Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
October

CVEs published in October 2013

570 vulnerabilities, 75 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

videolan vlc media playerVideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service ...CVE-2013-6283Public exploitFix available7.5 HighOctober 25, 2013
puppet enterprisePuppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts...CVE-2013-49655.0 MediumOctober 25, 2013
puppet enterpriseThe dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML...CVE-2013-49576.8 MediumOctober 25, 2013
simplemachines simple machines forumUnrestricted file upload vulnerability in the avatar upload functionality in Simple Machines...CVE-2013-44654.6 MediumOctober 25, 2013
canonical ubuntu linuxApport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries,...CVE-2013-10674.9 MediumOctober 25, 2013
dropbear ssh project sshDropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with...CVE-2013-4434Public exploitFix available5.0 MediumOctober 25, 2013
dropbear ssh project sshThe buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote...CVE-2013-4421Fix available5.0 MediumOctober 25, 2013
urbanairship python-oauth2SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate noncesCVE-2013-4347Fix available5.8 MediumOctober 25, 2013
wellintech kingviewThe KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech...CVE-2013-6128Public exploit5.8 MediumOctober 25, 2013
wellintech kingviewThe SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in...CVE-2013-6127Public exploitEPSS 13.9%5.8 MediumOctober 25, 2013
ibm flex system managerIBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access...CVE-2013-54246.8 MediumOctober 25, 2013
ibm security appscanIBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password...CVE-2013-39893.5 LowOctober 25, 2013
dhtmlx dhtmlxspreadsheetCross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet ...CVE-2013-62814.3 MediumOctober 25, 2013
linksalpha social sharing toolkit pluginCross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for...CVE-2013-62804.3 MediumOctober 25, 2013
cisco ios xrCisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP...CVE-2013-55497.1 HighOctober 25, 2013
cisco identity services engine softwareCisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass...CVE-2013-55315.0 MediumOctober 25, 2013
cisco identity services engine softwareThe web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1...CVE-2013-55309.0 HighOctober 25, 2013
cisco ios, catalyst 3750-x +1 moreCisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it...CVE-2013-55226.8 MediumOctober 25, 2013
cisco identity services engine softwareCisco Identity Services Engine does not properly restrict the creation of guest accounts, which...CVE-2013-55215.0 MediumOctober 25, 2013
emc rsa authentication agentEMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a...CVE-2013-32807.5 HighOctober 25, 2013
cisco content security management appliance, web security appliance, email security appliance firmware +2 moreThe web framework on Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and...CVE-2013-55377.8 HighOctober 24, 2013
cisco secure access control systemCisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall...CVE-2013-55365.0 MediumOctober 24, 2013
apple keynoteApple Keynote before 6.0 does not properly handle the interaction between Keynote presentation...CVE-2013-51487.2 HighOctober 24, 2013
apple os x serverThe RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509...CVE-2013-51436.8 MediumOctober 24, 2013
apple safariWebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web...CVE-2013-51305.0 MediumOctober 24, 2013
mozilla bugzillaMultiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x...CVE-2013-1743Public exploit4.3 MediumOctober 24, 2013
mozilla bugzillaMultiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x,...CVE-2013-1742Public exploit4.3 MediumOctober 24, 2013
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x...CVE-2013-17346.8 MediumOctober 24, 2013
mozilla bugzillaCross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1...CVE-2013-17336.8 MediumOctober 24, 2013
dell quest one password managerThe Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA...CVE-2013-6246Public exploit5.0 MediumOctober 24, 2013
apple mac os xThe USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of...CVE-2013-51924.9 MediumOctober 24, 2013
apple mac os xThe syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive...CVE-2013-51912.1 LowOctober 24, 2013
apple mac os xSmart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate...CVE-2013-51904.3 MediumOctober 24, 2013
apple mac os xApple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting...CVE-2013-51895.8 MediumOctober 24, 2013
apple mac os xThe Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are...CVE-2013-51884.0 MediumOctober 24, 2013
apple mac os xThe Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain...CVE-2013-51871.9 LowOctober 24, 2013
apple mac os xPower Management in Apple Mac OS X before 10.9 does not properly handle the interaction between...CVE-2013-51862.1 LowOctober 24, 2013
apple mac os xThe ldapsearch command-line program in OpenLDAP in Apple Mac OS X before 10.9 does not properly...CVE-2013-51854.3 MediumOctober 24, 2013
apple mac os xThe kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing...CVE-2013-51845.7 MediumOctober 24, 2013
apple mac os xMail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled,...CVE-2013-51832.6 LowOctober 24, 2013
apple mac os xMail in Apple Mac OS X before 10.9 allows remote attackers to spoof the existence of a...CVE-2013-51825.0 MediumOctober 24, 2013
apple mac os xThe auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext...CVE-2013-51814.3 MediumOctober 24, 2013
apple mac os xThe srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number...CVE-2013-51804.3 MediumOctober 24, 2013
apple mac os xApp Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox...CVE-2013-51797.5 HighOctober 24, 2013
apple mac os xLaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in...CVE-2013-51785.0 MediumOctober 24, 2013
apple mac os xThe kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic)...CVE-2013-51774.9 MediumOctober 24, 2013
apple mac os xThe kernel in Apple Mac OS X before 10.9 does not properly handle integer values during...CVE-2013-51764.9 MediumOctober 24, 2013
apple mac os xThe kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or...CVE-2013-51756.6 MediumOctober 24, 2013
apple mac os xInteger signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause...CVE-2013-51744.9 MediumOctober 24, 2013
apple mac os xThe random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy...CVE-2013-51732.1 LowOctober 24, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open