Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
October

CVEs published in October 2013

570 vulnerabilities, 75 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

juniper junosJuniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2,...CVE-2013-61704.3 MediumOctober 17, 2013
juniper junosJuniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44...CVE-2013-60154.3 MediumOctober 17, 2013
juniper junosBuffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11...CVE-2013-60136.8 MediumOctober 17, 2013
juniper junosJ-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12...CVE-2013-46895.1 MediumOctober 17, 2013
xenUse-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in...CVE-2013-4371Fix available4.4 MediumOctober 17, 2013
xenThe ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain...CVE-2013-4370Fix available4.6 MediumOctober 17, 2013
xenThe xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users...CVE-2013-4369Fix available1.9 LowOctober 17, 2013
xenThe outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS:...CVE-2013-4368Fix available1.9 LowOctober 17, 2013
apache org.apache.sling.servlets.postImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache SlingCVE-2013-2254Fix available5.0 MediumOctober 17, 2013
clutter project clutter, opensuse +1 moreThe translate_hierarchy_event function in x11/clutter-device-manager-xi2.c in Clutter, when...CVE-2013-2190Fix available2.1 LowOctober 17, 2013
quassel-irc quassel ircSQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8...CVE-2013-4422Fix available6.8 MediumOctober 17, 2013
quaggaStack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api...CVE-2013-2236Fix available2.6 LowOctober 17, 2013
feep libtar, redhat enterprise linux +1 moreMultiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow...CVE-2013-4397Fix available6.8 MediumOctober 17, 2013
aircrack-ng, gentoo linux +1 moreMultiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a...CVE-2010-1159Public exploitFix available6.8 MediumOctober 17, 2013
nmap, opensuse +1 moreThe http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath...CVE-2013-4885Public exploitFix available6.8 MediumOctober 17, 2013
ibm storwize v7000 unified, storwize v7000 unified software +1 moreCross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4...CVE-2013-53764.3 MediumOctober 17, 2013
rubyonrails rails, debian linux, opensuse +2 moreactionmailer email address processing causes Denial of serviceCVE-2013-4389Fix available4.3 MediumOctober 17, 2013
ibm rational focal pointMultiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x...CVE-2013-30254.3 MediumOctober 17, 2013
ibm storwize v7000 unified, storwize v7000 unified software +1 moreIBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files...CVE-2013-05005.4 MediumOctober 17, 2013
emc atmosEMC Atmos before 2.1.4 has a blank password for the PostgreSQL account, which allows remote...CVE-2013-32795.0 MediumOctober 16, 2013
google chromeMultiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to...CVE-2013-29287.5 HighOctober 16, 2013
google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html...CVE-2013-29276.8 MediumOctober 16, 2013
google chromeUse-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core...CVE-2013-29266.8 MediumOctober 16, 2013
google chromeUse-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome...CVE-2013-29256.8 MediumOctober 16, 2013
oracle siebel crmUnspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel...CVE-2013-58675.0 MediumOctober 16, 2013
oracle sunosUnspecified vulnerability in Oracle Solaris 11.1 allows local users to affect confidentiality,...CVE-2013-58665.2 MediumOctober 16, 2013
oracle sunosUnspecified vulnerability in Oracle Solaris 11.1 allows local users to affect availability via...CVE-2013-58651.7 LowOctober 16, 2013
oracle sunosUnspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability...CVE-2013-58644.9 MediumOctober 16, 2013
oracle sunosUnspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect integrity via...CVE-2013-58634.3 MediumOctober 16, 2013
oracle sunosUnspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability...CVE-2013-58624.9 MediumOctober 16, 2013
oracle sunosUnspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect availability...CVE-2013-58614.3 MediumOctober 16, 2013
oracle primavera products suiteUnspecified vulnerability in the Instantis EnterpriseTrack component in Oracle Primavera Products...CVE-2013-58595.0 MediumOctober 16, 2013
oracle industry applicationsUnspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry...CVE-2013-58573.6 LowOctober 16, 2013
oracle industry applicationsUnspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry...CVE-2013-58563.6 LowOctober 16, 2013
oracle javafx, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows...CVE-2013-58542.6 LowOctober 16, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java...CVE-2013-58527.6 HighOctober 16, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and...CVE-2013-58515.0 MediumOctober 16, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-58509.3 HighOctober 16, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-58494.3 MediumOctober 16, 2013
oracle javafx, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and...CVE-2013-58485.0 MediumOctober 16, 2013
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise HRMS eCompensation component in Oracle...CVE-2013-58474.0 MediumOctober 16, 2013
oracle javafx, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier,...CVE-2013-58469.3 HighOctober 16, 2013
oracle ilearningUnspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0...CVE-2013-58454.3 MediumOctober 16, 2013
oracle javafx, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows...CVE-2013-58449.3 HighOctober 16, 2013
oracle javafx, jdk, jre +5 more +7 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-584310.0 HighOctober 16, 2013
canonical ubuntu linux, oracle jdk, jre +5 more +7 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-5842Public exploitEPSS 17.6%10.0 HighOctober 16, 2013
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2013-58415.0 MediumOctober 16, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-58405.0 MediumOctober 16, 2013
sun sunosUnspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect integrity via...CVE-2013-58394.3 MediumOctober 16, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and...CVE-2013-58389.3 HighOctober 16, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open