Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
October

CVEs published in October 2013

570 vulnerabilities, 75 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

hp service managerCross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote...CVE-2013-48334.3 MediumOctober 16, 2013
hp service managerHP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive...CVE-2013-48324.0 MediumOctober 16, 2013
hp service managerHP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote...CVE-2013-48315.5 MediumOctober 16, 2013
hp service managerHP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an...CVE-2013-48307.5 HighOctober 16, 2013
canonical ubuntu linuxX.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of...CVE-2013-1056Fix available1.9 LowOctober 16, 2013
oxid-esales eshopCross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in...CVE-2013-59134.3 MediumOctober 15, 2013
dlitz pycryptoPyCrypto does not properly reseed PRNG before allowing accessCVE-2013-1445Fix available4.3 MediumOctober 15, 2013
cisco nx-osCisco NX-OS allows local users to gain privileges, and read or modify arbitrary files, via the...CVE-2012-41216.8 MediumOctober 14, 2013
cisco nx-osThe BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote...CVE-2012-40994.3 MediumOctober 14, 2013
cisco nx-osThe BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which...CVE-2012-40974.3 MediumOctober 14, 2013
cisco nx-osCisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e...CVE-2012-40776.8 MediumOctober 14, 2013
cisco nx-osCisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell...CVE-2012-40766.8 MediumOctober 14, 2013
cisco adaptive security appliance softwareThe Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2...CVE-2013-55157.8 HighOctober 13, 2013
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39),...CVE-2013-55137.1 HighOctober 13, 2013
cisco adaptive security appliance softwareRace condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security...CVE-2013-55127.1 HighOctober 13, 2013
cisco adaptive security appliance softwareThe Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive...CVE-2013-551110.0 HighOctober 13, 2013
cisco adaptive security appliance softwareThe remote-access VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 7.x...CVE-2013-55104.3 MediumOctober 13, 2013
cisco adaptive security appliance softwareThe SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6)...CVE-2013-550910.0 HighOctober 13, 2013
cisco adaptive security appliance software, firewall services module software +1 moreThe SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2...CVE-2013-55087.1 HighOctober 13, 2013
cisco adaptive security appliance softwareThe IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7),...CVE-2013-55077.1 HighOctober 13, 2013
cisco firewall services module softwareThe authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3...CVE-2013-55066.6 MediumOctober 13, 2013
hp imc service operation management software module, intelligent management center +1 moreSQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service...CVE-2013-48277.5 HighOctober 13, 2013
hp imc service operation management software module, intelligent management center +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation...CVE-2013-4826EPSS 31.6%5.0 MediumOctober 13, 2013
hp imc service operation management software module, intelligent management center +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation...CVE-2013-48257.5 HighOctober 13, 2013
hp imc service operation management software module, intelligent management center +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation...CVE-2013-4824EPSS 23.9%7.5 HighOctober 13, 2013
hp imc branch intelligent management system software module, intelligent management center +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent...CVE-2013-4823EPSS 37.5%5.0 MediumOctober 13, 2013
hp imc branch intelligent management system software module, intelligent management center +1 moreUnspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent...CVE-2013-4822Public exploitEPSS 62.6%10.0 HighOctober 13, 2013
ibm business process monitorUnspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows...CVE-2013-480410.0 HighOctober 13, 2013
ibm infosphere information serverCross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information...CVE-2013-40566.8 MediumOctober 13, 2013
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3)...CVE-2013-34157.8 HighOctober 13, 2013
alstom e-terracontrolAlstom e-terracontrol 3.5, 3.6, and 3.7 allows remote attackers to cause a denial of service ...CVE-2013-27877.8 HighOctober 13, 2013
ibm business process monitorUnspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows...CVE-2013-236610.0 HighOctober 13, 2013
invensys wonderware intouchInvensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary...CVE-2012-47096.9 MediumOctober 13, 2013
cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to...CVE-2012-41086.8 MediumOctober 13, 2013
cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to...CVE-2012-41074.6 MediumOctober 13, 2013
cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege...CVE-2012-41066.8 MediumOctober 13, 2013
cisco unified computing systemThe fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to...CVE-2012-41054.6 MediumOctober 13, 2013
apache mod fcgid, debian linux, opensuse +2 more +4 moreHeap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the...CVE-2013-4365Fix availableEPSS 13.6%7.5 HighOctober 12, 2013
mostgear easy lan folder shareBuffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a...CVE-2013-6079Public exploit7.2 HighOctober 11, 2013
videolan vlc media playerBuffer overflow in the mp4a packetizer (modules/packetizer/mpeg4audio.c) in VideoLAN VLC Media...CVE-2013-4388Fix available6.8 MediumOctober 11, 2013
qemuUse-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows...CVE-2013-4377Fix available2.3 LowOctober 11, 2013
condor project condor, redhat enterprise mrg +1 moreThe policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle...CVE-2013-4255Fix available3.5 LowOctober 11, 2013
richard cook rgpgrgpg Code Injection vulnerabilityCVE-2013-4203Fix available7.5 HighOctober 11, 2013
cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) before 1.11.7 allows remote...CVE-2013-41674.3 MediumOctober 11, 2013
status statusnetMultiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote...CVE-2013-41377.5 HighOctober 11, 2013
blackberry enterprise serviceThe BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1...CVE-2013-36937.9 HighOctober 11, 2013
condor project condor, redhat enterprise mrg +1 moreThe policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a...CVE-2009-51364.0 MediumOctober 11, 2013
dell bsafe crypto-c-micro-edition, bsafe crypto-j +1 moreThe NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit...CVE-2007-6755Fix available5.8 MediumOctober 11, 2013
kwoksys information serverSQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8...CVE-2013-5028Public exploit6.5 MediumOctober 11, 2013
mediawikiCross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser...CVE-2013-43066.8 MediumOctober 11, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open