Skip to content
OpenAdvisories

Archive

November 2013

Vulnerabilities first published in this month (UTC), newest first.

← October 2013 2013 / November December 2013 →
  1. 110
  2. 224
  3. 3 
  4. 420
  5. 523
  6. 69
  7. 7 
  8. 814
  9. 94
  10. 10 
  11. 11 
  12. 1212
  13. 1349
  14. 147
  15. 1522
  16. 1630
  17. 17 
  18. 18 
  19. 1929
  20. 207
  21. 2114
  22. 2214
  23. 2360
  24. 245
  25. 256
  26. 268
  27. 2712
  28. 283
  29. 298
  30. 304
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.8
    CVE-2013-5065 Exploited Public exploit EPSS 35%

    NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2013-6282 Exploited Public exploit EPSS 40%

    The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not…

    linux Debian
    KEV Sep 15, 2022
  • High 7.5
    CVE-2013-4510

    Tryton Directory Traversal vulnerability

    Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

    trytond tryton tryton-client Debian PyPI
  • High 8.8
    CVE-2013-3918 Exploited Public exploit EPSS 74%

    The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Serve…

    KEV Oct 6, 2025
  • High 7.8
    CVE-2013-3906 Exploited Public exploit EPSS 85%

    GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

    KEV Feb 15, 2022
  • High 8.8
    CVE-2013-4435

    Salt has insufficient argument validation in several modules

    Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine.

    salt PyPI
  • High —
    CVE-2013-4437

    SaltStack insecurely uses /tmp

    Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."

    salt PyPI
  • High 7.5
    CVE-2013-4436

    SaltStack MITM SSH attack in salt-ssh

    The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (MITM) attack.

    salt PyPI
  • High 7.5
    CVE-2013-6617

    SaltStack Privilege Escalation vulnerability

    The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.

    salt PyPI