Skip to content
OpenAdvisories

Archive

12 December 2013

Vulnerabilities first published on this day (UTC), newest first.

← November 2013 2013 / December /12 January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2013-5763

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows contex…

  • Unscored —
    CVE-2011-4971 Public exploit EPSS 22%

    Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bi…

    memcached Debian
  • Medium —
    CVE-2013-1812

    Denial of service in ruby-openid

    The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

    ruby-openid ruby-openid Debian RubyGems
  • Unscored —
    CVE-2013-1913

    Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier,…

    gimp Debian
  • Unscored —
    CVE-2013-1447

    OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspeci…

  • Unscored —
    CVE-2013-1978

    Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9…

    gimp Debian
  • Unscored —
    CVE-2013-4458

    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or l…

    glibc Debian
  • Unscored —
    CVE-2013-4566

    mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVe…

    libapache2-mod-nss Ubuntu
  • Unscored —
    CVE-2013-6052

    OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a…

  • High —
    CVE-2013-6421

    sprout Arbitrary Code Execution vulnerability

    The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.

    sprout RubyGems
  • Unscored —
    CVE-2013-6045

    Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2013-6054

    Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CV…

  • Unscored —
    CVE-2013-2752

    Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1…

  • Unscored —
    CVE-2013-2751 Public exploit EPSS 72%

    Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiato…

  • High 7.3
    CVE-2013-7030 Public exploit

    The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sen…

  • Unscored —
    CVE-2013-6986

    The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases, which allows attackers t…

  • Unscored —
    CVE-2013-6810 Public exploit EPSS 17%

    The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE…