Skip to content
OpenAdvisories

Archive

11 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /11 November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2013-4377

    Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a…

    qemu Debian
  • Unscored —
    CVE-2013-4388

    Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allo…

    vlc Debian
  • Unscored —
    CVE-2013-4319

    pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does …

  • High —
    CVE-2013-4203

    rgpg Code Injection vulnerability

    The self.run_gpg function in lib/rgpg/gpg_helper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

    rgpg RubyGems
  • Unscored —
    CVE-2013-4255

    The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMP…

    condor Debian
  • Unscored —
    CVE-2013-4173

    Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows remote attack…

    xymon Debian
  • Unscored —
    CVE-2013-4167

    Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) before 1.11.7 allows remote attackers to inject arb…

  • Unscored —
    CVE-2013-4137

    Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2013-6079 Public exploit

    Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (appli…

  • Unscored —
    CVE-2013-3693

    The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly re…

  • Unscored —
    CVE-2009-5136

    The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy tha…

  • Unscored —
    CVE-2007-6755

    The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) alg…

    openssl Debian
  • Unscored —
    CVE-2013-4306

    Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, …

  • Unscored —
    CVE-2013-4305

    Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, p…

  • Unscored —
    CVE-2013-3687 Public exploit

    AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use c…

  • Unscored —
    CVE-2013-3686 Public exploit EPSS 28%

    cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the admi…

  • Unscored —
    CVE-2013-2579 Public exploit

    TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.…

  • Unscored —
    CVE-2013-2580 Public exploit

    Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL…

  • Unscored —
    CVE-2013-2578 Public exploit EPSS 74%

    cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models b…

  • Unscored —
    CVE-2013-2581 Public exploit

    cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models b…

  • Unscored —
    CVE-2013-5028 Public exploit

    SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authe…

  • Unscored —
    CVE-2013-5533

    The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell …

  • Unscored —
    CVE-2013-5532

    Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2013-5528 Public exploit Scanner template EPSS 23%

    Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager al…