Skip to content
OpenAdvisories

Archive

December 2013

Vulnerabilities first published in this month (UTC), newest first.

← November 2013 2013 / December January 2014 →
  1. 14
  2. 29
  3. 35
  4. 49
  5. 529
  6. 62
  7. 753
  8. 8 
  9. 946
  10. 1013
  11. 1137
  12. 1217
  13. 1327
  14. 1441
  15. 15 
  16. 161
  17. 1720
  18. 1816
  19. 1923
  20. 207
  21. 2132
  22. 228
  23. 2322
  24. 2415
  25. 25 
  26. 261
  27. 275
  28. 2811
  29. 296
  30. 3013
  31. 3112
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    CVE-2013-5573 Public exploit

    Jenkins allows Cross-Site Scripting (XSS) in User Configuration

    Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

    org.jenkins-ci.main:jenkins-core Maven
  • Low —
    CVE-2013-5583

    Joomla! Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

    joomla/joomla-cms Packagist
  • Low 3.0
    CVE-2013-7074

    TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component

    Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary…

    typo3/cms Packagist