Skip to content
OpenAdvisories

Archive

10 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /10 November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2013-0580

    Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle …

  • Unscored —
    CVE-2013-0577

    The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote auth…

  • Unscored —
    CVE-2013-0579

    The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote atta…

  • Unscored —
    CVE-2013-4396

    Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X…

    xorg-server Debian
  • Unscored —
    CVE-2013-4345

    Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easi…

    linux Debian
  • Unscored —
    CVE-2013-4387

    net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Off…

    linux Debian
  • Unscored —
    CVE-2013-3409

    The portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext credentials in temporary fil…

  • Unscored —
    CVE-2013-5524

    Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and ea…

  • Unscored —
    CVE-2013-5523

    The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME ele…

  • Unscored —
    CVE-2013-5525

    SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote …

  • Unscored —
    CVE-2013-5526

    Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause …

  • Unscored —
    CVE-2013-5499

    The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reloa…

  • Unscored —
    CVE-2013-5008

    The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used …

  • Unscored —
    CVE-2013-5527

    The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via…

  • Unscored —
    CVE-2013-1881

    GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external e…

    librsvg Debian
  • Unscored —
    CVE-2013-4767

    Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.

  • High —
    CVE-2013-4221

    Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

    restlet org.restlet.jse:org.restlet Ubuntu Maven
  • High —
    CVE-2013-4271

    Restlet Arbitrary Java Code Execution via a serialized object

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.

    restlet org.restlet.jse:org.restlet Ubuntu Maven
  • Unscored —
    CVE-2013-4342

    xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to…

    xinetd xinetd Debian Azure Linux
  • Unscored —
    CVE-2013-4351

    GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all …

    gnupg2 Debian
  • Unscored —
    CVE-2013-2241

    modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restr…

  • Unscored —
    CVE-2013-2138

    The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fr…

  • Unscored —
    CVE-2013-2240

    lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attacker…