Skip to content
OpenAdvisories

Archive

September 2013

Vulnerabilities first published in this month (UTC), newest first.

← August 2013 2013 / September October 2013 →
  1. 1 
  2. 2 
  3. 3 
  4. 43
  5. 517
  6. 617
  7. 7 
  8. 89
  9. 915
  10. 1014
  11. 1165
  12. 1223
  13. 1329
  14. 14 
  15. 15 
  16. 1642
  17. 1712
  18. 1820
  19. 1943
  20. 2020
  21. 21 
  22. 22 
  23. 2327
  24. 249
  25. 2522
  26. 264
  27. 2716
  28. 289
  29. 29 
  30. 3038
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium —
    CVE-2013-4310

    Apache Struts2 Broken Access Control Vulnerability

    Apache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted action: prefix.

    org.apache.struts:struts2-core Maven
  • Medium —
    CVE-2013-4136

    insecure temporary directory usage in passenger

    ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.

    passenger passenger Debian RubyGems
  • Medium —
    CVE-2013-4378 Public exploit

    Improper Neutralization of Input During Web Page Generation in JavaMelody

    Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.

    net.bull.javamelody:javamelody-core Maven
  • Medium —
    CVE-2013-5960

    Missing Cryptographic Step in OWASP Enterprise Security API for Java

    The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers …

    org.owasp.esapi:esapi Maven
  • Medium —
    CVE-2013-4112

    Exposure of Sensitive Information to an Unauthorized Actor in JGroup

    The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

    libjgroups-java org.jgroups:jgroups Debian Maven
  • Medium —
    CVE-2013-5750

    FriendsOfSymfony FOSUserBundle denial of service via login form

    The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computatio…

    friendsofsymfony/user-bundle Packagist
  • Medium 5.3
    CVE-2013-4294

    OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token

    The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions…

    keystone keystone Debian PyPI
  • Medium 6.2
    CVE-2013-2217 Public exploit

    Improper Link Resolution Before File Access in Suds

    cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.

    suds suds-py3 suds Debian PyPI
  • Medium —
    CVE-2013-4766

    Eucalyptus Unauthorized Access to CC/NC Log Files

    The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.

    org.jclouds.api:eucalyptus Maven
  • Medium 6.2
    CVE-2013-4260

    Ansible Arbitrary File Overwrite Vulnerability

    lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.

    ansible PyPI
  • Medium 6.2
    CVE-2013-4183

    OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots

    The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.

    cinder cinder Debian PyPI
  • Medium 4.0
    CVE-2013-4259

    Ansible uses a socket with predictable filename in /tmp

    runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.

    ansible ansible Debian PyPI
  • Medium —
    CVE-2013-4202

    OpenStack Cinder Denial of Service using XML entities

    The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansio…

    cinder cinder Debian PyPI
  • Medium —
    CVE-2013-4179

    OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack

    The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is …

    nova nova Debian PyPI
  • Medium —
    CVE-2013-2256

    OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information

    OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and pos…

    nova nova Debian PyPI