Skip to content
OpenAdvisories

Archive

October 2013

Vulnerabilities first published in this month (UTC), newest first.

← September 2013 2013 / October November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

583 results · Feed

  • Unscored —
    CVE-2013-5175

    The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of servic…

  • Unscored —
    CVE-2013-5184

    The kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing of multicast Wi-Fi pa…

  • Unscored —
    CVE-2013-5192

    The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via…

  • Unscored —
    CVE-2013-5182

    Mail in Apple Mac OS X before 10.9 allows remote attackers to spoof the existence of a cryptographic signature for an e…

  • Unscored —
    CVE-2013-5167

    CFNetwork in Apple Mac OS X before 10.9 does not properly support Safari's deletion of session cookies in response to a…

  • Unscored —
    CVE-2013-5189

    Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software update…

  • Unscored —
    CVE-2013-5178

    LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows c…

  • Unscored —
    CVE-2013-5172

    The kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2 digest function calls,…

  • Unscored —
    CVE-2013-5181

    The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified s…

  • Unscored —
    CVE-2013-6244

    The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlie…

  • Unscored —
    CVE-2013-6245

    Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.…

  • Unscored —
    CVE-2013-3244

    Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for…

  • Unscored —
    CVE-2013-4422

    SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, a…

    quassel Debian
  • Unscored —
    CVE-2013-6243

    SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote…

  • Unscored —
    CVE-2013-2651

    Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2013-1739

    Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read …

    nss Debian
  • Unscored —
    CVE-2013-5389

    Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote …

  • Unscored —
    CVE-2013-5703

    The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings o…

  • Unscored —
    CVE-2013-5388

    Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote …

  • Unscored —
    CVE-2013-5446

    The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which …

  • Unscored —
    CVE-2013-5428

    IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allow…

  • Unscored —
    CVE-2013-5550

    The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of servi…

  • Unscored —
    CVE-2013-5544

    The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cau…

  • Unscored —
    CVE-2013-4450 Public exploit EPSS 37%

    The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of s…

    nodejs Debian
  • Unscored —
    CVE-2013-5970

    hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2013-5971

    Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows rem…

  • Unscored —
    CVE-2013-5542

    Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0 before 9.0(3.6), and 9.1…

  • Unscored —
    CVE-2012-4115

    The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, whic…

  • Unscored —
    CVE-2013-4712

    I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows r…

  • Unscored —
    CVE-2013-6025 Public exploit

    The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to r…

  • Unscored —
    CVE-2013-6021 Public exploit EPSS 12%

    Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2013-6129 Public exploit EPSS 52%

    The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the…

  • Unscored —
    CVE-2013-6027 Public exploit

    Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow re…

  • Unscored —
    CVE-2013-6026

    The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Plan…

  • Unscored —
    CVE-2013-5372

    The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IB…

  • Unscored —
    CVE-2013-5534

    Directory traversal vulnerability in the attachment service in the Voice Message Web Service (aka VMWS or Cisco Unity W…

  • Unscored —
    CVE-2013-5702

    Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remot…

  • Unscored —
    CVE-2012-4117

    The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, …

  • Unscored —
    CVE-2012-4113

    The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and rea…

  • Unscored —
    CVE-2012-4114

    The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows ma…