Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
July

CVEs published in July 2013

489 vulnerabilities, 72 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

strongswanBuffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic...CVE-2013-2054Fix available5.1 MediumJuly 9, 2013
xelerance openswanBuffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is...CVE-2013-2053Fix available6.8 MediumJuly 9, 2013
libreswanBuffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is...CVE-2013-20525.1 MediumJuly 9, 2013
redhat enterprise linuxThe Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows...CVE-2013-20512.6 LowJuly 9, 2013
redhat enterprise linux, jboss enterprise web server +1 moreThe (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...CVE-2013-1976Fix available6.9 MediumJuly 9, 2013
libtirpc project libtirpcThe svc_dg_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a...CVE-2013-1950Public exploitFix available4.3 MediumJuly 9, 2013
nagios remote plug in executor, opensuse +1 moreIncomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14...CVE-2013-1362Public exploitFix availableEPSS 71.0%7.5 HighJuly 9, 2013
intel intelligent platform management interface, oracle fujitsu m10 firmware +1 moreThe IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP)...CVE-2013-4786Public exploitEPSS 98.4%7.5 HighJuly 8, 2013
dell idrac6 firmwareThe web interface on the Dell iDRAC6 with firmware before 1.95 allows remote attackers to modify...CVE-2013-478510.0 HighJuly 8, 2013
hp integrated lights-out bmcThe HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass...CVE-2013-4784Public exploitEPSS 49.6%10.0 HighJuly 8, 2013
dell idrac6 bmcThe Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with...CVE-2013-478310.0 HighJuly 8, 2013
supermicro bmcThe Supermicro BMC implementation allows remote attackers to bypass authentication and execute...CVE-2013-4782EPSS 26.2%10.0 HighJuly 8, 2013
emc rsa authentication manager, rsa authentication manager +1 moreEMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0,...CVE-2013-32732.1 LowJuly 8, 2013
emc replication managerEMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files,...CVE-2013-32722.1 LowJuly 8, 2013
moxiecode plupload, wordpress, fedoraproject fedora +2 moreCross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as...CVE-2013-0237Fix available4.3 MediumJuly 8, 2013
wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote...CVE-2013-0236Fix available4.3 MediumJuly 8, 2013
wordpressThe XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to...CVE-2013-0235Fix availableEPSS 29.6%6.4 MediumJuly 8, 2013
symantec security information manager, security information manager appliance +1 moreThe management console (aka Java console) on the Symantec Security Information Manager (SSIM)...CVE-2013-16152.9 LowJuly 8, 2013
symantec security information manager, security information manager appliance +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console)...CVE-2013-16144.3 MediumJuly 8, 2013
symantec security information manager, security information manager appliance +1 moreSQL injection vulnerability in the management console (aka Java console) on the Symantec Security...CVE-2013-16134.7 MediumJuly 8, 2013
fortinet fortios, fortigate-1000c, fortigate-100d +27 more +29 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate...CVE-2013-1414Public exploit5.1 MediumJuly 8, 2013
linux kernel, canonical ubuntu linux +1 morenet/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial...CVE-2013-1059Fix available7.8 HighJuly 8, 2013
opera MageiaUpdated opera packages replace code signing certificateMGASA-2013-0202Fix availableNo scoreJuly 6, 2013
realnetworks realplayerRealNetworks RealPlayer 16.0.2.32 and earlier allows remote attackers to cause a denial of...CVE-2013-3299Public exploit4.3 MediumJuly 6, 2013
ibm aix, vios +1 moreThe TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled,...CVE-2013-30058.5 HighJuly 6, 2013
hp 3com router, h3c router, 3com baseline plus switch +12 more +14 moreUnspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF##...CVE-2013-23417.1 HighJuly 6, 2013
hp 3com router, h3c router, 3com baseline plus switch +12 more +14 moreUnspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF##...CVE-2013-2340EPSS 10.4%10.0 HighJuly 6, 2013
ibm business process managerMultiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x...CVE-2013-05813.5 LowJuly 6, 2013
redhat enterprise linuxA certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows...CVE-2013-22246.9 MediumJuly 4, 2013
phpmyadminphpMyAdmin Global variables scope injection vulnerabilityCVE-2013-4729Fix available5.5 MediumJuly 4, 2013
mongodbMongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain...CVE-2013-46506.5 MediumJuly 4, 2013
phpmyadminCross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in...CVE-2013-3742Fix available3.5 LowJuly 4, 2013
lianja sql serverStack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote...CVE-2013-3563Public exploitEPSS 49.5%7.5 HighJuly 4, 2013
cisco identity services engine softwareCross-site scripting (XSS) vulnerability in the search form in the administration/monitoring...CVE-2013-34134.3 MediumJuly 4, 2013
redhat enterprise virtualization managerRed Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions...CVE-2013-2144Fix available5.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-30204.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-29874.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-29854.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreDirectory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File...CVE-2013-29846.5 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-29826.5 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-05684.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-05674.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreMultiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling...CVE-2013-05606.5 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-05585.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreAn unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File...CVE-2013-05395.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreThe console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2...CVE-2013-04815.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly...CVE-2013-04794.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-04766.4 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...CVE-2013-04754.0 MediumJuly 3, 2013
ibm sterling b2b integrator, sterling file gateway +1 moreCross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling...CVE-2013-04683.5 LowJuly 3, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open