Skip to content
OpenAdvisories

Archive

December 2013

Vulnerabilities first published in this month (UTC), newest first.

← November 2013 2013 / December January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

61 results · Clear filters · Feed

  • Unscored —
    CVE-2011-4971 Public exploit EPSS 22%

    Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bi…

    memcached Debian
  • Unscored —
    CVE-2013-2751 Public exploit EPSS 72%

    Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiato…

  • High 7.3
    CVE-2013-7030 Public exploit

    The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sen…

  • Unscored —
    CVE-2013-6810 Public exploit EPSS 17%

    The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE…

  • Unscored —
    CVE-2013-5331 Public exploit EPSS 72%

    Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.…

  • Medium 5.5
    CVE-2013-3900 Exploited Public exploit EPSS 45%

    WinVerifyTrust Signature Validation Vulnerability

    Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Wind…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jan 10, 2022
  • Unscored —
    CVE-2013-5058 Public exploit

    Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista…

  • Unscored —
    CVE-2013-5045 Public exploit EPSS 17%

    Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequ…

  • Unscored —
    CVE-2013-7043 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software …

  • Unscored —
    CVE-2013-3623 Public exploit EPSS 72%

    Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Manageme…

  • Unscored —
    CVE-2013-5447 Public exploit EPSS 34%

    Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to ex…

  • Unscored —
    CVE-2013-6985 Public exploit

    SQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows…

  • Unscored —
    CVE-2013-7025 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell S…

  • Unscored —
    CVE-2013-1349 Public exploit EPSS 22%

    Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2013-4212 Public exploit EPSS 81%

    Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute…

  • Medium —
    CVE-2013-6414 Public exploit EPSS 21%

    actionpack Improper Input Validation vulnerability

    actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive …

    actionpack RubyGems
  • Unscored —
    CVE-2013-6341 Public exploit

    SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2013-6787 Public exploit

    SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earli…

  • Unscored —
    CVE-2013-6936 Public exploit

    Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulleti…

  • Unscored —
    CVE-2013-6935 Public exploit EPSS 32%

    Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2013-6937 Public exploit

    Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a…