Skip to content
OpenAdvisories

Archive

October 2013

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2013-4295 Public exploit EPSS 12%

    Apache Shindig PHP Sensitive Information Disclosure

    The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

  • Medium —
    CVE-2013-3827 Public exploit EPSS 32%

    Path Traversal in Eclipse Mojarra

    Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server componen…

  • Medium 5.5
    CVE-2013-3896 Exploited Public exploit EPSS 67%

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, w…

    KEV May 25, 2022