Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
July

CVEs published in July 2013

489 vulnerabilities, 72 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

moodle, yahoo yui +1 moreYUI Cross-site Scripting (XSS) vulnerabilityCVE-2013-4940Fix available4.3 MediumJuly 26, 2013
moodle, yahoo yui +1 moreCross-Site Scripting in yuiCVE-2013-4939Fix available4.3 MediumJuly 26, 2013
moodleThe LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3...CVE-2013-49384.3 MediumJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute...CVE-2013-48017.5 HighJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute...CVE-2013-4800Public exploitEPSS 39.3%9.3 HighJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute...CVE-2013-47997.6 HighJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute...CVE-2013-4798Public exploitEPSS 67.0%10.0 HighJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute...CVE-2013-47977.5 HighJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute...CVE-2013-2370Public exploitEPSS 61.9%7.5 HighJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute...CVE-2013-23697.5 HighJuly 26, 2013
hp loadrunnerUnspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial...CVE-2013-23685.0 MediumJuly 26, 2013
hp application lifecycle managementCross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality...CVE-2013-48024.3 MediumJuly 26, 2013
cisco identity services engineThe firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports,...CVE-2013-34455.0 MediumJuly 26, 2013
liftweb liftLift Sensitive Information DisclosureCVE-2013-3300Fix available4.0 MediumJuly 26, 2013
redhat enterprise linux, enterprise linux desktop supplementary, enterprise linux server supplementary +1 more +3 moreUnquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise...CVE-2013-2231Fix available7.2 HighJuly 26, 2013
ruby-lang rubyThe OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1...CVE-2013-4073Fix available6.8 MediumJuly 26, 2013
asus dsl-n55u, rt-ac66u, rt-n14u +11 more +13 moreMultiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT...CVE-2013-493710.0 HighJuly 26, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check...CVE-2013-4015Public exploit6.9 MediumJuly 26, 2013
cisco video surveillance managerCisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to...CVE-2013-3431Public exploit7.8 HighJuly 25, 2013
cisco video surveillance managerCisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive...CVE-2013-3430Public exploit9.0 HighJuly 25, 2013
cisco video surveillance managerMultiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0...CVE-2013-3429Public exploitEPSS 10.2%7.8 HighJuly 25, 2013
cisco adaptive security appliance, adaptive security appliance software +1 moreCross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive...CVE-2013-34144.3 MediumJuly 25, 2013
ibm social media analyticsCross-site scripting (XSS) vulnerability in IBM Social Media Analytics 1.2 before FP1 allows...CVE-2013-39994.3 MediumJuly 24, 2013
ibm star command centerMultiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\Content\Help\ in the...CVE-2013-39793.5 LowJuly 24, 2013
cisco unified meetingplace web conferencingThe web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote...CVE-2013-34385.0 MediumJuly 24, 2013
cisco unified operations managerMultiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco...CVE-2013-34404.3 MediumJuly 23, 2013
cisco unified operations managerCross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote...CVE-2013-34394.3 MediumJuly 23, 2013
apache http servermod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds...CVE-2013-2249Fix availableEPSS 14.6%7.5 HighJuly 23, 2013
apache xerces2 java, ibm java, oracle jre +12 more +14 moreMissing XML Validation in Apache Xerces2CVE-2013-4002Public exploitFix availableEPSS 24.7%7.1 HighJuly 23, 2013
ibm javaUnspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2...CVE-2013-30129.3 HighJuly 23, 2013
ibm javaUnspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2...CVE-2013-30119.3 HighJuly 23, 2013
ibm javaUnspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1...CVE-2013-30109.3 HighJuly 23, 2013
ibm javaThe com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before...CVE-2013-30099.3 HighJuly 23, 2013
ibm javaUnspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows...CVE-2013-30089.3 HighJuly 23, 2013
ibm javaUnspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1...CVE-2013-30079.3 HighJuly 23, 2013
ibm javaUnspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows...CVE-2013-30069.3 HighJuly 23, 2013
samsung ps50c7700 television, ps50c7700 television firmware +1 moreThe DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial...CVE-2013-4890Public exploit7.8 HighJuly 22, 2013
cisco aironet 3600, aironet 3600e, aironet 3600i +1 more +3 moreCisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory...CVE-2013-34415.4 MediumJuly 22, 2013
redhat jboss enterprise application platform, jboss operations network, jboss web framework kit +5 more +7 moreRemote code execution due to insecure deserializationCVE-2013-2165Public exploitFix availableEPSS 12.7%7.5 HighJuly 22, 2013
cisco unified operations managerSQL injection vulnerability in the management application in Cisco Unified Operations Manager...CVE-2013-34376.5 MediumJuly 22, 2013
cisco unified ip conference station 7937g, unified ip conference station 7937g firmware +1 moreThe Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of...CVE-2013-34355.0 MediumJuly 22, 2013
squid-cache squid, opensuse +1 moreclient_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote...CVE-2013-4123Public exploitEPSS 80.5%5.0 MediumJuly 21, 2013
squid-cache squid, opensuse +1 moreBuffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3...CVE-2013-4115Fix availableEPSS 43.9%7.5 HighJuly 21, 2013
mediawiki Mageia, mediawiki-graphviz Mageia, mediawiki-ldapauthentication Mageia +1 more +3 moreUpdated mediawiki packages fix security vulnerabilitiesMGASA-2013-0226Fix availableNo scoreJuly 21, 2013
mcafee epolicy orchestrator, epolicy orchestrator agent +1 moreMultiple cross-site scripting (XSS) vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and...CVE-2013-4883Public exploit4.3 MediumJuly 21, 2013
mcafee epolicy orchestrator, epolicy orchestrator agent +1 moreMultiple SQL injection vulnerabilities in McAfee ePolicy Orchestrator 4.6.6 and earlier, and the...CVE-2013-4882Public exploit6.5 MediumJuly 21, 2013
david bagley xlockmoreThe (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not...CVE-2013-4143Fix available2.1 LowJuly 21, 2013
jeff ortel suds, opensuse, redhat enterprise linux +2 moreImproper Link Resolution Before File Access in SudsCVE-2013-2217Public exploitFix available1.2 LowJuly 21, 2013
oracle vm virtualboxUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...CVE-2013-3792Public exploitFix available3.8 LowJuly 21, 2013
mediawikiUnrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6...CVE-2013-2114Fix available6.8 MediumJuly 21, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open