Skip to content
OpenAdvisories

Archive

7 December 2013

Vulnerabilities first published on this day (UTC), newest first.

← November 2013 2013 / December /7 January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • Medium —
    CVE-2013-4492

    i18n gem Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

    i18n ruby-i18n ruby-i18n Debian Ubuntu RubyGems
  • Medium —
    CVE-2013-6415

    actionpack vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the number_to_currency helper in actionpack/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the unit pa…

    actionpack RubyGems
  • Unscored —
    CVE-2013-6640

    The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Googl…

    libv8-3.14 Ubuntu
  • Medium —
    CVE-2013-6414 Public exploit EPSS 21%

    actionpack Improper Input Validation vulnerability

    actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive …

    actionpack RubyGems
  • Unscored —
    CVE-2013-6637

    Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.63 allow attackers to cause a denial of service …

  • Unscored —
    CVE-2013-6635

    Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allo…

  • Unscored —
    CVE-2013-6636

    The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Ch…

  • Unscored —
    CVE-2013-6639

    The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Googl…

  • Unscored —
    CVE-2013-6638

    Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, al…

    libv8-3.14 Ubuntu
  • Unscored —
    CVE-2013-6920

    Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions,…

  • Medium —
    CVE-2013-6416

    actionpack Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute.

    actionpack RubyGems
  • Unscored —
    CVE-2013-6634

    The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome…

  • Medium —
    CVE-2013-6417

    actionpack allows bypass of database-query restrictions

    actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to b…

    actionpack RubyGems