Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
February

CVEs published in February 2013

393 vulnerabilities, 103 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows,...CVE-2013-1365EPSS 10.3%10.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreUse-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602...CVE-2013-064910.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61...CVE-2013-064710.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows,...CVE-2013-0645EPSS 10.3%10.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreUse-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602...CVE-2013-064410.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreBuffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows,...CVE-2013-0642EPSS 10.3%10.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreInteger overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows...CVE-2013-0639EPSS 12.6%10.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61...CVE-2013-063810.0 HighFebruary 12, 2013
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61...CVE-2013-06375.0 MediumFebruary 12, 2013
featurific for wordpress project featurific-for-wordpressCross-site scripting (XSS) vulnerability in cached_image.php in the Featurific For WordPress...CVE-2011-5265Public exploit4.3 MediumFebruary 12, 2013
marcel brinkkemper lazyest-backupCross-site scripting (XSS) vulnerability in lazyest-backup.php in the Lazyest Backup plugin...CVE-2011-52644.3 MediumFebruary 12, 2013
sap netweaverCross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and...CVE-2011-52634.3 MediumFebruary 12, 2013
sonicwall aventail sra ex6000, aventail sra ex7000, aventail sra ex9000 +1 more +3 moreSQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to...CVE-2011-5262Public exploit7.5 HighFebruary 12, 2013
axis m1054 network camera, m10 series network cameras firmware +1 moreCross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras...CVE-2011-5261Public exploit4.3 MediumFebruary 12, 2013
sap netweaverCross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote...CVE-2011-52604.3 MediumFebruary 12, 2013
orangehrmSQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2...CVE-2011-5259Public exploit6.8 MediumFebruary 12, 2013
orangehrmMultiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote...CVE-2011-5258Public exploit4.3 MediumFebruary 12, 2013
appthemes classipressMultiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for...CVE-2011-5257Public exploit4.3 MediumFebruary 12, 2013
limesurveyCross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey before 1.91+ Build 11379...CVE-2011-52562.6 LowFebruary 12, 2013
rubyonrails rails, ruby on rails +1 moreActive Record contains deserialization of arbitrary YAMLCVE-2013-0277Fix available10.0 HighFebruary 12, 2013
rubyonrails railsActiveRecord vulnerable to modification of protected model attributesCVE-2013-0276Fix available4.3 MediumFebruary 12, 2013
rubygems json gemJSON gem has Improper Input Validation vulnerabilityCVE-2013-0269Public exploitFix availableEPSS 13.9%7.5 HighFebruary 12, 2013
vmware esx, esxi, fusion +2 more +4 moreThe Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware...CVE-2013-1406Public exploit7.2 HighFebruary 11, 2013
cubecartThe Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows...CVE-2013-1465Public exploit9.8 CriticalFebruary 8, 2013
rack project rackRack arbitrary code execution via timing attackCVE-2013-0263Fix available5.1 MediumFebruary 8, 2013
rack project rackRack Vulnerable to Path TraversalCVE-2013-0262Fix available4.3 MediumFebruary 8, 2013
gnu glibcBuffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c...CVE-2013-0242Fix available5.0 MediumFebruary 8, 2013
squid-cache squid, canonical ubuntu linux +1 morecachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote...CVE-2013-0189Fix availableEPSS 21.9%5.0 MediumFebruary 8, 2013
redhat libvirt, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreUse-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in...CVE-2013-0170Fix available6.8 MediumFebruary 8, 2013
bouncycastle bc-java, legion-of-the-bouncy-castle-c\#-cryptography-api +1 moreImproper Input Validation in Bouncy CastleCVE-2013-1624Fix available4.0 MediumFebruary 8, 2013
yassl cyasslThe TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing...CVE-2013-16234.3 MediumFebruary 8, 2013
polarsslArray index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to...CVE-2013-16214.3 MediumFebruary 8, 2013
mozilla network security services, canonical ubuntu linux, oracle enterprise manager ops center +12 more +14 moreThe TLS implementation in Mozilla Network Security Services (NSS) does not properly consider...CVE-2013-1620Fix available4.3 MediumFebruary 8, 2013
opera browserThe TLS implementation in Opera before 12.13 does not properly consider timing side-channel...CVE-2013-16184.0 MediumFebruary 8, 2013
opensslcrypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2...CVE-2012-2686Fix availableEPSS 39.6%5.0 MediumFebruary 8, 2013
opera browserOpera before 12.13 does not send CORS preflight requests in all required cases, which allows...CVE-2013-16396.8 MediumFebruary 8, 2013
opera browserOpera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an...CVE-2013-1638Public exploit9.3 HighFebruary 8, 2013
opera browserOpera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM...CVE-2013-16379.3 HighFebruary 8, 2013
adobe flash playerAdobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X,...CVE-2013-0634Public exploitEPSS 77.6%9.3 HighFebruary 8, 2013
adobe flash playerBuffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows...CVE-2013-0633Public exploitEPSS 20.9%9.3 HighFebruary 8, 2013
ecava integraxorMultiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00...CVE-2012-47009.3 HighFebruary 8, 2013
gnu gnutlsThe TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does...CVE-2013-1619Fix available4.0 MediumFebruary 8, 2013
doryphores audio playerCross-site scripting (XSS) vulnerability in assets/player.swf in the Audio Player plugin before 2...CVE-2013-1464Public exploitFix available4.3 MediumFebruary 7, 2013
wp-table reloaded project reloadedCross-site scripting (XSS) vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table...CVE-2013-1463Public exploit4.3 MediumFebruary 7, 2013
ircd-hybridThe try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly...CVE-2013-0238Public exploitFix available5.0 MediumFebruary 7, 2013
cisco unity express, unity express software +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with...CVE-2013-1120Public exploit6.8 MediumFebruary 6, 2013
cisco webex socialThe search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users...CVE-2013-11074.0 MediumFebruary 6, 2013
qtThe QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions...CVE-2013-0254Fix available3.6 LowFebruary 6, 2013
weathernews touchThe Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain...CVE-2012-51874.3 MediumFebruary 6, 2013
fleugel myu-s, php weblog system mania +1 moreCross-site scripting (XSS) vulnerability in FLUGELz netmania myu-s and PHP WeblogSystem allows...CVE-2012-51864.3 MediumFebruary 6, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open