Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
November

CVEs published in November 2013

470 vulnerabilities, 75 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

elastixCross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote...CVE-2012-6608Public exploit4.3 MediumNovember 25, 2013
sap netweaverSQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30...CVE-2013-68697.5 HighNovember 23, 2013
ibus project ibus, opensuse +1 moreThe default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose...CVE-2013-4509Fix available1.9 LowNovember 23, 2013
sybase adaptive server enterpriseSAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5...CVE-2013-68687.8 HighNovember 23, 2013
sybase adaptive server enterpriseUnspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or...CVE-2013-68677.1 HighNovember 23, 2013
sybase adaptive server enterpriseSAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and...CVE-2013-68669.0 HighNovember 23, 2013
sybase adaptive server enterpriseSAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5...CVE-2013-68659.0 HighNovember 23, 2013
sybase adaptive server enterpriseDirectory traversal vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15...CVE-2013-68646.1 MediumNovember 23, 2013
sybase adaptive server enterpriseSAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5...CVE-2013-68639.0 HighNovember 23, 2013
sybase adaptive server enterpriseUnspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3,...CVE-2013-68627.8 HighNovember 23, 2013
sybase adaptive server enterpriseUnspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD...CVE-2013-68614.9 MediumNovember 23, 2013
sybase adaptive server enterpriseUnspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3,...CVE-2013-68606.8 MediumNovember 23, 2013
sybase adaptive server enterpriseSAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and...CVE-2013-68598.5 HighNovember 23, 2013
openstack ceilometer(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the...CVE-2013-6384Fix available1.9 LowNovember 23, 2013
robert ancell lightdm, canonical ubuntu linux +1 moreLightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the...CVE-2013-44593.3 LowNovember 23, 2013
openfabrics ibutils, redhat enterprise linux +1 moreOpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on...CVE-2013-2561Fix available6.3 MediumNovember 23, 2013
canonical maas, ubuntu linux +1 moremaas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files,...CVE-2013-10585.8 MediumNovember 23, 2013
ffmpegThe field_end function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to...CVE-2013-0869Fix available9.3 HighNovember 23, 2013
ffmpeglibavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified...CVE-2013-0868Fix available9.3 HighNovember 23, 2013
ffmpegThe decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly...CVE-2013-0867Fix available9.3 HighNovember 23, 2013
ffmpegThe vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1...CVE-2013-0865Fix available9.3 HighNovember 23, 2013
ffmpegThe gif_copy_img_rect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an...CVE-2013-086410.0 HighNovember 23, 2013
ffmpegBuffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x...CVE-2013-08639.3 HighNovember 23, 2013
ffmpegMultiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg...CVE-2013-08629.3 HighNovember 23, 2013
ffmpegThe avcodec_decode_audio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before...CVE-2013-08615.0 MediumNovember 23, 2013
ffmpegThe ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x...CVE-2013-0860Fix available4.3 MediumNovember 23, 2013
opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-02231.9 LowNovember 23, 2013
opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-02222.1 LowNovember 23, 2013
opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-0221Public exploit4.3 MediumNovember 23, 2013
augeasThe transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite...CVE-2012-6607Fix available3.3 LowNovember 23, 2013
augeas, redhat enterprise linux +1 moreThe clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set...CVE-2012-0787Fix available3.7 LowNovember 23, 2013
augeasThe transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite...CVE-2012-0786Fix available3.3 LowNovember 23, 2013
openstack horizon, canonical ubuntu linux, opensuse +2 moreMultiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and...CVE-2013-6858Fix available4.3 MediumNovember 23, 2013
openstack image registry and delivery service \(glance\)The API before 2.1 in OpenStack Image Registry and Delivery Service (Glance) makes it easier for...CVE-2013-43542.1 LowNovember 23, 2013
ffmpegThe av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified...CVE-2013-426510.0 HighNovember 23, 2013
ffmpegThe kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote...CVE-2013-42644.3 MediumNovember 23, 2013
ffmpeglibavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted...CVE-2013-42637.5 HighNovember 23, 2013
nagios, redhat openstack +1 morerss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1,...CVE-2013-42146.3 MediumNovember 23, 2013
redhat openstacknagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5...CVE-2013-20296.3 MediumNovember 23, 2013
ffmpegThe advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to...CVE-2013-08789.3 HighNovember 23, 2013
ffmpegThe old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to...CVE-2013-08779.3 HighNovember 23, 2013
ffmpegMultiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec...CVE-2013-08769.3 HighNovember 23, 2013
ffmpegThe ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows...CVE-2013-08759.3 HighNovember 23, 2013
ffmpegThe (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3...CVE-2013-08749.3 HighNovember 23, 2013
ffmpegThe read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers...CVE-2013-0873Fix available10.0 HighNovember 23, 2013
ffmpegThe swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote...CVE-2013-087210.0 HighNovember 23, 2013
xen, opensuse +1 moreXen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB...CVE-2013-6375Fix available7.9 HighNovember 23, 2013
fedoraproject 389 directory server, redhat directory server, enterprise linux +2 more389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote...CVE-2013-4485Fix available4.0 MediumNovember 23, 2013
scientificlinux luci, redhat enterprise linux +1 moreUntrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when...CVE-2013-44826.2 MediumNovember 23, 2013
scientificlinux luci, redhat enterprise linux +1 moreRace condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions...CVE-2013-44811.9 LowNovember 23, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open