Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
December

CVEs published in December 2013

472 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

xenXen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the...CVE-2013-6400Fix available6.8 MediumDecember 13, 2013
sonarsource jenkins pluginJenkins SonarQube Plugin Stores Passwords in CleartextCVE-2013-5676Public exploit4.0 MediumDecember 13, 2013
net-snmp, apple mac os x, canonical ubuntu linux +2 moreNet-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT...CVE-2012-6151Public exploitFix available4.3 MediumDecember 13, 2013
instantsoft instantcmsSQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers...CVE-2013-6839Public exploit7.5 HighDecember 13, 2013
cybozu dezieCross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to...CVE-2013-60054.3 MediumDecember 13, 2013
icofxStack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary...CVE-2013-4988Public exploitEPSS 67.0%9.3 HighDecember 13, 2013
mediawiki, fedoraproject fedora +1 moreThe CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before...CVE-2013-4572Fix available7.5 HighDecember 12, 2013
mediawikiIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...CVE-2013-4568Fix available4.3 MediumDecember 12, 2013
mediawikiIncomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x...CVE-2013-4567Fix available4.3 MediumDecember 12, 2013
owncloud, owncloud server +1 moreThe admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access...CVE-2013-6403Fix available6.8 MediumDecember 12, 2013
oracle fusion middlewareUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...CVE-2013-57631.5 LowDecember 12, 2013
projectsprouts sproutsprout Arbitrary Code Execution vulnerabilityCVE-2013-64217.5 HighDecember 12, 2013
mod nss project nss, redhat enterprise linux +1 moremod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does...CVE-2013-4566Fix available4.0 MediumDecember 12, 2013
netgear raidiatorCross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR...CVE-2013-27526.8 MediumDecember 12, 2013
netgear raidiatorEval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in...CVE-2013-2751Public exploitEPSS 71.6%10.0 HighDecember 12, 2013
janrain ruby-openid, fedoraproject fedora +1 moreDenial of service in ruby-openidCVE-2013-1812Fix available4.3 MediumDecember 12, 2013
cisco unified communications manager** DISPUTED ** The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM)...CVE-2013-7030Public exploitDisputed5.0 MediumDecember 12, 2013
zippyyum subway ordering for californiaThe ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext storage in SQLite cache databases,...CVE-2013-69862.1 LowDecember 12, 2013
emc connectrix managerThe server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged...CVE-2013-6810Public exploitEPSS 17.0%10.0 HighDecember 12, 2013
php, apple mac os x, opensuse +2 moreThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...CVE-2013-6420Public exploitFix availableEPSS 35.4%7.5 HighDecember 12, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreMozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey...CVE-2013-66735.9 MediumDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote...CVE-2013-66724.3 MediumDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before...CVE-2013-6671EPSS 11.1%9.8 CriticalDecember 11, 2013
openstack heatThe ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before...CVE-2013-6428Fix available4.0 MediumDecember 11, 2013
openstack heatThe cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1...CVE-2013-6426Fix available4.0 MediumDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox...CVE-2013-56197.5 HighDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user...CVE-2013-5618EPSS 10.4%9.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in...CVE-2013-56169.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2,...CVE-2013-56159.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox...CVE-2013-56144.3 MediumDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox...CVE-2013-56139.8 CriticalDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23...CVE-2013-56124.3 MediumDecember 11, 2013
mozilla firefox, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger,...CVE-2013-56115.8 MediumDecember 11, 2013
mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and...CVE-2013-561010.0 HighDecember 11, 2013
mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0,...CVE-2013-56099.8 CriticalDecember 11, 2013
adobe shockwave playerAdobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a...CVE-2013-533410.0 HighDecember 11, 2013
adobe shockwave playerAdobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a...CVE-2013-533310.0 HighDecember 11, 2013
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and...CVE-2013-53329.3 HighDecember 11, 2013
adobe air, air sdk, flash player +2 moreAdobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and...CVE-2013-5331Public exploitEPSS 72.5%9.3 HighDecember 11, 2013
microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010...CVE-2013-50724.3 MediumDecember 11, 2013
microsoft office web apps, sharepoint server +1 moreMicrosoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote...CVE-2013-5059EPSS 14.5%6.8 MediumDecember 11, 2013
microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreInteger overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server...CVE-2013-5058Public exploit6.9 MediumDecember 11, 2013
microsoft officehxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection...CVE-2013-50574.3 MediumDecember 11, 2013
microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreUse-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2...CVE-2013-5056EPSS 20.4%9.3 HighDecember 11, 2013
microsoft office, office 2013 rt +1 moreMicrosoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a...CVE-2013-5054EPSS 11.7%4.3 MediumDecember 11, 2013
microsoft internet explorerMicrosoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial...CVE-2013-5052EPSS 12.5%9.3 HighDecember 11, 2013
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2013-5051EPSS 12.5%9.3 HighDecember 11, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or...CVE-2013-5049EPSS 20.4%9.3 HighDecember 11, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2013-5048EPSS 12.6%9.3 HighDecember 11, 2013
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2013-5047EPSS 12.5%9.3 HighDecember 11, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open