Skip to content
OpenAdvisories

Archive

30 September 2013

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2013-2218 Public exploit

    Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1…

  • Unscored —
    CVE-2013-5697 Public exploit

    SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote a…

  • Unscored —
    CVE-2013-4362 Public exploit

    WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (…

  • Unscored —
    CVE-2013-5693 Public exploit

    Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2013-5692 Public exploit

    Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include an…

  • Medium —
    CVE-2013-4378 Public exploit

    Improper Neutralization of Input During Web Page Generation in JavaMelody

    Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.

  • Unscored —
    CVE-2013-5961 Public exploit

    Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attacker…

  • Unscored —
    CVE-2013-5962 Public exploit EPSS 15%

    Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 …