Skip to content
OpenAdvisories

Archive

2 November 2013

Vulnerabilities first published on this day (UTC), newest first.

← October 2013 2013 / November /2 December 2013 →
  1. 110
  2. 224
  3. 3 
  4. 420
  5. 523
  6. 69
  7. 7 
  8. 814
  9. 94
  10. 10 
  11. 11 
  12. 1212
  13. 1349
  14. 147
  15. 1522
  16. 1630
  17. 17 
  18. 18 
  19. 1929
  20. 207
  21. 2114
  22. 2214
  23. 2360
  24. 245
  25. 256
  26. 268
  27. 2712
  28. 283
  29. 298
  30. 304
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2013-6348

    Apache Struts is vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to (1) actionNames.action and (2) showConfig.action in config-browser/.

    org.apache.struts:struts2-core Maven
  • Medium —
    CVE-2013-4457

    Cocaine Gem OS Command Injection vulnerability

    The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.

    cocaine RubyGems