Archive
September 2013
Vulnerabilities first published in this month (UTC), newest first.
454 results · Feed
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and…
-
Unscored —
Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows at…
-
Unscored —
Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Fi…
-
Unscored —
The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunde…
-
Unscored —
The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remo…
-
Unscored —
Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox…
-
Unscored —
The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key m…
-
High 8.8
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throu…
KEV Aug 12, 2025 -
Unscored —CVE-2013-3615 Public exploit
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependen…
-
Unscored —CVE-2013-3613 Public exploit
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain acces…
-
Unscored —
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, whic…
-
Unscored —CVE-2013-3614 Public exploit
Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to …
-
Unscored —
The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a d…
-
Unscored —
The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does …
-
Unscored —
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the ro…
-
Medium —
Eucalyptus Unauthorized Access to CC/NC Log Files
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component.
-
Unscored —
Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus,…
-
Unscored —
Eucalyptus EuStore sets a blank root password in the default configuration of EMI 3868652036, EMI 0400376721, EMI 24253…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin befo…
-
Unscored —
Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consump…
-
Unscored —
The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cau…
-
Unscored —
econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-depende…
-
High 8.6
Django Directory Traversal via ssi template tag
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_ROOTS setting followed by a .. (dot dot) in a ssi template t…
-
Unscored —
The (1) power and (2) ipmi_boot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a…
-
Unscored —
Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary fi…
-
Medium 6.2
Ansible Arbitrary File Overwrite Vulnerability
lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.
-
Medium 6.2
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots
The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors.
-
Unscored —
Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attacker…
-
Unscored —
KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt funct…
-
Medium 4.0
Ansible uses a socket with predictable filename in /tmp
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.
-
Medium —
OpenStack Cinder Denial of Service using XML entities
The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansio…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Re…
-
Low —
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this iss…
-
Unscored —
app/controllers/api/v1/hosts_controller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which al…
-
Unscored —
client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of…
-
Unscored —
Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libm…
-
Medium —
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is …
-
Medium —
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and pos…
-
Unscored —
Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and…
-
Unscored —
Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified …