Skip to content
OpenAdvisories

Archive

4 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /4 November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2013-3540 Public exploit

    Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, O…

  • Unscored —
    CVE-2013-3541 Public exploit

    Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allow…

  • Unscored —
    CVE-2013-3689

    Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3…

  • Unscored —
    CVE-2013-3543 Public exploit

    The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote…

  • Unscored —
    CVE-2013-4986

    Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and e…

  • Unscored —
    CVE-2013-5091 Public exploit

    SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated …

  • Unscored —
    CVE-2013-4344

    Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached d…

    xen qemu Debian
  • Medium —
    CVE-2013-4330

    Improper Control of Generation of Code in Apache Camel

    Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.

    org.apache.camel:camel-core Maven
  • Unscored —
    CVE-2013-4157

    Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks…

  • Medium 6.1
    CVE-2013-4249

    Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget

    Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField.

    python-django django Debian PyPI
  • Unscored —
    CVE-2013-4758

    Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog befor…

  • Unscored —
    CVE-2013-4788 Public exploit EPSS 11%

    The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGL…

    glibc Debian
  • Unscored —
    CVE-2013-6011

    Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial …

  • Medium 6.1
    CVE-2013-6044

    Django cross-site scripting (XSS) vulnerability via is_safe_url function

    The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting (XSS) or other vulnerabilities into Dja…

    python-django django Debian PyPI
  • Unscored —
    CVE-2013-2223

    GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a…

  • Unscored —
    CVE-2013-2221

    Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to ca…

  • Unscored —
    CVE-2013-2222

    Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2013-5915

    The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might al…

  • Unscored —
    CVE-2013-4829

    HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM…

  • Unscored —
    CVE-2013-4711

    Cross-site scripting (XSS) vulnerability in Accela BizSearch 3.2 on Linux and Solaris allows remote attackers to inject…

  • Unscored —
    CVE-2013-4828

    HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM…

  • Unscored —
    CVE-2013-2964

    Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2…

  • Unscored —
    CVE-2013-5163

    Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based auth…

  • Unscored —
    CVE-2013-5419

    Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to…