Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
August

CVEs published in August 2013

345 vulnerabilities, 49 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

myrephp myre vacation rentalCross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation...CVE-2012-6587Public exploit4.3 MediumAugust 25, 2013
myrephp myre vacation rentalMultiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to...CVE-2012-6586Public exploit7.5 HighAugust 25, 2013
myrephp myre realty managerCross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote...CVE-2012-6585Public exploit4.3 MediumAugust 25, 2013
myrephp myre realty managerMultiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute...CVE-2012-6584Public exploit7.5 HighAugust 25, 2013
incredimailBuffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in...CVE-2010-5289Public exploit7.5 HighAugust 25, 2013
vmware player, workstation +1 morevmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on...CVE-2013-1662Public exploit6.9 MediumAugust 24, 2013
linux kernelThe validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on...CVE-2013-4254Fix available6.9 MediumAugust 24, 2013
linux kernelMemory leak in the unshare_userns function in kernel/user_namespace.c in the Linux kernel before...CVE-2013-4205Fix available4.7 MediumAugust 24, 2013
redhat cloudforms management engineThe Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary...CVE-2013-41728.5 HighAugust 23, 2013
apache qpid, redhat enterprise mrg +1 moreApache Qpid Python client Improper certificate validationCVE-2013-1909Fix available5.8 MediumAugust 23, 2013
puttyPuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that...CVE-2011-4607Fix available2.1 LowAugust 23, 2013
axel jung js css optimizerCross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1...CVE-2013-55704.3 MediumAugust 23, 2013
heiko sudar slideshareSQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers...CVE-2013-55697.5 HighAugust 23, 2013
imagemenu project imagemenuCross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for...CVE-2012-65832.1 LowAugust 23, 2013
djangoproject djangoDjango cross-site scripting (XSS) vulnerability via is_safe_url functionCVE-2013-6044Fix available4.3 MediumAugust 23, 2013
cisco unified communications manager, unified presence +1 moreMemory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and...CVE-2013-34537.8 HighAugust 22, 2013
ibm infosphere optim performance manager, optim performance manager +1 moreDirectory traversal vulnerability in IBM Optim Performance Manager 4.1.1 and IBM InfoSphere Optim...CVE-2013-29794.0 MediumAugust 22, 2013
libtiff, debian linux +1 moreUse-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in...CVE-2013-4232Fix available6.8 MediumAugust 22, 2013
libtiffMultiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of...CVE-2013-4231Fix available4.3 MediumAugust 22, 2013
zncZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference...CVE-2013-2130Fix available4.0 MediumAugust 22, 2013
djangoproject djangoDjango cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widgetCVE-2013-4249Fix available4.3 MediumAugust 22, 2013
phusion passengerinsecure temporary directory usage in passengerCVE-2013-4136Fix available4.4 MediumAugust 22, 2013
osisoft pi interfaceThe OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a...CVE-2013-28015.0 MediumAugust 22, 2013
osisoft pi interfaceThe OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a...CVE-2013-28005.0 MediumAugust 22, 2013
kepware kepserverexThe Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0...CVE-2013-27897.8 HighAugust 22, 2013
advantech webaccessCross-site scripting (XSS) vulnerability in Advantech WebAccess (formerly BroadWin WebAccess)...CVE-2013-2299Public exploit3.5 LowAugust 22, 2013
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-40053.5 LowAugust 21, 2013
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-40043.5 LowAugust 21, 2013
ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-30296.8 MediumAugust 21, 2013
ibm websphere application serverThe Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0...CVE-2013-29761.9 LowAugust 21, 2013
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-29674.3 MediumAugust 21, 2013
sixnet rtu firmware, udr +1 moreThe universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows...CVE-2013-280210.0 HighAugust 21, 2013
ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0...CVE-2013-05973.5 LowAugust 21, 2013
janrain php-openidPHP OpenID Library Denial of Service vulnerabilityCVE-2013-4701Fix available7.5 HighAugust 21, 2013
yahoo japan shoppingThe Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509...CVE-2013-47005.8 MediumAugust 21, 2013
yahoo yafuoku\!The Yahoo! Japan Yafuoku! application 4.3.0 and earlier for iOS and Android does not verify X.509...CVE-2013-46995.8 MediumAugust 21, 2013
ibm websphere portalIBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a...CVE-2013-30165.0 MediumAugust 21, 2013
ibm global console manager 16 firmware, global console manager 32 firmware +1 moreping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0...CVE-2013-0526Public exploit8.5 HighAugust 21, 2013
monster menus project menusThe mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7...CVE-2013-42306.0 MediumAugust 21, 2013
monster menus project menusCross-site scripting (XSS) vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for...CVE-2013-42292.1 LowAugust 21, 2013
google chrome, debian linux +1 moreThe SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0...CVE-2013-29055.0 MediumAugust 21, 2013
google chrome, debian linux +1 moreUse-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp...CVE-2013-29047.5 HighAugust 21, 2013
google chrome, debian linux +1 moreUse-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html...CVE-2013-29037.5 HighAugust 21, 2013
google chrome, debian linux +1 moreUse-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used...CVE-2013-29027.5 HighAugust 21, 2013
google chrome, debian linux +1 moreMultiple integer overflows in (1) libGLESv2/renderer/Renderer9.cpp and (2) libGLESv2/renderer...CVE-2013-29017.5 HighAugust 21, 2013
google chrome, debian linux +1 moreThe FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547...CVE-2013-29007.5 HighAugust 21, 2013
google chromeMultiple unspecified vulnerabilities in Google Chrome before 29.0.1547.57 allow attackers to...CVE-2013-28877.5 HighAugust 21, 2013
cacti(1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary...CVE-2013-1435Fix available7.5 HighAugust 21, 2013
cactiMultiple SQL injection vulnerabilities in (1) api_poller.php and (2) utility.php in Cacti before...CVE-2013-1434Fix available7.5 HighAugust 21, 2013
puppet enterprisePuppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via...CVE-2013-49675.0 MediumAugust 20, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open