Skip to content
OpenAdvisories

Archive

11 December 2013

Vulnerabilities first published on this day (UTC), newest first.

← November 2013 2013 / December /11 January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

37 results · Feed

  • Unscored —
    CVE-2013-6673

    Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not re…

  • Unscored —
    CVE-2013-6672

    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard d…

  • Unscored —
    CVE-2013-6671 EPSS 11%

    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird bef…

  • Unscored —
    CVE-2013-5615

    The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, an…

  • Unscored —
    CVE-2013-5331 Public exploit EPSS 72%

    Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.…

  • Unscored —
    CVE-2013-5610

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 all…

  • Unscored —
    CVE-2013-5332

    Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.…

  • Unscored —
    CVE-2013-5618 EPSS 10%

    Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor…

  • Unscored —
    CVE-2013-5619

    Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMo…

  • Unscored —
    CVE-2013-5609

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2…

  • Unscored —
    CVE-2013-5616

    Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0,…

  • Unscored —
    CVE-2013-5614

    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME eleme…

  • Unscored —
    CVE-2013-5334

    Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2013-5333

    Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2013-5612

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for r…

  • Unscored —
    CVE-2013-5613

    Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox …

  • Unscored —
    CVE-2013-5611

    Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for…

  • Unscored —
    CVE-2013-3899

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validat…

  • Medium 5.5
    CVE-2013-3900 Exploited Public exploit EPSS 45%

    WinVerifyTrust Signature Validation Vulnerability

    Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Wind…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jan 10, 2022
  • Unscored —
    CVE-2013-3907

    portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP…

  • Unscored —
    CVE-2013-3902

    Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 and Windo…

  • Unscored —
    CVE-2013-3878

    Stack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local use…

  • Unscored —
    CVE-2013-3903

    Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and…

  • Unscored —
    CVE-2013-5058 Public exploit

    Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista…

  • Unscored —
    CVE-2013-5048 EPSS 13%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-5047 EPSS 13%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2013-5051 EPSS 13%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2013-5056 EPSS 20%

    Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Serve…

  • Unscored —
    CVE-2013-5072

    Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 C…

  • Unscored —
    CVE-2013-5054 EPSS 12%

    Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a…

  • Unscored —
    CVE-2013-5059 EPSS 15%

    Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arb…

  • Unscored —
    CVE-2013-5052 EPSS 13%

    Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • Unscored —
    CVE-2013-5057

    hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which make…

  • Unscored —
    CVE-2013-5046

    Microsoft Internet Explorer 7 through 11 allows local users to bypass the Protected Mode protection mechanism, and cons…

  • Unscored —
    CVE-2013-5045 Public exploit EPSS 17%

    Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequ…

  • Unscored —
    CVE-2013-5049 EPSS 20%

    Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2013-5042 EPSS 12%

    Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Vi…