Skip to content
OpenAdvisories

Archive

1 October 2013

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2013-1892 Public exploit EPSS 45%

    MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderM…

  • Unscored —
    CVE-2013-3969 Public exploit EPSS 10%

    The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a…

  • Unscored —
    CVE-2013-3539 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH…

  • Unscored —
    CVE-2013-3690 Public exploit EPSS 12%

    Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100…

  • Unscored —
    CVE-2013-3963 Public exploit

    Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601H…

  • Unscored —
    CVE-2013-5745 Public exploit

    The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8…

  • Unscored —
    CVE-2012-5627 Public exploit EPSS 11%

    Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt dur…

  • Unscored —
    CVE-2013-5572 Public exploit

    Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console acce…