Skip to content
OpenAdvisories

Archive

28 October 2013

Vulnerabilities first published on this day (UTC), newest first.

← September 2013 2013 / October /28 November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Medium 5.0
    CVE-2013-4392

    systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for…

    systemd Debian
  • Unscored —
    CVE-2013-4393

    journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service…

    systemd Debian
  • Unscored —
    CVE-2013-4402

    The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a de…

    gnupg2 Debian
  • Unscored —
    CVE-2013-4391

    Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to ca…

    systemd Debian
  • Unscored —
    CVE-2013-4394

    The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions o…

    systemd Debian
  • Critical 9.8
    CVE-2013-6288

    Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize

    Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."

    apache-solr-for-typo3/solr Packagist
  • Unscored —
    CVE-2013-6014

    Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12…

  • Unscored —
    CVE-2013-6012

    Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does …

  • Medium 4.3
    CVE-2013-6289

    Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    apache-solr-for-typo3/solr Packagist
  • Unscored —
    CVE-2013-3704

    The RPM GPG key import and handling feature in libzypp 12.15.0 and earlier reports a different key fingerprint than the…

  • Unscored —
    CVE-2013-3243

    Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code…

  • Unscored —
    CVE-2013-2208

    tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP template file.

    tpp Debian
  • Unscored —
    CVE-2013-5744

    Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2012-0825

    Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX) information is signed, which al…

  • Unscored —
    CVE-2012-0827

    The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated use…

  • Unscored —
    CVE-2012-0826

    Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 …

  • Unscored —
    CVE-2012-6303 Public exploit EPSS 10%

    Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in…

    snack Debian
  • Unscored —
    CVE-2010-1159 Public exploit

    Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (cra…

    aircrack-ng Debian
  • Unscored —
    CVE-2013-1056

    X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or pos…

    xorg-server Ubuntu
  • High —
    CVE-2013-2186 Public exploit EPSS 13%

    Arbitrary file write in Apache Commons Fileupload

    The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a seria…

    commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven
  • Unscored —
    CVE-2013-2102

    The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authenti…

  • Unscored —
    CVE-2012-4529

    The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking m…

  • Unscored —
    CVE-2012-4572

    Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implem…

  • Unscored —
    CVE-2013-6285

    The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obta…

  • Unscored —
    CVE-2013-6018

    Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attack…

  • Unscored —
    CVE-2013-6020

    passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-re…

  • Unscored —
    CVE-2013-6019

    Cross-site scripting (XSS) vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2013-5430

    The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, w…