Skip to content
OpenAdvisories

Archive

September 2013

Vulnerabilities first published in this month (UTC), newest first.

← August 2013 2013 / September October 2013 →
  1. 1 
  2. 2 
  3. 3 
  4. 43
  5. 517
  6. 617
  7. 7 
  8. 89
  9. 915
  10. 1014
  11. 1165
  12. 1223
  13. 1329
  14. 14 
  15. 15 
  16. 1642
  17. 1712
  18. 1820
  19. 1943
  20. 2020
  21. 21 
  22. 22 
  23. 2327
  24. 249
  25. 2522
  26. 264
  27. 2716
  28. 289
  29. 29 
  30. 3038
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2013-4314

    PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name

    The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certif…

    pyopenssl pyopenssl Debian PyPI
  • High —
    CVE-2013-4316

    Code injection in Apache Struts

    Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.

    org.apache.struts:struts2-core org.apache.struts:struts2-rest-plugin Maven
  • High 7.5
    CVE-2013-1443

    Django Denial of Service Vulnerability in the authentication framework

    The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.

    python-django django Debian PyPI
  • High 8.8
    CVE-2013-3893 Exploited Public exploit EPSS 88%

    Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throu…

    KEV Aug 12, 2025
  • High 8.6
    CVE-2013-4315

    Django Directory Traversal via ssi template tag

    Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_ROOTS setting followed by a .. (dot dot) in a ssi template t…

    python-django django Debian PyPI
  • High 8.1
    CVE-2013-0810 Public exploit EPSS 60%

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote …

  • High 7.8
    CVE-2013-1342

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …