Skip to content
OpenAdvisories

Archive

November 2013

Vulnerabilities first published in this month (UTC), newest first.

← October 2013 2013 / November December 2013 →
  1. 110
  2. 224
  3. 3 
  4. 420
  5. 523
  6. 69
  7. 7 
  8. 814
  9. 94
  10. 10 
  11. 11 
  12. 1212
  13. 1349
  14. 147
  15. 1522
  16. 1630
  17. 17 
  18. 18 
  19. 1929
  20. 207
  21. 2114
  22. 2214
  23. 2360
  24. 245
  25. 256
  26. 268
  27. 2712
  28. 283
  29. 298
  30. 304
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Unscored —
    CVE-2013-5912 Public exploit EPSS 30%

    VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execut…

  • High 7.8
    CVE-2013-5065 Exploited Public exploit EPSS 35%

    NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2013-4624 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inje…

  • Unscored —
    CVE-2013-6875 Public exploit

    SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 all…

  • Unscored —
    CVE-2013-6874 Public exploit

    Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2013-6873 Public exploit

    SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute ar…

  • Unscored —
    CVE-2012-6608 Public exploit

    Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject a…

  • Unscored —
    CVE-2013-4164 Public exploit EPSS 35%

    Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and tr…

    ruby2.0 ruby1.9.1 Ubuntu
  • Unscored —
    CVE-2013-0221 Public exploit

    The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmen…

  • Unscored —
    CVE-2013-4547 Public exploit EPSS 68%

    nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unesca…

    nginx Debian
  • Unscored —
    CVE-2013-4474 Public exploit EPSS 10%

    Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote…

    poppler Debian
  • Unscored —
    CVE-2013-6852 Public exploit

    Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack…

  • Unscored —
    CVE-2013-6830 Public exploit

    admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attacke…

  • Unscored —
    CVE-2013-6831 Public exploit

    PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict…

  • Unscored —
    CVE-2013-6829 Public exploit EPSS 80%

    admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metach…

  • Unscored —
    CVE-2013-6826 Public exploit

    cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate t…

  • Unscored —
    CVE-2013-4579 Public exploit EPSS 10%

    The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12…

    linux Debian
  • High 8.8
    CVE-2013-6282 Exploited Public exploit EPSS 40%

    The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

    linux Debian
    KEV Sep 15, 2022
  • Unscored —
    CVE-2013-3095 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05…

  • Unscored —
    CVE-2013-5730 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remo…

  • Unscored —
    CVE-2013-6799 Public exploit

    Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard lin…

  • Unscored —
    CVE-2013-4034 Public exploit

    IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 befo…

  • Unscored —
    CVE-2013-6042 Public exploit

    Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo befo…

  • Unscored —
    CVE-2013-6797 Public exploit

    Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin b…

  • Unscored —
    CVE-2013-2271 Public exploit

    The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers…

  • Medium 5.4
    CVE-2013-5223 Exploited Public exploit EPSS 51%

    Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated us…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2013-4557 Public exploit EPSS 25%

    The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, al…

    spip Debian
  • Unscored —
    CVE-2013-6058 Public exploit

    SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2013-6793 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allow remote …

  • Unscored —
    CVE-2013-6164 Public exploit

    SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2013-6794 Public exploit

    Cross-site scripting (XSS) vulnerability in the Calendar module in Olat 7.8.0.1 (b20130821 N1) allows remote attackers …

  • Unscored —
    CVE-2013-6357 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows r…

  • Unscored —
    CVE-2013-6627 Public exploit

    net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1…

  • Unscored —
    CVE-2013-2653 Public exploit

    security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote…

  • High 8.8
    CVE-2013-3918 Exploited Public exploit EPSS 74%

    The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Serve…

    KEV Oct 6, 2025
  • Unscored —
    CVE-2013-3986 Public exploit

    IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension …

  • Unscored —
    CVE-2013-4987 Public exploit

    PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and p…

  • High 7.8
    CVE-2013-3906 Exploited Public exploit EPSS 85%

    GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

    KEV Feb 15, 2022
  • Unscored —
    CVE-2013-5688 Public exploit

    Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated us…

  • Unscored —
    CVE-2013-6618 Public exploit EPSS 11%

    jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3…