Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
September

CVEs published in September 2013

465 vulnerabilities, 94 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

apple mac os x, iphone os +1 moreThe IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not...CVE-2013-10285.8 MediumSeptember 16, 2013
apple mac os xInstaller in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation...CVE-2013-10276.8 MediumSeptember 16, 2013
apple mac os x, iphone os +1 moreBuffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute...CVE-2013-10266.8 MediumSeptember 16, 2013
apple mac os x, iphone os +1 moreBuffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to...CVE-2013-10256.8 MediumSeptember 16, 2013
librawThe "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context...CVE-2013-1439Fix available4.3 MediumSeptember 16, 2013
jean-paul calderone pyopenssl, canonical ubuntu linux +1 morePyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative NameCVE-2013-4314Fix available4.3 MediumSeptember 13, 2013
mediawikiincludes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x...CVE-2013-4303Fix available6.1 MediumSeptember 13, 2013
mediawikiincludes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x...CVE-2013-4301Fix available5.0 MediumSeptember 13, 2013
apache subversionSvnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to...CVE-2013-4277Fix available3.3 LowSeptember 13, 2013
wiresharkThe dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x...CVE-2013-5721Fix available4.3 MediumSeptember 13, 2013
wiresharkepan/dissectors/packet-assa_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1...CVE-2013-5719Fix available4.3 MediumSeptember 13, 2013
wiresharkThe Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a...CVE-2013-5717Fix available4.3 MediumSeptember 13, 2013
hp identity driven manager, procurve manager +1 moreThe Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and...CVE-2013-481310.0 HighSeptember 13, 2013
hp identity driven manager, procurve manager +1 moreUpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4...CVE-2013-4812Public exploitEPSS 51.9%10.0 HighSeptember 13, 2013
hp identity driven manager, procurve manager +1 moreUpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20...CVE-2013-4811Public exploitEPSS 71.3%10.0 HighSeptember 13, 2013
hp application lifecycle management, procurve manager, hewlett packard (hp) procurve manager (pcm), pcm+, identity driven manager (idm), and application lifecycle management +2 moreHP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and...CVE-2013-4810In KEVPublic exploitEPSS 79.5%9.8 CriticalSeptember 13, 2013
hp identity driven manager, procurve manager +1 moreMultiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and...CVE-2013-48097.5 HighSeptember 13, 2013
linux kerneldrivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel...CVE-2013-2899Fix available4.7 MediumSeptember 13, 2013
linux kerneldrivers/hid/hid-sensor-hub.c in the Human Interface Device (HID) subsystem in the Linux kernel...CVE-2013-2898Fix available1.9 LowSeptember 13, 2013
linux kerneldrivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through...CVE-2013-2896Fix available4.7 MediumSeptember 13, 2013
linux kerneldrivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel...CVE-2013-2895Fix available5.4 MediumSeptember 13, 2013
linux kerneldrivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel...CVE-2013-2894Fix available4.7 MediumSeptember 13, 2013
linux kerneldrivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel...CVE-2013-2891Fix available4.7 MediumSeptember 13, 2013
linux kerneldrivers/hid/hid-sony.c in the Human Interface Device (HID) subsystem in the Linux kernel through...CVE-2013-28904.7 MediumSeptember 13, 2013
gnu glibc, canonical ubuntu linux +1 moreThe ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21...CVE-2015-1472Fix available7.5 HighSeptember 13, 2013
gnu glibc, apple mac os x, debian linux +14 more +16 moreHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...CVE-2015-0235Public exploitFix availableEPSS 94.6%10.0 HighSeptember 13, 2013
gnu glibc, canonical ubuntu linux, opensuse +2 moreThe nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS...CVE-2014-9402Fix available7.8 HighSeptember 13, 2013
gnu glibc, canonical ubuntu linux, debian linux +1 more +3 moreThe wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag,...CVE-2014-7817Fix available4.6 MediumSeptember 13, 2013
gnu glibcGNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of...CVE-2014-6040Fix available5.0 MediumSeptember 13, 2013
gnu glibc, debian linux +1 moreOff-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka...CVE-2014-5119Public exploitFix availableEPSS 17.0%7.5 HighSeptember 13, 2013
gnu glibc, canonical ubuntu linux, opensuse +1 more +3 moreThe send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does...CVE-2013-7423Fix available5.0 MediumSeptember 13, 2013
gnu eglibc, glibc +1 moreThe PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier,...CVE-2013-4788Public exploitFix availableEPSS 11.4%5.1 MediumSeptember 13, 2013
eglibc, canonical ubuntu linux, debian linux +2 more +4 moreThe eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could...CVE-2013-43577.5 HighSeptember 13, 2013
gnu glibc, redhat enterprise linux +1 moreMultiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and...CVE-2013-4332Fix available4.3 MediumSeptember 13, 2013
gnu glibcsysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows...CVE-2013-4237Fix available6.8 MediumSeptember 13, 2013
gnu glibcInteger overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier...CVE-2012-4412Public exploitFix availableEPSS 17.5%7.5 HighSeptember 13, 2013
gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and...CVE-2012-3406Fix available6.8 MediumSeptember 13, 2013
gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...CVE-2012-3405Fix available5.0 MediumSeptember 13, 2013
gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and...CVE-2012-3404Fix available5.0 MediumSeptember 13, 2013
juniper ive osMultiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service ...CVE-2013-56494.3 MediumSeptember 13, 2013
cisco virtualization experience client 6000, virtualization experience client 6000 series firmware +1 moreThe diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices...CVE-2013-54936.8 MediumSeptember 13, 2013
cisco socialmineradministration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information...CVE-2013-54925.0 MediumSeptember 13, 2013
cisco socialminerThe gadget implementation in Cisco SocialMiner does not properly restrict the content of GET...CVE-2013-54895.0 MediumSeptember 13, 2013
cisco prime lan management solutionCisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements,...CVE-2013-54824.3 MediumSeptember 13, 2013
opera browserCross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject...CVE-2013-47054.3 MediumSeptember 13, 2013
wiresharkUnspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x...CVE-2013-5722Fix available4.3 MediumSeptember 13, 2013
wiresharkBuffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2...CVE-2013-5720Fix available5.0 MediumSeptember 13, 2013
wiresharkThe dissect_nbap_T_dCH_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in...CVE-2013-5718Fix available4.3 MediumSeptember 13, 2013
mediawiki(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5)...CVE-2013-4302Fix available5.0 MediumSeptember 13, 2013
intel c206 chipset, c202 chipset, c204 chipset +7 more +9 moreUnspecified vulnerability in the Intel Trusted Execution Technology (TXT) SINIT Authenticated...CVE-2013-57406.9 MediumSeptember 12, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open