Skip to content
OpenAdvisories

Archive

September 2013

Vulnerabilities first published in this month (UTC), newest first.

← August 2013 2013 / September October 2013 →
  1. 1 
  2. 2 
  3. 3 
  4. 43
  5. 517
  6. 617
  7. 7 
  8. 89
  9. 915
  10. 1014
  11. 1165
  12. 1223
  13. 1329
  14. 14 
  15. 15 
  16. 1642
  17. 1712
  18. 1820
  19. 1943
  20. 2020
  21. 21 
  22. 22 
  23. 2327
  24. 249
  25. 2522
  26. 264
  27. 2716
  28. 289
  29. 29 
  30. 3038
All Critical High Medium Low Exploited only Public exploit

454 results · Feed

  • Unscored —
    CVE-2013-5118 Public exploit

    Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attacke…

  • Unscored —
    CVE-2013-5373

    The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissi…

  • Unscored —
    CVE-2013-5634

    arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause…

    linux Debian
  • Unscored —
    CVE-2013-5933

    Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorol…

  • Unscored —
    CVE-2013-5935

    The Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 does not prope…

  • Unscored —
    CVE-2013-5200

    The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15…

  • Medium —
    CVE-2013-5750

    FriendsOfSymfony FOSUserBundle denial of service via login form

    The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computatio…

    friendsofsymfony/user-bundle Packagist
  • Unscored —
    CVE-2013-5934

    Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join oper…

  • Unscored —
    CVE-2012-4086

    A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execu…

  • Unscored —
    CVE-2013-3589

    Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithi…

  • Unscored —
    CVE-2013-3616

    Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attack…

  • Unscored —
    CVE-2013-5221

    The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe …

  • Unscored —
    CVE-2013-5911

    Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attacke…

  • Unscored —
    CVE-2012-4085

    The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified…

  • Unscored —
    CVE-2012-4094

    Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allow…

  • Unscored —
    CVE-2012-4078

    The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape s…

  • Unscored —
    CVE-2012-4089

    MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Base…

  • Unscored —
    CVE-2012-4087

    A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers …

  • High 7.5
    CVE-2013-1443

    Django Denial of Service Vulnerability in the authentication framework

    The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.

    python-django django Debian PyPI
  • Unscored —
    CVE-2013-1431

    The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server…

  • Medium 5.3
    CVE-2013-4294

    OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token

    The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions…

    keystone keystone Debian PyPI
  • Medium 6.2
    CVE-2013-2217 Public exploit

    Improper Link Resolution Before File Access in Suds

    cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.

    suds-py3 suds suds Debian PyPI
  • Unscored —
    CVE-2013-5931

    SQL injection vulnerability in property_listings_detail.php in Real Estate PHP Script allows remote attackers to execut…

  • Unscored —
    CVE-2013-5666

    The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does n…

  • Unscored —
    CVE-2013-5119

    Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the…

  • Unscored —
    CVE-2013-5932

    Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and a…

  • Unscored —
    CVE-2013-5710

    The nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users wit…

  • Unscored —
    CVE-2013-5930

    Cross-site scripting (XSS) vulnerability in search_residential.php in Real Estate PHP Script allows remote attackers to…

  • Unscored —
    CVE-2012-2624

    Stack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of service (crash) via a crafte…

  • Unscored —
    CVE-2012-5338

    Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduc…

  • Unscored —
    CVE-2013-4820

    Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Sm…

  • Unscored —
    CVE-2013-4325

    The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not prope…

    hplip Debian
  • Unscored —
    CVE-2013-4819

    Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain s…

  • Unscored —
    CVE-2013-4817

    Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive i…

  • Unscored —
    CVE-2013-4814

    Cross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-0…

  • Unscored —
    CVE-2013-4821

    Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to caus…

  • Unscored —
    CVE-2013-4818

    Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Sm…

  • Unscored —
    CVE-2013-5502

    The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows r…

  • Unscored —
    CVE-2013-5490

    Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via a…

  • Unscored —
    CVE-2013-5917 Public exploit

    SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers …