Skip to content
OpenAdvisories

Archive

24 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /24 November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2013-4295 Public exploit EPSS 12%

    Apache Shindig PHP Sensitive Information Disclosure

    The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

    org.apache.shindig:shindig-php Maven
  • Medium 4.7
    CVE-2013-4390

    Apache Sling Auth Core bundle vulnerable to Open Redirection

    Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in t…

    org.apache.sling:org.apache.sling.auth.core Maven