Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
April

CVEs published in April 2013

420 vulnerabilities, 66 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

sun sunosUnspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via...CVE-2013-14991.7 LowApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect...CVE-2013-14984.9 MediumApril 17, 2013
oracle fusion middlewareUnspecified vulnerability in the Oracle COREid Access component in Oracle Fusion Middleware 10.1...CVE-2013-14974.3 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect...CVE-2013-14964.9 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10, when running on SPARC T4 servers, allows...CVE-2013-14944.7 MediumApril 17, 2013
oracle siebel crmUnspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle...CVE-2013-04164.0 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect...CVE-2013-04134.4 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect...CVE-2013-04123.6 LowApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect...CVE-2013-04115.9 MediumApril 17, 2013
oracle supply chain products suiteUnspecified vulnerability in the Agile EDM component in Oracle Supply Chain Products Suite 6.1.1...CVE-2013-04104.3 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via...CVE-2013-04085.0 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity...CVE-2013-04064.3 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows remote attackers to...CVE-2013-04056.4 MediumApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality,...CVE-2013-04043.7 LowApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect...CVE-2013-04031.9 LowApril 17, 2013
oracle fusion middlewareUnspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware...CVE-2012-43033.5 LowApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect...CVE-2012-05702.1 LowApril 17, 2013
sun sunosUnspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect...CVE-2012-05682.1 LowApril 17, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2013-2419Public exploitFix availableEPSS 22.6%5.0 MediumApril 17, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2013-2384Fix available10.0 HighApril 17, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2013-2383Fix available10.0 HighApril 17, 2013
canonical ubuntu linux, x x.org-xserver +1 moreX.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input...CVE-2013-1940Fix available2.1 LowApril 17, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2013-1569Fix available10.0 HighApril 17, 2013
google chrome osGoogle Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D...CVE-2013-28355.0 MediumApril 16, 2013
google chrome osGoogle Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D...CVE-2013-28345.0 MediumApril 16, 2013
google chrome osUse-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows...CVE-2013-283310.0 HighApril 16, 2013
google chrome osThe Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26...CVE-2013-28325.0 MediumApril 16, 2013
bestwebsharing groovy media playerBuffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code...CVE-2013-2760Public exploit6.8 MediumApril 16, 2013
fenrir-inc sleipnir mobileThe Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2...CVE-2013-23045.8 MediumApril 16, 2013
fenrir-inc sleipnirSleipnir 4.0.0.4000 and earlier on Windows allows remote attackers to spoof the SSL lock icon and...CVE-2013-23035.0 MediumApril 16, 2013
phpmyadmin** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php...CVE-2013-1937Public exploitDisputed6.1 MediumApril 16, 2013
cisco unified presenceThe XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to...CVE-2013-11976.8 MediumApril 16, 2013
cisco firewall services module, adaptive security appliance software +1 moreThe Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in...CVE-2013-11935.0 MediumApril 16, 2013
cisco jabber extensible communications platformThe Connection Manager in Cisco Jabber Extensible Communications Platform (aka Jabber XCP) does...CVE-2013-11875.0 MediumApril 16, 2013
cisco adaptive security appliance, 5500 adaptive security appliance, 5500 series adaptive security appliance +2 moreRace condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to...CVE-2012-54155.4 MediumApril 16, 2013
ibm xiv storage system gen3IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for...CVE-2012-48294.3 MediumApril 16, 2013
canarylabs trendlinkThe SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9...CVE-2012-30228.5 HighApril 16, 2013
motorola android, atrix hd, razr hd +2 more +4 moreThe TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on...CVE-2013-30516.2 MediumApril 13, 2013
linux kernel, motorola android +1 moreInteger overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8...CVE-2013-2596In KEVPublic exploitFix available7.8 HighApril 13, 2013
zapmsSQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute...CVE-2013-3050Public exploit7.5 HighApril 12, 2013
xenXen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen...CVE-2013-19204.4 MediumApril 12, 2013
redhat jboss enterprise portal platformThe GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote...CVE-2013-03155.0 MediumApril 12, 2013
redhat jboss enterprise portal platformThe GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not...CVE-2013-03147.5 HighApril 12, 2013
openstack keystoneOpenStack Keystone allows context-dependent attackers to bypass access restrictionsCVE-2013-0282Fix available5.0 MediumApril 12, 2013
openstack keystone, red hat openstack folsom for rhel 6, openstack platform 13 (queens) +3 more +5 moreKeystone: openstack keystone: denial of service via large http request with long tenant nameCVE-2013-0270Fix available6.5 MediumApril 12, 2013
redhat jboss enterprise portal platformCross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss...CVE-2012-35326.8 MediumApril 12, 2013
ibm cognos disclosure managementThe EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component,...CVE-2013-05019.3 HighApril 12, 2013
ibm gentran integration suite, sterling b2b integrator, sterling file gateway +1 more +3 moreUnspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling...CVE-2012-59379.3 HighApril 12, 2013
haxx curl, libcurl, canonical ubuntu linux +2 moreThe tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the...CVE-2013-1944Fix available5.0 MediumApril 12, 2013
cisco ios xe, asr 1001, asr 1002 +6 more +8 moreCisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation...CVE-2013-27797.8 HighApril 11, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open