Skip to content
OpenAdvisories

Archive

October 2013

Vulnerabilities first published in this month (UTC), newest first.

← September 2013 2013 / October November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

59 results · Clear filters · Feed

  • Unscored —
    CVE-2013-5967 Public exploit EPSS 19%

    Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlie…

  • Unscored —
    CVE-2013-5576 Public exploit EPSS 48%

    administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before…

  • Unscored —
    CVE-2013-3540 Public exploit

    Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, O…

  • Unscored —
    CVE-2013-3541 Public exploit

    Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allow…

  • Unscored —
    CVE-2013-3543 Public exploit

    The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote…

  • Unscored —
    CVE-2013-5091 Public exploit

    SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated …

  • Unscored —
    CVE-2013-4788 Public exploit EPSS 11%

    The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGL…

    glibc Debian
  • Unscored —
    CVE-2013-0742 Public exploit

    Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2013-3248 Public exploit EPSS 18%

    Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse w…

  • Unscored —
    CVE-2013-5701 Public exploit

    Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard Web…

  • Unscored —
    CVE-2013-5979 Public exploit Scanner template EPSS 18%

    Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attack…

  • Unscored —
    CVE-2013-1892 Public exploit EPSS 45%

    MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderM…

  • Unscored —
    CVE-2013-3969 Public exploit EPSS 10%

    The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a…

  • Unscored —
    CVE-2013-3539 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH…

  • Unscored —
    CVE-2013-3690 Public exploit EPSS 12%

    Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100…

  • Unscored —
    CVE-2013-3963 Public exploit

    Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601H…

  • Unscored —
    CVE-2013-5745 Public exploit

    The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8…

    vino Debian
  • Unscored —
    CVE-2012-5627 Public exploit EPSS 11%

    Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt dur…

    mysql-5.5 mysql Ubuntu Azure Linux
  • Unscored —
    CVE-2013-5572 Public exploit

    Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console acce…

    zabbix Debian