Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
July

CVEs published in July 2013

489 vulnerabilities, 72 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

owncloud MageiaUpdated owncloud package fixes security vulnerabilitiesMGASA-2013-0220Fix availableNo scoreJuly 21, 2013
moodlemod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x...CVE-2013-22464.0 MediumJuly 21, 2013
moodlerss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4...CVE-2013-22454.0 MediumJuly 21, 2013
moodleMultiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x...CVE-2013-22444.3 MediumJuly 21, 2013
moodlemod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4...CVE-2013-22434.0 MediumJuly 21, 2013
moodlemod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8,...CVE-2013-22424.0 MediumJuly 21, 2013
hp database and middleware automationHP Database and Middleware Automation (DMA) 10.x before 10.10, when SSL is used, allows remote...CVE-2013-23657.9 HighJuly 19, 2013
hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1...CVE-2013-23643.5 LowJuly 19, 2013
hp system management homepageHP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive...CVE-2013-23635.0 MediumJuly 19, 2013
hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users...CVE-2013-23622.1 LowJuly 19, 2013
hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1...CVE-2013-23614.3 MediumJuly 19, 2013
hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote...CVE-2013-23604.0 MediumJuly 19, 2013
hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote...CVE-2013-23594.0 MediumJuly 19, 2013
hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote...CVE-2013-23584.0 MediumJuly 19, 2013
hp system management homepageUnspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote...CVE-2013-23574.0 MediumJuly 19, 2013
hp system management homepageHP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive...CVE-2013-23565.0 MediumJuly 19, 2013
hp system management homepageHP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended...CVE-2013-23555.0 MediumJuly 19, 2013
hp system management homepageHP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended...CVE-2012-52175.0 MediumJuly 19, 2013
swfupload project swfupload, tinymce image manager, wordpress +2 moreCross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as...CVE-2012-3414Public exploitFix available4.3 MediumJuly 19, 2013
cisco iosThe default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS...CVE-2013-34365.0 MediumJuly 18, 2013
emc avamar server, avamar server virtual edition +1 moreEMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s...CVE-2013-32754.3 MediumJuly 18, 2013
emc avamar server, avamar server virtual edition +1 moreEMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s...CVE-2013-32749.0 HighJuly 18, 2013
ibm api managementUnspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to...CVE-2013-05596.4 MediumJuly 18, 2013
parallels plesk panel, small business panel +1 moreThe default configuration of Parallels Plesk Panel 9.0.x and 9.2.x on UNIX, and Small Business...CVE-2013-4878Public exploitEPSS 33.3%7.5 HighJuly 18, 2013
ibm aix, vios +1 moreMultiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS...CVE-2013-4011Public exploit7.2 HighJuly 18, 2013
autonomy keyview idol, ibm lotus notes +1 moreBuffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8...CVE-2012-63499.3 HighJuly 18, 2013
verizon wireless network extenderThe Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication,...CVE-2013-48772.6 LowJuly 18, 2013
verizon wireless network extenderThe Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account,...CVE-2013-48766.2 MediumJuly 18, 2013
verizon wireless network extenderThe Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically...CVE-2013-48756.2 MediumJuly 18, 2013
verizon wireless network extenderThe Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically...CVE-2013-48746.2 MediumJuly 18, 2013
yahoo tumblrThe Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote...CVE-2013-48735.0 MediumJuly 18, 2013
google glassGoogle Glass before XE6 does not properly restrict the processing of QR codes, which allows...CVE-2013-48726.9 MediumJuly 18, 2013
siemens enterprise openscape branch, openscape session border controller +1 morecore/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border...CVE-2013-478110.0 HighJuly 18, 2013
siemens enterprise openscape branch, openscape session border controller +1 morecore/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border...CVE-2013-47807.8 HighJuly 18, 2013
siemens enterprise openscape branch, openscape session border controller +1 moreCross-site scripting (XSS) vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape...CVE-2013-47794.3 MediumJuly 18, 2013
siemens enterprise openscape branch, openscape session border controller +1 morecore/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border...CVE-2013-47787.8 HighJuly 18, 2013
file roller project roller, canonical ubuntu linux +1 moreDirectory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9...CVE-2013-4668Fix available5.0 MediumJuly 18, 2013
autodesk autocad, autocad lt, dwg trueview +11 more +13 moreUnspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG...CVE-2013-36656.8 MediumJuly 18, 2013
ui aircam, airvision firmware, aircam dome +1 more +3 moreBuffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision...CVE-2013-1606Public exploitEPSS 23.4%7.5 HighJuly 18, 2013
markus blaschke tq seoCross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo)...CVE-2013-48716.8 MediumJuly 18, 2013
news search project searchSQL injection vulnerability in the News Search (news_search) extension 0.1.0 for TYPO3 allows...CVE-2013-48707.5 HighJuly 18, 2013
cybozu officeCybozu Office 9.1.0 and earlier does not properly manage sessions, which allows remote attackers...CVE-2013-36565.8 MediumJuly 18, 2013
apache struts, archiva, fujitsu interstage business process manager analytics +1 more +3 moreCode injection in Apache StrutsCVE-2013-2251In KEVPublic exploitFix availableEPSS 100.0%9.8 CriticalJuly 18, 2013
apache strutsOpen redirect in Apache StrutsCVE-2013-2248Public exploitFix availableEPSS 94.7%5.8 MediumJuly 18, 2013
f5 nginx, fedoraproject fedora +1 moreThe ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows...CVE-2013-2028Public exploitEPSS 87.5%7.5 HighJuly 18, 2013
nashtech easy php calendarMultiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in...CVE-2013-19554.3 MediumJuly 18, 2013
apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2013-1879Fix available4.3 MediumJuly 18, 2013
cisco unified communications managerCisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service...CVE-2013-48690.0 LowJuly 18, 2013
cmu cyrus-saslCyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned...CVE-2013-4122Fix available4.3 MediumJuly 18, 2013
cisco unified communications managerUntrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through...CVE-2013-34346.8 MediumJuly 18, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open