Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
December

CVEs published in December 2013

472 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

rubyonrails railsactionpack Cross-site Scripting vulnerabilityCVE-2013-6416Fix available4.3 MediumDecember 7, 2013
rubyonrails rails, ruby on rails +1 moreactionpack vulnerable to Cross-site ScriptingCVE-2013-6415Fix available4.3 MediumDecember 7, 2013
rubyonrails rails, ruby on rails +1 moreactionpack Improper Input Validation vulnerabilityCVE-2013-6414Fix availableEPSS 20.7%5.0 MediumDecember 7, 2013
i18n project i18ni18n gem Cross-site Scripting vulnerabilityCVE-2013-4492Fix available4.3 MediumDecember 7, 2013
rubyonrails rails, ruby on rails +1 moreactionpack vulnerable to Cross-site ScriptingCVE-2013-4491Fix available4.3 MediumDecember 7, 2013
pixman, canonical ubuntu linux, debian linux +7 more +9 moreInteger underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as...CVE-2013-6425Fix available5.0 MediumDecember 6, 2013
gimp, redhat enterprise linux +1 moreHeap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD)...CVE-2013-1978Fix available6.8 MediumDecember 6, 2013
gimp, redhat enterprise linux +1 moreInteger overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in...CVE-2013-1913Fix available6.8 MediumDecember 6, 2013
openttdThe HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows...CVE-2013-6411Fix available5.0 MediumDecember 6, 2013
redhat jboss enterprise application platform, enterprise linux +1 moreThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...CVE-2013-21335.5 MediumDecember 6, 2013
opensuseThe SUSE horde5 package before 5.0.2-2.4.1 sets incorrect ownership for certain configuration...CVE-2013-10907.2 HighDecember 6, 2013
jamroom search moduleCross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows...CVE-2013-68044.3 MediumDecember 5, 2013
chamilo lmsSQL injection vulnerability in the check_user_password function in main/auth/profile.php in...CVE-2013-6787Public exploit6.0 MediumDecember 5, 2013
dokeosSQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute...CVE-2013-6341Public exploit7.5 HighDecember 5, 2013
clarolineMultiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.11.9 allow remote...CVE-2013-62674.3 MediumDecember 5, 2013
rockmongoMultiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and...CVE-2013-51084.3 MediumDecember 5, 2013
easytimestudio easy file managerDirectory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote...CVE-2013-39215.0 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in the Yahoo! User Interface Library in Cybozu Garoon...CVE-2013-69164.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon...CVE-2013-69153.5 LowDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2...CVE-2013-69143.5 LowDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a search component in Cybozu Garoon before 3.7.2,...CVE-2013-69133.5 LowDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2,...CVE-2013-69123.5 LowDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in the bulletin-board component in Cybozu Garoon before...CVE-2013-69113.5 LowDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows...CVE-2013-69104.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a report component in Cybozu Garoon before 3.7.0...CVE-2013-69094.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0...CVE-2013-69084.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before...CVE-2013-69074.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon before 3.7.0, when...CVE-2013-69064.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when...CVE-2013-69054.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a note component in Cybozu Garoon before 3.7.0, when...CVE-2013-69044.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0,...CVE-2013-69034.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0...CVE-2013-69024.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0,...CVE-2013-69014.3 MediumDecember 5, 2013
cybozu garoonCross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon...CVE-2013-69004.3 MediumDecember 5, 2013
cybozu garoonSession fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack...CVE-2013-60046.8 MediumDecember 5, 2013
cybozu garoonCRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding...CVE-2013-60033.5 LowDecember 5, 2013
cybozu garoonThe server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service ...CVE-2013-60025.0 MediumDecember 5, 2013
cybozu garoonSQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote...CVE-2013-60016.5 MediumDecember 5, 2013
tattyan hptownDirectory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to...CVE-2013-60005.0 MediumDecember 5, 2013
digia qtQXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service...CVE-2013-4549Fix available5.0 MediumDecember 5, 2013
osehra vistaThe M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to...CVE-2013-69457.5 HighDecember 4, 2013
elecsyscorp director dnp3 outstation kernel, director industrial communication gateway +1 moreThe DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6...CVE-2013-28254.3 MediumDecember 4, 2013
videocharge watermark masterBuffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to...CVE-2013-6937Public exploit6.8 MediumDecember 4, 2013
mybb ajax forum statMultiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0...CVE-2013-6936Public exploit7.5 HighDecember 4, 2013
videocharge watermark masterBuffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to...CVE-2013-6935Public exploitEPSS 32.4%9.3 HighDecember 4, 2013
cisco ons 15454, ons 15454 firmware +1 moreThe management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier...CVE-2013-67024.3 MediumDecember 4, 2013
vmware esx, esxi, fusion +2 more +4 morelgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware...CVE-2013-35197.9 HighDecember 4, 2013
att connect participant applicationStack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows...CVE-2013-60296.8 MediumDecember 4, 2013
ibm filenet content managerCross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as...CVE-2013-54494.3 MediumDecember 4, 2013
cisco ios, ios xe +1 moreThe IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a...CVE-2013-67056.1 MediumDecember 3, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open