Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
May

CVEs published in May 2013

396 vulnerabilities, 111 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to...CVE-2013-1307EPSS 20.6%9.3 HighMay 15, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2013-1306Public exploitEPSS 33.4%9.3 HighMay 15, 2013
microsoft windows 8, windows rt, windows server 2012 +2 moreHTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to...CVE-2013-1305EPSS 54.7%7.8 HighMay 15, 2013
microsoft lync, lync server, office communicator +2 moreMicrosoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not...CVE-2013-1302EPSS 21.9%9.3 HighMay 15, 2013
microsoft visioMicrosoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files...CVE-2013-1301EPSS 16.7%4.3 MediumMay 15, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which...CVE-2013-1297EPSS 16.8%4.3 MediumMay 15, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to...CVE-2013-0811EPSS 20.6%9.3 HighMay 15, 2013
microsoft windows essentialsWriter in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy...CVE-2013-0096EPSS 31.1%6.8 MediumMay 15, 2013
linux kernelThe perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an...CVE-2013-2094In KEVPublic exploitFix availableEPSS 47.7%7.2 HighMay 14, 2013
wesley destailleur todoo forumMultiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow...CVE-2013-3538Public exploit4.3 MediumMay 13, 2013
wesley destailleur todoo forumMultiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote...CVE-2013-3537Public exploit7.5 HighMay 13, 2013
whmcs group paySQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the...CVE-2013-3536Public exploit7.5 HighMay 13, 2013
themelogik cmslogikMultiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote...CVE-2013-3535Public exploit4.3 MediumMay 13, 2013
algisinfo aicontactsafeCross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla!...CVE-2013-35344.3 MediumMay 13, 2013
clamav, canonical ubuntu linux, suse linux enterprise server +2 morepdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out...CVE-2013-2021Fix available4.3 MediumMay 13, 2013
clamav, canonical ubuntu linux, suse linux enterprise server +2 moreInteger underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote...CVE-2013-2020Fix available5.0 MediumMay 13, 2013
xenqemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the...CVE-2013-1922Fix available3.3 LowMay 13, 2013
fedoraproject 389 directory serverThe do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11...CVE-2013-1897Fix available2.6 LowMay 13, 2013
cisco iosThe crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2...CVE-2013-11364.6 MediumMay 13, 2013
xenXen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non...CVE-2013-1964Fix available6.9 MediumMay 12, 2013
xenXen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check...CVE-2013-1952Fix available1.9 LowMay 12, 2013
xenCertain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible,...CVE-2013-1918Fix available4.7 MediumMay 12, 2013
virtualaccess virtual access monitorMultiple SQL injection vulnerabilities in Virtual Access Monitor 3.10.17 and earlier allow...CVE-2013-35337.5 HighMay 10, 2013
webdorado spider video playerSQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for...CVE-2013-3532Public exploit7.5 HighMay 10, 2013
radiocmsSQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute...CVE-2013-3531Public exploit7.5 HighMay 10, 2013
fabricio zuardi xspf player pluginSQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress...CVE-2013-3530Public exploit7.5 HighMay 10, 2013
smartypantsplugins wp-funeral-pressMultiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress...CVE-2013-3529Public exploit4.3 MediumMay 10, 2013
vanillaforums vanillaUnspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified...CVE-2013-3528Public exploit7.5 HighMay 10, 2013
vanillaforums vanillaMultiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers...CVE-2013-3527Public exploit7.5 HighMay 10, 2013
wptrafficanalyzer trafficanalyzerCross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin,...CVE-2013-3526Public exploitEPSS 13.9%4.3 MediumMay 10, 2013
bestpractical request tracker** DISPUTED ** SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and...CVE-2013-3525Public exploitDisputed7.5 HighMay 10, 2013
simpilotgroup pop up newsSQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier...CVE-2013-3524Public exploit7.5 HighMay 10, 2013
gajennings thisSQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute...CVE-2013-35237.5 HighMay 10, 2013
vbulletinSQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0...CVE-2013-3522Public exploitEPSS 27.1%6.5 MediumMay 10, 2013
phpvmsUnspecified vulnerability in admin/action.php in phpVMS 2.1.x before 2.1.935 has unknown impact...CVE-2012-655210.0 HighMay 10, 2013
wppa.opajaap wp-photo-album-plusCross-site scripting (XSS) vulnerability in wp-admin/admin.php in the WP Photo Album Plus plugin...CVE-2013-32544.3 MediumMay 10, 2013
ibm lotus notesInteger overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix...CVE-2013-2977Public exploit6.8 MediumMay 10, 2013
netweblogic login with ajaxCross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for...CVE-2013-27076.8 MediumMay 10, 2013
cisco unified presence serverMemory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote...CVE-2013-12425.0 MediumMay 10, 2013
emc alphastorBuffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows...CVE-2013-0946Public exploitEPSS 28.5%9.3 HighMay 10, 2013
emc documentum records manager, documentum taskspace, documentum wdk +1 more +3 moreEMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before...CVE-2013-09395.8 MediumMay 10, 2013
emc documentum records manager, documentum taskspace, documentum wdk +1 more +3 moreCross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK...CVE-2013-09384.3 MediumMay 10, 2013
emc documentum records manager, documentum taskspace, documentum wdk +1 more +3 moreSession fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7...CVE-2013-09375.8 MediumMay 10, 2013
ibm sterling multi-channel fulfillment solution, sterling selling and fulfillment foundation +1 moreThe Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before...CVE-2013-05783.5 LowMay 10, 2013
ibm sterling secure proxyIBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6...CVE-2013-05204.0 MediumMay 10, 2013
ibm sterling secure proxyIBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6...CVE-2013-05195.0 MediumMay 10, 2013
ibm sterling secure proxyIBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6...CVE-2013-05184.3 MediumMay 10, 2013
apache tomcatImproper Authentication in Apache TomcatCVE-2013-2067Fix availableEPSS 10.4%6.8 MediumMay 10, 2013
mit kerberos 5, canonical ubuntu linux, debian linux +7 more +9 moreschpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not...CVE-2002-2443Fix available5.0 MediumMay 10, 2013
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers...CVE-2013-3336Public exploitEPSS 74.3%5.0 MediumMay 9, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open