Skip to content
OpenAdvisories

Archive

December 2013

Vulnerabilities first published in this month (UTC), newest first.

← November 2013 2013 / December January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High —
    CVE-2013-7086

    Webbynode Code Injection vulnerability

    The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.

    webbynode RubyGems
  • High —
    CVE-2013-6421

    sprout Arbitrary Code Execution vulnerability

    The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.

    sprout RubyGems
  • High 7.3
    CVE-2013-7030 Public exploit

    The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sen…

  • High 7.5
    CVE-2013-6389

    Drupal has open redirect vulnerability in the Overlay module

    Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

    drupal/drupal Packagist
  • High —
    CVE-2012-6612 EPSS 10%

    Improper Restriction of XML External Entity Reference in Apache Solr

    The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML…

    org.apache.solr:solr-core lucene-solr Debian Maven