Skip to content
OpenAdvisories

Archive

October 2013

Vulnerabilities first published in this month (UTC), newest first.

← September 2013 2013 / October November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High —
    CVE-2013-2186 Public exploit EPSS 13%

    Arbitrary file write in Apache Commons Fileupload

    The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a seria…

    commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven
  • High 7.5
    CVE-2013-1445

    PyCrypto does not properly reseed PRNG before allowing access

    The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information b…

    pycrypto PyPI
  • High —
    CVE-2013-4203

    rgpg Code Injection vulnerability

    The self.run_gpg function in lib/rgpg/gpg_helper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

    rgpg RubyGems
  • High —
    CVE-2013-4221

    Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources using the Java XMLDecoder, which allows remote attackers to execute arbitrary Java code via crafted XML.

    restlet org.restlet.jse:org.restlet Ubuntu Maven
  • High —
    CVE-2013-4271

    Restlet Arbitrary Java Code Execution via a serialized object

    The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.

    restlet org.restlet.jse:org.restlet Ubuntu Maven
  • High 8.8
    CVE-2013-3897 Exploited Public exploit EPSS 77%

    Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

    KEV Mar 3, 2022
  • High 8.4
    CVE-2013-3888

    dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows …

  • High 8.1
    CVE-2013-3894 EPSS 43%

    The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server…