Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
November

CVEs published in November 2013

470 vulnerabilities, 75 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

yahoo yuiCross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI...CVE-2013-67804.3 MediumNovember 13, 2013
cisco unified ip phone 8961, unified ip phone 9951, unified ip phone 9971 +1 more +3 moreThe firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory...CVE-2013-66856.6 MediumNovember 13, 2013
cisco wireless lan controllerThe web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate...CVE-2013-66846.8 MediumNovember 13, 2013
cisco nx-osThe IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which...CVE-2013-66836.1 MediumNovember 13, 2013
cisco adaptive security appliance softwareThe phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and...CVE-2013-66826.4 MediumNovember 13, 2013
google chromenet/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650...CVE-2013-66284.3 MediumNovember 13, 2013
google chromenet/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process...CVE-2013-6627Public exploit5.0 MediumNovember 13, 2013
google chromeThe WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents...CVE-2013-66264.3 MediumNovember 13, 2013
google chromeUse-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome...CVE-2013-66256.8 MediumNovember 13, 2013
google chromeUse-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to...CVE-2013-66247.5 HighNovember 13, 2013
google chromeThe SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote...CVE-2013-66234.3 MediumNovember 13, 2013
google chromeUse-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html...CVE-2013-66226.8 MediumNovember 13, 2013
google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to...CVE-2013-66217.5 HighNovember 13, 2013
apache tomcat** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in the Manager application in...CVE-2013-6357Public exploitDisputed6.8 MediumNovember 13, 2013
justsystems ichitaro, ichitaro portable with oreplug, ichitaro pro +1 more +3 moreUnspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7,...CVE-2013-59909.3 HighNovember 13, 2013
cisco adaptive security appliance softwareThe auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and...CVE-2013-55687.1 HighNovember 13, 2013
cisco adaptive security appliance softwareThe IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier,...CVE-2013-55605.4 MediumNovember 13, 2013
cisco content services gateway, ios +1 moreCisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly...CVE-2013-55526.4 MediumNovember 13, 2013
ibm security appscanIBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read...CVE-2013-54533.5 LowNovember 13, 2013
ibm security appscanIBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows...CVE-2013-54504.0 MediumNovember 13, 2013
ibm security network protection firmware, security network protection xgs 5100 +1 moreCross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security...CVE-2013-54424.3 MediumNovember 13, 2013
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x...CVE-2013-53793.5 LowNovember 13, 2013
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows...CVE-2013-53783.5 LowNovember 13, 2013
sambaSamba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses...CVE-2013-4476Fix available1.2 LowNovember 13, 2013
google chromeMultiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to...CVE-2013-293110.0 HighNovember 13, 2013
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and...CVE-2013-5330EPSS 11.3%10.0 HighNovember 13, 2013
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and...CVE-2013-532910.0 HighNovember 13, 2013
adobe coldfusionAdobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via...CVE-2013-53287.8 HighNovember 13, 2013
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before...CVE-2013-53263.5 LowNovember 13, 2013
silverstripesecurity/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which...CVE-2013-67895.0 MediumNovember 13, 2013
lighttpd, debian linux, opensuse +2 moreUse-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial...CVE-2013-4560Fix available5.0 MediumNovember 13, 2013
lighttpd, debian linux, opensuse +2 morelighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3)...CVE-2013-4559Fix availableEPSS 10.7%7.6 HighNovember 13, 2013
adaptivecomputing torque resource managerThe send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue...CVE-2013-4495Fix available10.0 HighNovember 13, 2013
samba, canonical ubuntu linux, debian linux +2 moreSamba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when...CVE-2013-4475Fix available4.0 MediumNovember 13, 2013
microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreInteger overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3,...CVE-2013-3940EPSS 34.5%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2013-3917EPSS 17.8%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2013-3916EPSS 17.8%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2013-3915EPSS 19.2%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2013-3914EPSS 19.2%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2013-3912EPSS 19.1%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a...CVE-2013-3911EPSS 19.1%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or...CVE-2013-3910EPSS 19.2%9.3 HighNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 8 allows remote attackers to read content from a different ...CVE-2013-3909EPSS 15.0%4.3 MediumNovember 13, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 10 allows user-assisted remote attackers to bypass the Same...CVE-2013-3908EPSS 33.6%4.3 MediumNovember 13, 2013
microsoft outlookMicrosoft Outlook 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT does not properly expand metadata...CVE-2013-3905EPSS 11.4%5.0 MediumNovember 13, 2013
microsoft windows 8, windows server 2012 +1 moreMicrosoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address...CVE-2013-38987.9 HighNovember 13, 2013
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreThe Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP...CVE-2013-38874.9 MediumNovember 13, 2013
microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreMicrosoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008...CVE-2013-3869EPSS 17.3%5.0 MediumNovember 13, 2013
silverstripesecurity/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which...CVE-2013-2653Public exploit5.8 MediumNovember 13, 2013
microsoft officeHeap-based buffer overflow in Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to...CVE-2013-1325EPSS 31.4%9.3 HighNovember 13, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open