Skip to content
OpenAdvisories

Archive

17 December 2013

Vulnerabilities first published on this day (UTC), newest first.

← November 2013 2013 / December /17 January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2013-7129

    Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject…

  • Unscored —
    CVE-2013-6883 Public exploit

    Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allo…

  • Unscored —
    CVE-2013-6882 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and ear…

  • Unscored —
    CVE-2013-7127

    Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local …

  • Unscored —
    CVE-2013-7128

    Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a …

  • Unscored —
    CVE-2013-6733

    Cross-site scripting (XSS) vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 t…

  • Unscored —
    CVE-2013-6721

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 a…

  • Unscored —
    CVE-2013-6193

    Unspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw, CP1*, M121*, M1536dnf…

  • Unscored —
    CVE-2013-6327

    Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix …

  • Unscored —
    CVE-2013-6329

    IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote …

  • Unscored —
    CVE-2013-6038

    Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2013-2814

    Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled ex…

  • Unscored —
    CVE-2013-2816

    The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause …

  • Unscored —
    CVE-2013-2813

    The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2013-6925

    The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by pr…

  • Unscored —
    CVE-2013-6420 Public exploit EPSS 35%

    The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5…

  • Unscored —
    CVE-2013-6191

    Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2013-6192

    Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hija…

  • Unscored —
    CVE-2013-6926

    The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended…

  • Unscored —
    CVE-2013-6966

    Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web s…