Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
December

CVEs published in December 2013

472 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

os4ed opensisEval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to...CVE-2013-1349Public exploitEPSS 21.9%7.5 HighDecember 9, 2013
ffmpegThe dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote...CVE-2011-39506.8 MediumDecember 9, 2013
ffmpegThe dirac_unpack_idwt_params function in libavcodec/diracdec.c in FFmpeg before 0.10 allows...CVE-2011-39496.8 MediumDecember 9, 2013
ffmpegThe ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote...CVE-2011-3946Fix available6.8 MediumDecember 9, 2013
ffmpegThe smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows...CVE-2011-3944Fix available6.8 MediumDecember 9, 2013
ffmpegThe decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote...CVE-2011-3941Fix available7.5 HighDecember 9, 2013
ffmpegThe codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have...CVE-2011-39356.8 MediumDecember 9, 2013
ffmpegDouble free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg...CVE-2011-3934Fix available6.8 MediumDecember 9, 2013
linux kernelMultiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to...CVE-2013-7026Fix available4.7 MediumDecember 9, 2013
linux kernelThe ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly...CVE-2013-6432Fix available4.6 MediumDecember 9, 2013
linux kernelThe fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly...CVE-2013-6431Fix available4.7 MediumDecember 9, 2013
munin-monitoring muninMunin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service ...CVE-2013-6359Fix available4.3 MediumDecember 9, 2013
dovecotcheckpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is...CVE-2013-6171Fix available5.8 MediumDecember 9, 2013
munin-monitoring muninThe get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows...CVE-2013-6048Fix available5.0 MediumDecember 9, 2013
sambaHeap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc...CVE-2013-4408Fix available8.3 HighDecember 9, 2013
linux kernelThe perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before...CVE-2013-2930Fix available3.6 LowDecember 9, 2013
nowsms now sms \& mms gatewayThe Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows...CVE-2013-70014.3 MediumDecember 7, 2013
nowsms now sms \& mms gatewayThe Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote...CVE-2013-70004.3 MediumDecember 7, 2013
ffmpegThe add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote...CVE-2013-08599.3 HighDecember 7, 2013
ffmpegThe lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to...CVE-2013-0856Fix available9.3 HighDecember 7, 2013
ffmpegInteger overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1...CVE-2013-08559.3 HighDecember 7, 2013
ffmpegThe parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote...CVE-2013-08529.3 HighDecember 7, 2013
ffmpegThe decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to...CVE-2013-08519.3 HighDecember 7, 2013
ffmpegThe roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote...CVE-2013-0849Fix available9.3 HighDecember 7, 2013
ffmpegThe decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to...CVE-2013-0848Fix available9.3 HighDecember 7, 2013
ffmpegThe ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers...CVE-2013-08479.3 HighDecember 7, 2013
ffmpegArray index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1...CVE-2013-0846Fix available9.3 HighDecember 7, 2013
ffmpeglibavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact...CVE-2013-08459.3 HighDecember 7, 2013
apache solrImproper Restriction of XML External Entity Reference in Apache SolrCVE-2012-6612Fix availableEPSS 10.1%7.5 HighDecember 7, 2013
debian adequateDebian adequate before 0.8.1, when run by root with the --user option, allows local users to...CVE-2013-6409Fix available6.2 MediumDecember 7, 2013
apache solrXML Injection in Apache SolrCVE-2013-6408Fix availableEPSS 11.4%6.4 MediumDecember 7, 2013
apache solrApache Solr UpdateRequestHandler for XML resolves XML External EntitiesCVE-2013-6407Fix availableEPSS 11.4%6.4 MediumDecember 7, 2013
apache solrImproper Limitation of a Pathname to a Restricted Directory in Apache SolrCVE-2013-6397Fix availableEPSS 56.5%4.3 MediumDecember 7, 2013
steven jones contextThe _json_decode function in plugins/context_reaction_block.inc in the Context module 6.x-2.x...CVE-2013-44466.8 MediumDecember 7, 2013
steven jones contextThe json rendering functionality in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before...CVE-2013-44454.9 MediumDecember 7, 2013
apache rollerCertain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow...CVE-2013-4212Public exploitEPSS 81.1%6.8 MediumDecember 7, 2013
apache rollerMultiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.2 allow remote...CVE-2013-41714.3 MediumDecember 7, 2013
cisco adaptive security appliance softwareMemory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA)...CVE-2013-67074.3 MediumDecember 7, 2013
ibm smartcloud provisioningIBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify...CVE-2013-54554.9 MediumDecember 7, 2013
microsoft windows server 2008** DISPUTED ** The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in...CVE-2013-6999Disputed4.0 MediumDecember 7, 2013
google chromeMultiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact...CVE-2014-168110.0 HighDecember 7, 2013
siemens sinamics g110, sinamics g110d, sinamics g120 +11 more +13 moreSiemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for...CVE-2013-692010.0 HighDecember 7, 2013
google chrome, v8 +1 moreThe DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...CVE-2013-66407.5 HighDecember 7, 2013
google chrome, v8 +1 moreThe DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22...CVE-2013-66397.5 HighDecember 7, 2013
google chrome, v8 +1 moreMultiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome...CVE-2013-66387.5 HighDecember 7, 2013
google chromeMultiple unspecified vulnerabilities in Google Chrome before 31.0.1650.63 allow attackers to...CVE-2013-66377.5 HighDecember 7, 2013
google chromeThe FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink...CVE-2013-66364.3 MediumDecember 7, 2013
google chromeUse-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome...CVE-2013-66356.8 MediumDecember 7, 2013
google chromeThe OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync...CVE-2013-66346.8 MediumDecember 7, 2013
rubyonrails rails, ruby on rails +1 moreactionpack allows bypass of database-query restrictionsCVE-2013-6417Fix available6.4 MediumDecember 7, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open