Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
November

CVEs published in November 2013

470 vulnerabilities, 75 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco server provisionerThe web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not...CVE-2013-34075.0 MediumNovember 16, 2013
cisco service portalThe "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud...CVE-2013-34066.8 MediumNovember 16, 2013
ibm cognos business intelligenceThe servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1...CVE-2013-30305.0 MediumNovember 16, 2013
mit kerberos 5, debian linux, opensuse +2 moreThe setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 ...CVE-2013-1418Fix available4.3 MediumNovember 16, 2013
google chromeGoogle Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions...CVE-2013-68025.8 MediumNovember 16, 2013
google chrome, debian linux +1 moreInteger overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute...CVE-2013-66329.3 HighNovember 16, 2013
sunil nanda blue wrench video widgetCross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench...CVE-2013-6797Public exploit6.8 MediumNovember 15, 2013
softaculous webuzoCross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in...CVE-2013-6042Public exploit4.3 MediumNovember 15, 2013
d-link dsl-2760u, dlink dsl-2760u firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow...CVE-2013-5223In KEVPublic exploitEPSS 50.8%5.4 MediumNovember 15, 2013
reviewboard review boardMultiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x...CVE-2013-45194.3 MediumNovember 15, 2013
dlink dsl-2740b, dsl-2740b firmware +1 moreThe D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists,...CVE-2013-2271Public exploit7.6 HighNovember 15, 2013
percipientstudios imagenCross-site scripting (XSS) vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2...CVE-2013-07414.3 MediumNovember 15, 2013
xenXen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the...CVE-2013-4551Fix available5.7 MediumNovember 15, 2013
redhat satellite, network satellite, satellite with embedded oracle +2 more +4 moreRed Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the...CVE-2013-4480Fix available7.5 HighNovember 15, 2013
osirix-viewer osirix, osirix md +1 moreThe DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS...CVE-2013-44251.9 LowNovember 15, 2013
google web toolkitImproper Neutralization of Input During Web Page Generation in Google Web ToolkitCVE-2013-4204Fix available4.3 MediumNovember 15, 2013
openvpn, opensuse, openvpn access server +2 moreThe openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode,...CVE-2013-2061Fix available2.6 LowNovember 15, 2013
mediawiki, fedoraproject fedora, gentoo linux +2 moreMediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password...CVE-2013-2032Fix available5.0 MediumNovember 15, 2013
mediawiki, gentoo linux +1 moreMediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site...CVE-2013-2031Fix available4.3 MediumNovember 15, 2013
canonical maas, ubuntu linux +1 moreUntrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local...CVE-2013-10574.4 MediumNovember 15, 2013
haxx curl, libcurl +1 morecURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and...CVE-2013-4545Fix available4.3 MediumNovember 15, 2013
canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...CVE-2015-2808Fix availableEPSS 73.9%5.0 MediumNovember 14, 2013
ibm javaIBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before...CVE-2015-19145.0 MediumNovember 14, 2013
opensuse, oracle javafx, jdk +2 more +4 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76,...CVE-2015-049110.0 HighNovember 14, 2013
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5,...CVE-2015-0488Fix available5.0 MediumNovember 14, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers...CVE-2015-0480Fix available5.8 MediumNovember 14, 2013
oracle jrockit, jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5,...CVE-2015-0478Fix available4.3 MediumNovember 14, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers...CVE-2015-0477Fix available4.3 MediumNovember 14, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers...CVE-2015-0469Fix available10.0 HighNovember 14, 2013
oracle javafx, novell suse linux enterprise desktop, opensuse +2 more +4 moreUnspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76,...CVE-2015-045910.0 HighNovember 14, 2013
novell suse linux enterprise desktop, opensuse, oracle jdk +1 more +3 moreUnspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to...CVE-2015-04587.6 HighNovember 14, 2013
ibm java, redhat enterprise linux desktop, enterprise linux server +5 more +7 moreUnspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1...CVE-2015-01927.5 HighNovember 14, 2013
ibm tivoli directory serverGSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0...CVE-2015-01384.3 MediumNovember 14, 2013
ibm java sdkUnspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5...CVE-2014-88927.8 HighNovember 14, 2013
ibm java sdkUnspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5...CVE-2014-889110.0 HighNovember 14, 2013
ibm forms viewer, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-24287.6 HighNovember 14, 2013
canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51,...CVE-2014-2427Fix available7.5 HighNovember 14, 2013
canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-2423Fix available7.5 HighNovember 14, 2013
canonical ubuntu linux, debian linux, ibm forms viewer +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE...CVE-2014-2421Fix available10.0 HighNovember 14, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-24202.6 LowNovember 14, 2013
canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-2414Fix available7.5 HighNovember 14, 2013
canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded...CVE-2014-2412Fix available7.5 HighNovember 14, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-24096.4 MediumNovember 14, 2013
oracle javafx, ibm forms viewer, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE...CVE-2014-24015.0 MediumNovember 14, 2013
oracle javafx, jrockit, canonical ubuntu linux +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit...CVE-2014-2398Fix available3.5 LowNovember 14, 2013
oracle openjdkThe unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle...CVE-2014-1876Fix available4.4 MediumNovember 14, 2013
ibm java sdkThe IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM...CVE-2014-08785.8 MediumNovember 14, 2013
canonical ubuntu linux, debian linux, ibm forms viewer +2 more +4 moreUnspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows...CVE-2014-0461Fix available9.3 HighNovember 14, 2013
oracle jrockit, canonical ubuntu linux, debian linux +3 more +5 moreUnspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3...CVE-2014-0460Fix available5.8 MediumNovember 14, 2013
canonical ubuntu linux, debian linux, oracle jdk +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote...CVE-2014-0459Fix available4.3 MediumNovember 14, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open