Unscored —
    CVE-2012-1313

    The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain priv…

  • Critical 9.0
    CVE-2013-5942

    graphite-web is vulnerable to Remote Code Execution

    Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/datalib.py, and (4) whitelist/views.py,…

    graphite-web graphite-web Debian PyPI
  • Unscored —
    CVE-2013-5478

    Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a…

  • Unscored —
    CVE-2013-5474

    Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.…

  • Critical 9.0
    CVE-2013-5093 Public exploit EPSS 39%

    graphite-web is vulnerable to Remote Code Execution via renderLocalView function

    The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.

    graphite-web graphite-web Debian PyPI
  • Unscored —
    CVE-2013-5473

    Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows rem…

  • Unscored —
    CVE-2013-5476

    The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is …

  • Unscored —
    CVE-2013-5479

    The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to c…

  • Unscored —
    CVE-2013-5480

    The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to c…

  • Unscored —
    CVE-2013-5472

    The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not prope…

  • Unscored —
    CVE-2013-5475

    Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denia…

  • Unscored —
    CVE-2013-5481

    The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a d…

  • Unscored —
    CVE-2013-5477

    The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows rem…

  • Unscored —
    CVE-2013-5943

    Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrar…

    graphite-web graphite-web Debian PyPI