Skip to content
OpenAdvisories

Archive

10 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /10 November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    CVE-2013-4221

    Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

    restlet org.restlet.jse:org.restlet Ubuntu Maven
  • High —
    CVE-2013-4271

    Restlet Arbitrary Java Code Execution via a serialized object

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.

    restlet org.restlet.jse:org.restlet Ubuntu Maven