Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
September

CVEs published in September 2013

465 vulnerabilities, 94 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco iosRace condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12...CVE-2013-54747.8 HighSeptember 27, 2013
cisco ios, ios xe +1 moreMemory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS...CVE-2013-54737.8 HighSeptember 27, 2013
cisco ios, ios xe +1 moreThe NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1...CVE-2013-54727.1 HighSeptember 27, 2013
graphite project graphitegraphite-web is vulnerable to Remote Code Execution via renderLocalView functionCVE-2013-5093Public exploitFix availableEPSS 38.8%6.8 MediumSeptember 27, 2013
openvz vzkernelvzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not...CVE-2013-22394.7 MediumSeptember 27, 2013
marketpress backwpup pluginCross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress...CVE-2013-46264.3 MediumSeptember 26, 2013
cisco unified computing systemThe management interface in the Central Software component in Cisco Unified Computing System (UCS...CVE-2012-40925.8 MediumSeptember 26, 2013
cisco unified computing systemThe FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an...CVE-2012-40884.3 MediumSeptember 26, 2013
cisco unified computing systemThe XML API service in the Fabric Interconnect component in Cisco Unified Computing System (UCS)...CVE-2012-40795.0 MediumSeptember 26, 2013
werner baumann davfs2WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via...CVE-2013-4362Public exploitFix available7.2 HighSeptember 26, 2013
click2sell suite moduleCross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows...CVE-2013-59384.3 MediumSeptember 25, 2013
click2sell suite moduleCross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal...CVE-2013-59376.8 MediumSeptember 25, 2013
wikkawikiCross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote...CVE-2013-55864.3 MediumSeptember 25, 2013
open-xchange appsuiteThe Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2...CVE-2013-59364.3 MediumSeptember 25, 2013
open-xchange appsuiteThe Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2...CVE-2013-59354.3 MediumSeptember 25, 2013
open-xchange appsuiteOpen-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded...CVE-2013-59344.0 MediumSeptember 25, 2013
google android, motorola defy xt +1 moreStack-based buffer overflow in the sub_E110 function in init in a certain configuration of...CVE-2013-59336.9 MediumSeptember 25, 2013
friends of symfony project fosuserbundleFriendsOfSymfony FOSUserBundle denial of service via login formCVE-2013-5750Fix available5.0 MediumSeptember 25, 2013
linux kernelarch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows...CVE-2013-5634Fix available4.3 MediumSeptember 25, 2013
ibm rational clearcaseThe RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses...CVE-2013-53736.9 MediumSeptember 25, 2013
open-xchange appsuiteThe (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7...CVE-2013-52007.5 HighSeptember 25, 2013
good for enterpriseCross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS...CVE-2013-5118Public exploit4.3 MediumSeptember 25, 2013
google android, motorola defy xt +1 moreA certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses...CVE-2013-47776.9 MediumSeptember 25, 2013
ibm data studio web console, db2 recovery expert, infosphere optim configuration manager +1 more +3 moreIBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere...CVE-2013-40251.9 LowSeptember 25, 2013
ibm data studio web console, db2 recovery expert, infosphere optim configuration manager +1 more +3 moreIBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere...CVE-2013-40244.3 MediumSeptember 25, 2013
ibm data studio web console, db2 recovery expert, infosphere optim configuration manager +1 more +3 moreIBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere...CVE-2013-40223.5 LowSeptember 25, 2013
cisco unified computing systemA setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows...CVE-2012-40865.1 MediumSeptember 25, 2013
linux kernelThe IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data...CVE-2013-4350Fix available5.0 MediumSeptember 25, 2013
linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local...CVE-2013-4343Fix available6.9 MediumSeptember 25, 2013
linux kernelThe scm_check_creds function in net/core/scm.c in the Linux kernel before 3.11 performs a...CVE-2013-4300Fix available7.2 HighSeptember 25, 2013
redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 moreThe remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x...CVE-2013-4296Fix available4.0 MediumSeptember 25, 2013
polarsslThe x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does...CVE-2013-46234.3 MediumSeptember 24, 2013
tenable security centerCross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7...CVE-2013-59114.3 MediumSeptember 24, 2013
esri arcgis serverThe mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated...CVE-2013-52213.5 LowSeptember 24, 2013
knowledgeview editorial and management applicationCross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management...CVE-2013-36164.3 MediumSeptember 24, 2013
dell idrac6 monolithic, idrac7, idrac6 firmware +1 more +3 moreCross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on...CVE-2013-35894.3 MediumSeptember 24, 2013
cisco unified computing systemBuffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified...CVE-2012-40945.4 MediumSeptember 24, 2013
cisco unified computing systemMCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to...CVE-2012-40896.6 MediumSeptember 24, 2013
cisco unified computing systemA cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS)...CVE-2012-40875.1 MediumSeptember 24, 2013
cisco unified computing systemThe Intelligent Platform Management Interface (IPMI) implementation in the Blade Management...CVE-2012-40855.0 MediumSeptember 24, 2013
cisco unified computing systemThe Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not...CVE-2012-40788.5 HighSeptember 24, 2013
sophos unified threat management softwareUnspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105...CVE-2013-593210.0 HighSeptember 23, 2013
real-estate-php-script real estate php scriptSQL injection vulnerability in property_listings_detail.php in Real Estate PHP Script allows...CVE-2013-59317.5 HighSeptember 23, 2013
real-estate-php-script real estate php scriptCross-site scripting (XSS) vulnerability in search_residential.php in Real Estate PHP Script...CVE-2013-59304.3 MediumSeptember 23, 2013
freebsdThe nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2...CVE-2013-57103.7 LowSeptember 23, 2013
freebsdThe sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2...CVE-2013-56664.7 MediumSeptember 23, 2013
synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain...CVE-2013-51196.8 MediumSeptember 23, 2013
openstack keystoneOpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI tokenCVE-2013-4294Fix available5.0 MediumSeptember 23, 2013
cgi hotscanStack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of...CVE-2012-26244.3 MediumSeptember 23, 2013
jforumOpen redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to...CVE-2012-53385.8 MediumSeptember 23, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open