Skip to content
OpenAdvisories

Archive

30 September 2013

Vulnerabilities first published on this day (UTC), newest first.

← August 2013 2013 / September /30 October 2013 →
  1. 1 
  2. 2 
  3. 3 
  4. 43
  5. 517
  6. 617
  7. 7 
  8. 89
  9. 915
  10. 1014
  11. 1165
  12. 1223
  13. 1329
  14. 14 
  15. 15 
  16. 1642
  17. 1712
  18. 1820
  19. 1943
  20. 2020
  21. 21 
  22. 22 
  23. 2327
  24. 249
  25. 2522
  26. 264
  27. 2716
  28. 289
  29. 29 
  30. 3038
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2013-4314

    PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name

    The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certif…

    pyopenssl pyopenssl Debian PyPI
  • High —
    CVE-2013-4316

    Code injection in Apache Struts

    Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.

    org.apache.struts:struts2-core org.apache.struts:struts2-rest-plugin Maven