Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
October

CVEs published in October 2013

570 vulnerabilities, 75 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

mediawikiCross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi...CVE-2013-43054.3 MediumOctober 11, 2013
ovislink airlive poe2600hd, airlive od-2025hd, airlive od-2060hd +3 more +5 moreAirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly...CVE-2013-3687Public exploit7.8 HighOctober 11, 2013
ovislink airlive wl2600camcgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote...CVE-2013-3686Public exploitEPSS 27.6%10.0 HighOctober 11, 2013
tp-link tl-sc3130, tl-sc3130g, tl-sc3171 +2 more +4 morecgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and...CVE-2013-2581Public exploit7.8 HighOctober 11, 2013
tp-link tl-sc3130, tl-sc3130g, tl-sc3171 +2 more +4 moreUnrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL...CVE-2013-2580Public exploit7.1 HighOctober 11, 2013
tp-link tl-sc3130, tl-sc3130g, tl-sc3171 +2 more +4 moreTP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before...CVE-2013-2579Public exploit10.0 HighOctober 11, 2013
tp-link tl-sc3130, tl-sc3130g, tl-sc3171 +2 more +4 morecgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and...CVE-2013-2578Public exploitEPSS 73.7%10.0 HighOctober 11, 2013
cisco unified ip phone 9951, unified ip phone 9971, unified ip phones 9900 series firmware +2 moreThe image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain...CVE-2013-55336.0 MediumOctober 11, 2013
cisco unified ip phone 9951, unified ip phone 9971, unified ip phones 9900 series firmware +2 moreBuffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers...CVE-2013-55325.0 MediumOctober 11, 2013
cisco unified communications managerDirectory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified...CVE-2013-5528Public exploitEPSS 23.3%4.0 MediumOctober 11, 2013
systemd project systemd, debian linux +1 moreThe SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change...CVE-2013-4394Fix available5.9 MediumOctober 11, 2013
systemd project systemd, debian linux +1 moreInteger overflow in the valid_user_field function in journal/journald-native.c in systemd allows...CVE-2013-4391Fix available7.5 HighOctober 11, 2013
drupalCross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when...CVE-2013-02442.6 LowOctober 11, 2013
drupalCross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6...CVE-2012-08266.8 MediumOctober 11, 2013
drupalDrupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX)...CVE-2012-08256.8 MediumOctober 11, 2013
cisco ios, ios xe +1 moreThe OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of...CVE-2013-55275.7 MediumOctober 10, 2013
cisco unified ip phone 9951, unified ip phone 9971 +1 moreCisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows...CVE-2013-55267.1 HighOctober 10, 2013
cisco identity services engine softwareSQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and...CVE-2013-55256.5 MediumOctober 10, 2013
cisco identity services engine softwareCross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services...CVE-2013-55244.3 MediumOctober 10, 2013
cisco identity services engine softwareThe Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly...CVE-2013-55234.3 MediumOctober 10, 2013
cisco iosThe remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of...CVE-2013-54995.7 MediumOctober 10, 2013
symantec management platformThe agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2...CVE-2013-50084.6 MediumOctober 10, 2013
x x.org x11Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server...CVE-2013-4396Fix available6.5 MediumOctober 10, 2013
cisco prime central for hosted collaboration solutionThe portal in Cisco Prime Central for Hosted Collaboration Solution (HCS) places cleartext...CVE-2013-34094.3 MediumOctober 10, 2013
ibm infosphere optim data growth for oracle e-business suiteCross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data...CVE-2013-05804.9 MediumOctober 10, 2013
ibm infosphere optim data growth for oracle e-business suiteThe Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through...CVE-2013-05794.3 MediumOctober 10, 2013
ibm infosphere optim data growth for oracle e-business suiteThe Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through...CVE-2013-05775.2 MediumOctober 10, 2013
process-one ejabberdThe TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes...CVE-2013-6169Fix available4.3 MediumOctober 10, 2013
eucalyptusUnspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.CVE-2013-476710.0 HighOctober 10, 2013
linux kernelnet/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for...CVE-2013-4387Fix available6.1 MediumOctober 10, 2013
restletRestlet Arbitrary Java Code Execution via a serialized objectCVE-2013-4271Fix available7.5 HighOctober 10, 2013
restletRestlet is vulnerable to Arbitrary Java Code Execution via crafted XMLCVE-2013-4221Fix available7.5 HighOctober 10, 2013
menalto gallerymodules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass...CVE-2013-22415.0 MediumOctober 10, 2013
menalto gallerylib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which...CVE-2013-22407.5 HighOctober 10, 2013
menalto galleryThe (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove...CVE-2013-21387.5 HighOctober 10, 2013
gnome librsvgGNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document...CVE-2013-1881Fix available4.3 MediumOctober 10, 2013
xinetd, redhat enterprise linux +1 morexinetd does not enforce the user and group configuration directives for TCPMUX services, which...CVE-2013-4342Fix available7.6 HighOctober 9, 2013
gnupg, canonical ubuntu linux +1 moreThe compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote...CVE-2013-4402Fix available5.0 MediumOctober 9, 2013
gnupgGnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage...CVE-2013-4351Fix available5.8 MediumOctober 9, 2013
ruby-lang ruby, rubygems +1 moreRubyGems Regular Expression Denial of ServiceCVE-2013-4363Fix available4.3 MediumOctober 9, 2013
ruby-lang ruby, rubygems, redhat enterprise linux +2 moreRubyGems Regular Expression Denial of Service vulnerabilityCVE-2013-4287Fix available4.3 MediumOctober 9, 2013
ssmtp MageiaUpdated ssmtp package fixes security vulnerabilityMGASA-2013-0296Fix availableNo scoreOctober 9, 2013
xenXen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is...CVE-2013-4356Fix available5.4 MediumOctober 9, 2013
cartpauj mingle-forumMultiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and...CVE-2013-07366.8 MediumOctober 9, 2013
gnu glibcStack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17...CVE-2012-4424Fix available5.1 MediumOctober 9, 2013
sebastien corbin make meeting scheduler moduleThe Make Meeting Scheduler module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to...CVE-2013-43796.4 MediumOctober 9, 2013
alienvault open source security information managementMultiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management ...CVE-2013-5967Public exploitEPSS 18.6%7.5 HighOctober 9, 2013
joomla joomla\!administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before...CVE-2013-5576Public exploitEPSS 48.2%6.8 MediumOctober 9, 2013
adobe robohelpMDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of...CVE-2013-532710.0 HighOctober 9, 2013
adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute...CVE-2013-53259.3 HighOctober 9, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open