Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
September

CVEs published in September 2013

465 vulnerabilities, 94 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

gomlab gom playerBuffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack...CVE-2013-571510.0 HighSeptember 9, 2013
videowhisper live streaming integrationMultiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live...CVE-2013-57144.3 MediumSeptember 9, 2013
twilightcms twilight cmsDirectory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in...CVE-2013-4900Public exploit5.0 MediumSeptember 9, 2013
twilightcms twilight cmsCross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote...CVE-2013-48994.3 MediumSeptember 9, 2013
ibm websphere commerceThe Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term...CVE-2013-29924.3 MediumSeptember 9, 2013
prosoft-technology radiolinx controlscapeProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding...CVE-2013-28039.3 HighSeptember 9, 2013
trianglemicroworks scada data gateway, .net communication protocol components, ansi c source code libraries +2 moreTriangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components...CVE-2013-27944.9 MediumSeptember 9, 2013
trianglemicroworks scada data gateway, .net communication protocol components, ansi c source code libraries +2 moreTriangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components...CVE-2013-27937.8 HighSeptember 9, 2013
matrikonopc scada dnp3 opc serverMatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service ...CVE-2013-27917.1 HighSeptember 9, 2013
ibm rational policy testerIBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers...CVE-2013-40626.8 MediumSeptember 9, 2013
ibm rational policy testerIBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes...CVE-2013-40614.0 MediumSeptember 9, 2013
ibm soliddbA SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3...CVE-2013-30313.5 LowSeptember 9, 2013
advanceprotech advancewareAdvancePro Advanceware allows remote authenticated users to obtain sensitive information about...CVE-2013-35964.0 MediumSeptember 8, 2013
ibm security appscanIBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout...CVE-2013-29971.7 LowSeptember 8, 2013
ibm security appscanThe SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites...CVE-2013-05315.0 MediumSeptember 8, 2013
cisco socialminerCross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote...CVE-2013-54834.3 MediumSeptember 8, 2013
apple airport base station firmwareApple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths...CVE-2013-51325.4 MediumSeptember 8, 2013
supermicro h8scm-f, h8sgl-f, x9sbaa-f +130 more +132 moreThe web interface in the Intelligent Platform Management Interface (IPMI) implementation on...CVE-2013-360910.0 HighSeptember 8, 2013
supermicro h8scm-f, h8sgl-f, x9sbaa-f +130 more +132 moreThe web interface in the Intelligent Platform Management Interface (IPMI) implementation on...CVE-2013-360810.0 HighSeptember 8, 2013
supermicro h8scm-f, h8sgl-f, x9sbaa-f +130 more +132 moreMultiple stack-based buffer overflows in the web interface in the Intelligent Platform Management...CVE-2013-360710.0 HighSeptember 8, 2013
cisco adaptive security appliance softwareCisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509...CVE-2013-34587.1 HighSeptember 8, 2013
debian phpbb3Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files,...CVE-2013-5724Fix available2.1 LowSeptember 7, 2013
trivantis coursemill learning management systemCoursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values,...CVE-2013-57086.8 MediumSeptember 6, 2013
trivantis coursemill learning management systemMultiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS...CVE-2013-57074.3 MediumSeptember 6, 2013
trivantis coursemill learning management systemMultiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS...CVE-2013-57064.3 MediumSeptember 6, 2013
trivantis coursemill learning management systemCross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6...CVE-2013-36056.8 MediumSeptember 6, 2013
trivantis coursemill learning management systemMultiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS...CVE-2013-36044.3 MediumSeptember 6, 2013
trivantis coursemill learning management systemCross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6...CVE-2013-36034.3 MediumSeptember 6, 2013
trivantis coursemill learning management systemSQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System ...CVE-2013-36027.5 HighSeptember 6, 2013
trivantis coursemill learning management systemCoursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls,...CVE-2013-36016.0 MediumSeptember 6, 2013
trivantis coursemill learning management systemCoursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain...CVE-2013-36008.5 HighSeptember 6, 2013
trivantis coursemill learning management systemuserlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers...CVE-2013-35999.3 HighSeptember 6, 2013
cisco jabberCisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in...CVE-2013-12284.3 MediumSeptember 6, 2013
cisco webex recording format playerBuffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N...CVE-2013-11199.3 HighSeptember 6, 2013
cisco webex recording format playerStack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16,...CVE-2013-11189.3 HighSeptember 6, 2013
cisco webex recording format playerBuffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD...CVE-2013-11179.3 HighSeptember 6, 2013
cisco webex advanced recording format playerBuffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16,...CVE-2013-11169.3 HighSeptember 6, 2013
cisco webex advanced recording format playerBuffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16,...CVE-2013-11159.3 HighSeptember 6, 2013
cisco prime network control system, wireless control system +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime...CVE-2012-59904.3 MediumSeptember 6, 2013
open-xchange appsuite, server +1 moreCross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16,...CVE-2013-56983.5 LowSeptember 5, 2013
htmlcleaner project htmlcleaner, open-xchange appsuite +1 moreMultiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before...CVE-2013-50354.9 MediumSeptember 5, 2013
open-xchange appsuiteOpen-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2...CVE-2013-47903.5 LowSeptember 5, 2013
emc rsa archer egrcOpen redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to...CVE-2013-32775.8 MediumSeptember 5, 2013
emc rsa archer egrcEMC RSA Archer GRC 5.x before 5.4 allows remote authenticated users to bypass intended access...CVE-2013-32766.0 MediumSeptember 5, 2013
open-xchange appsuite, server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6...CVE-2013-31064.3 MediumSeptember 5, 2013
open-xchange appsuite, server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6...CVE-2013-25834.3 MediumSeptember 5, 2013
open-xchange appsuite, server +1 moreCRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6...CVE-2013-25825.0 MediumSeptember 5, 2013
open-xchange serverOXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before...CVE-2013-1651Public exploit5.8 MediumSeptember 5, 2013
open-xchange serverOpen-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak...CVE-2013-1650Public exploit2.1 LowSeptember 5, 2013
open-xchange serverOpen-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the...CVE-2013-1649Public exploit4.3 MediumSeptember 5, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open