Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
August

CVEs published in August 2013

345 vulnerabilities, 49 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

puppet enterprisePuppet Enterprise before 3.0.1 does not set the secure flag for the session cookie in an https...CVE-2013-49645.0 MediumAugust 20, 2013
puppet enterpriseThe reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current...CVE-2013-49625.8 MediumAugust 20, 2013
puppet enterprisePuppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger...CVE-2013-49615.0 MediumAugust 20, 2013
puppet enterprisePuppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the...CVE-2013-49592.1 LowAugust 20, 2013
puppet enterprisePuppet Enterprise before 3.0.1 does not use a session timeout, which makes it easier for...CVE-2013-49586.9 MediumAugust 20, 2013
puppet, puppet enterprise +1 morePuppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and...CVE-2013-4956Fix available3.6 LowAugust 20, 2013
puppet enterpriseOpen redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote...CVE-2013-49555.8 MediumAugust 20, 2013
puppet enterprisePuppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out,...CVE-2013-47625.8 MediumAugust 20, 2013
puppet, puppet enterprise +1 morePuppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type serviceCVE-2013-4761Fix available5.1 MediumAugust 20, 2013
openstack keystoneOpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous...CVE-2013-2157Fix available4.3 MediumAugust 20, 2013
stanislas rolland static info tablesStatic Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site ScriptingCVE-2013-5323Fix available4.3 MediumAugust 20, 2013
jan bednarik cooluriCoolURI extension for TYPO3 vulnerable to SQL InjectionCVE-2013-5322Fix available7.5 HighAugust 20, 2013
spambot module project spambotCross-site scripting (XSS) vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x...CVE-2012-65822.6 LowAugust 20, 2013
alienvault open source security information managementMultiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management ...CVE-2013-5321Public exploit7.5 HighAugust 20, 2013
sourcetreesolutions mojoportalCross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8...CVE-2013-53204.3 MediumAugust 20, 2013
atlassian jiraCross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the...CVE-2013-53194.3 MediumAugust 20, 2013
benjamin arnaudetr ginkgocmsSQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL...CVE-2013-5318Public exploit7.5 HighAugust 20, 2013
ritecmsCross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to...CVE-2013-5317Public exploit3.5 LowAugust 20, 2013
ritecmsCross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to...CVE-2013-5316Public exploit6.8 MediumAugust 20, 2013
alcatel-lucent omnitouch 8400 instant communications suite, omnitouch 8460 advanced communication server, omnitouch 8660 my teamwork +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in...CVE-2013-46534.3 MediumAugust 20, 2013
apache santuario xml security for javaInefficient Algorithmic Complexity in Apache Santuario XML SecurityCVE-2013-2172Fix available4.3 MediumAugust 20, 2013
ows scaldCross-site scripting (XSS) vulnerability in the Resource Manager in the MEE submodule (mee.module...CVE-2013-53152.6 LowAugust 19, 2013
phpmyadmin, opensuse +1 morephpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking...CVE-2013-5029Fix available4.3 MediumAugust 19, 2013
redhat enterprise virtualizationVDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the...CVE-2013-4236Fix available2.7 LowAugust 19, 2013
ows scaldMultiple cross-site scripting (XSS) vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1...CVE-2013-41744.3 MediumAugust 19, 2013
apache cxfMissing XML Validation in Apache CXFCVE-2013-2160Public exploitFix availableEPSS 32.3%5.0 MediumAugust 19, 2013
apache cloudstackMultiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow...CVE-2013-21364.3 MediumAugust 19, 2013
redhat enterprise virtualizationVDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the...CVE-2013-0167Fix available2.7 LowAugust 19, 2013
apache cxf, redhat jboss enterprise application platform, jboss enterprise portal platform +3 more +5 moreInadequate Encryption Strength in Apache CXFCVE-2012-5575Public exploitFix available6.4 MediumAugust 19, 2013
s9y serendipityCross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1...CVE-2013-5314Public exploit4.3 MediumAugust 19, 2013
bigtreecms bigtree cmsCross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree...CVE-2013-53136.8 MediumAugust 19, 2013
vastal phpvidMultiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote...CVE-2013-5312Public exploit4.3 MediumAugust 19, 2013
vastal phpvidMultiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to...CVE-2013-5311Public exploit7.5 HighAugust 19, 2013
bigtreecms bigtree cmsCross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree...CVE-2013-4881Public exploit6.8 MediumAugust 19, 2013
canonical ubuntu linuxRace condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5...CVE-2013-21621.9 LowAugust 19, 2013
hp service center, service manager +1 moreUnspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2...CVE-2013-480810.0 HighAugust 18, 2013
php, canonical ubuntu linux, redhat enterprise linux +2 moreThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...CVE-2013-4248Fix available4.3 MediumAugust 18, 2013
happyworm jplayerjplayer Cross Site Scripting vulnerabilityCVE-2013-2022Fix available4.3 MediumAugust 17, 2013
libimobiledeviceuserpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local...CVE-2013-2142Fix available3.3 LowAugust 17, 2013
python, canonical ubuntu linux, opensuse +2 moreThe ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly...CVE-2013-4238Fix available4.3 MediumAugust 17, 2013
mauro lorenzutti wfqbeSQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows...CVE-2013-53107.5 HighAugust 16, 2013
fudforumCross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in...CVE-2013-53092.6 LowAugust 16, 2013
juralsulek realurlmanagementCross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension...CVE-2013-53084.3 MediumAugust 16, 2013
kennziffer ke searchCross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1...CVE-2013-53074.3 MediumAugust 16, 2013
die-netzmacher browserSQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5...CVE-2013-53067.5 HighAugust 16, 2013
joachim ruhs locatorCross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5...CVE-2013-53054.3 MediumAugust 16, 2013
joachim ruhs locatorSQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3...CVE-2013-53047.5 HighAugust 16, 2013
joachim ruhs locatorUnspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has...CVE-2013-530310.0 HighAugust 16, 2013
kennziffer ke searchSQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3...CVE-2013-53027.5 HighAugust 16, 2013
trustport webfilterDirectory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote...CVE-2013-53017.8 HighAugust 16, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open