Skip to content
OpenAdvisories

Archive

25 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /25 November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2013-1067

    Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local user…

  • Unscored —
    CVE-2013-4421

    The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial…

    dropbear Debian
  • Unscored —
    CVE-2013-4957

    The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted re…

  • Unscored —
    CVE-2013-4465

    Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1…

  • Unscored —
    CVE-2013-4434 Public exploit

    Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depen…

    dropbear Debian
  • Unscored —
    CVE-2013-4965

    Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, w…

  • Unscored —
    CVE-2013-6283 Public exploit

    VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly e…

    vlc Debian
  • Unscored —
    CVE-2013-6127 Public exploit EPSS 14%

    The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53…

  • Unscored —
    CVE-2013-6128 Public exploit

    The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 do…

  • Unscored —
    CVE-2013-3989

    IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which …

  • Unscored —
    CVE-2013-5424

    IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user…

  • Unscored —
    CVE-2013-6280

    Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote atta…

  • Unscored —
    CVE-2013-6281 Scanner template

    Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 …

  • Unscored —
    CVE-2013-3280

    EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which…

  • Unscored —
    CVE-2013-5530

    The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1…

  • Unscored —
    CVE-2013-5549

    Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B rou…

  • Unscored —
    CVE-2013-5522

    Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to g…

  • Unscored —
    CVE-2013-5521

    Cisco Identity Services Engine does not properly restrict the creation of guest accounts, which allows remote attackers…

  • Unscored —
    CVE-2013-5531

    Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read suppor…