Skip to content
OpenAdvisories

Archive

October 2013

Vulnerabilities first published in this month (UTC), newest first.

← September 2013 2013 / October November 2013 →
  1. 152
  2. 232
  3. 327
  4. 424
  5. 510
  6. 6 
  7. 7 
  8. 8 
  9. 943
  10. 1023
  11. 1124
  12. 12 
  13. 1325
  14. 145
  15. 151
  16. 16136
  17. 1719
  18. 18 
  19. 1914
  20. 20 
  21. 215
  22. 228
  23. 233
  24. 2452
  25. 2519
  26. 266
  27. 275
  28. 2828
  29. 294
  30. 3014
  31. 314
All Critical High Medium Low Exploited only Public exploit

583 results · Feed

  • Unscored —
    CVE-2012-4077

    Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCt…

  • Unscored —
    CVE-2012-4097

    The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers…

  • Unscored —
    CVE-2012-4099

    The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denia…

  • Unscored —
    CVE-2013-4825

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Mo…

  • Unscored —
    CVE-2013-4804

    Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to exe…

  • Unscored —
    CVE-2013-4823 Public exploit EPSS 38%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Sof…

  • Unscored —
    CVE-2013-4824 Public exploit EPSS 24%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Mo…

  • Unscored —
    CVE-2013-4056

    Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM …

  • Unscored —
    CVE-2013-4826 Public exploit EPSS 32%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Mo…

  • Unscored —
    CVE-2013-4822 Public exploit EPSS 63%

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Sof…

  • Unscored —
    CVE-2013-4827

    SQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software …

  • Unscored —
    CVE-2013-3415

    Cisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3) does not properly manage…

  • Unscored —
    CVE-2013-2366

    Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to exe…

  • Unscored —
    CVE-2013-2787

    Alstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service (infinite loop) via crafte…

  • Unscored —
    CVE-2013-5513

    Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(7), 8…

  • Unscored —
    CVE-2013-5510

    The remote-access VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x befo…

  • Unscored —
    CVE-2013-5508

    The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(…

  • Unscored —
    CVE-2013-5507

    The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tun…

  • Unscored —
    CVE-2013-5509

    The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) al…

  • Unscored —
    CVE-2013-5511

    The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Sof…

  • Unscored —
    CVE-2013-5506

    The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before …

  • Unscored —
    CVE-2013-5512

    Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2…

  • Unscored —
    CVE-2013-5515

    The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8…

  • Unscored —
    CVE-2012-4108

    The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and exe…

  • Unscored —
    CVE-2012-4107

    The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and exe…

  • Unscored —
    CVE-2012-4105

    The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of servi…

  • Unscored —
    CVE-2012-4709

    Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files, send HTTP requests…

  • Unscored —
    CVE-2012-4106

    The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution o…

  • Unscored —
    CVE-2013-4377

    Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a…

    qemu Debian
  • Unscored —
    CVE-2013-4388

    Buffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media Player before 2.0.8 allo…

    vlc Debian
  • Unscored —
    CVE-2013-4319

    pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does …

  • High —
    CVE-2013-4203

    rgpg Code Injection vulnerability

    The self.run_gpg function in lib/rgpg/gpg_helper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

    rgpg RubyGems
  • Unscored —
    CVE-2013-4255

    The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMP…

    condor Debian
  • Unscored —
    CVE-2013-4173

    Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows remote attack…

    xymon Debian
  • Unscored —
    CVE-2013-4167

    Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) before 1.11.7 allows remote attackers to inject arb…

  • Unscored —
    CVE-2013-4137

    Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2013-6079 Public exploit

    Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (appli…

  • Unscored —
    CVE-2013-3693

    The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly re…

  • Unscored —
    CVE-2009-5136

    The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy tha…

  • Unscored —
    CVE-2007-6755

    The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) alg…

    openssl Debian