Skip to content
OpenAdvisories

Archive

25 November 2013

Vulnerabilities first published on this day (UTC), newest first.

← October 2013 2013 / November /25 December 2013 →
  1. 110
  2. 224
  3. 3 
  4. 420
  5. 523
  6. 69
  7. 7 
  8. 814
  9. 94
  10. 10 
  11. 11 
  12. 1212
  13. 1349
  14. 147
  15. 1522
  16. 1630
  17. 17 
  18. 18 
  19. 1929
  20. 207
  21. 2114
  22. 2214
  23. 2360
  24. 245
  25. 256
  26. 268
  27. 2712
  28. 283
  29. 298
  30. 304
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Unscored —
    CVE-2013-4573

    Cross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1.19.x before 1.19.9, 1.2…

  • Medium —
    CVE-2013-6373

    Jenkins Exclusion Plugin allows Access to Resource Locks

    The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.

    org.jenkins-ci.plugins:exclusion Maven
  • Low —
    CVE-2013-6374

    Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

    com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer Maven
  • Unscored —
    CVE-2013-6870

    Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2013-3922

    Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attacke…

  • Unscored —
    CVE-2012-6608 Public exploit

    Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject a…