Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
December

CVEs published in December 2013

472 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco webex sales centerOpen redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows...CVE-2013-69675.8 MediumDecember 14, 2013
cisco webex training centerThe registration component in Cisco WebEx Training Center provides the training-session URL...CVE-2013-69655.0 MediumDecember 14, 2013
cisco webex meeting centerCisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject...CVE-2013-69643.5 LowDecember 14, 2013
cisco webex training centerCross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training...CVE-2013-69634.3 MediumDecember 14, 2013
cisco webex meeting centerCross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting...CVE-2013-69624.3 MediumDecember 14, 2013
cisco webex meeting centerCross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in...CVE-2013-69614.3 MediumDecember 14, 2013
cisco webex meeting centerMultiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote...CVE-2013-69604.3 MediumDecember 14, 2013
cisco webex sales centerOpen redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users...CVE-2013-69595.8 MediumDecember 14, 2013
cisco webex sales centerCross-site scripting (XSS) vulnerability in the product-creation administrative page in Cisco...CVE-2013-67114.3 MediumDecember 14, 2013
cisco webex training centerCross-site request forgery (CSRF) vulnerability in Cisco WebEx Training Center allows remote...CVE-2013-67106.8 MediumDecember 14, 2013
cisco webex training centerThe registration component in Cisco WebEx Training Center provides the training-session URL...CVE-2013-67095.0 MediumDecember 14, 2013
ibm flex system managerCross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0...CVE-2013-54384.3 MediumDecember 14, 2013
hp officejet pro 8500, officejet pro 8500 firmware +1 moreCross-site scripting (XSS) vulnerability on HP Officejet Pro 8500 (aka A909) All-in-One printers...CVE-2013-48454.3 MediumDecember 14, 2013
ibm cognos command centerSession fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers...CVE-2013-40014.3 MediumDecember 14, 2013
ibm cognos command centerMultiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10...CVE-2013-40006.8 MediumDecember 14, 2013
ibm rational software architect design manager, rhapsody design manager +1 moreDirectory traversal vulnerability in the client in IBM Rational Software Architect Design Manager...CVE-2013-30432.1 LowDecember 14, 2013
ibm rational software architect design manager, rhapsody design manager +1 moreDirectory traversal vulnerability in the server in IBM Rational Software Architect Design Manager...CVE-2013-30422.1 LowDecember 14, 2013
fujitsu interstage application server, interstage studio +1 moreBuffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage...CVE-2013-710510.0 HighDecember 14, 2013
google androidAndroid 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device...CVE-2013-62718.8 HighDecember 14, 2013
xmlsoft libxsltxslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service ...CVE-2013-45204.3 MediumDecember 14, 2013
mcafee email gatewayMcAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands...CVE-2013-71049.0 HighDecember 14, 2013
mcafee email gatewayMcAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands...CVE-2013-71039.0 HighDecember 14, 2013
devscripts devel team devscriptsUscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete...CVE-2013-7085Fix available5.8 MediumDecember 14, 2013
beyondgrep ackack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2)...CVE-2013-7069Fix available6.8 MediumDecember 14, 2013
openstack keystone, redhat openstack, canonical ubuntu linux +2 moreThe ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before...CVE-2013-6391Fix available5.8 MediumDecember 14, 2013
rockmongoDirectory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read...CVE-2013-51075.0 MediumDecember 14, 2013
zabbixThe user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers...CVE-2013-1364Fix available5.0 MediumDecember 14, 2013
linux kernelThe recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux...CVE-2013-6376Fix available5.2 MediumDecember 14, 2013
samba, canonical ubuntu linux, novell suse linux enterprise desktop +3 more +5 moreThe Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4...CVE-2015-0240Public exploitFix availableEPSS 88.2%10.0 HighDecember 13, 2013
sambaThe push_ascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x...CVE-2014-3493Fix available2.7 LowDecember 13, 2013
sambaThe sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x...CVE-2014-0244Fix availableEPSS 20.5%3.3 LowDecember 13, 2013
sambaSamba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs...CVE-2014-0178Fix available3.5 LowDecember 13, 2013
samba, canonical ubuntu linux +1 moreSamba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the...CVE-2013-4496Fix available5.0 MediumDecember 13, 2013
sap emr unwiredMultiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute...CVE-2013-70967.5 HighDecember 13, 2013
sap customer relationship managementThe XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has...CVE-2013-709510.0 HighDecember 13, 2013
sap netweaverSQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows...CVE-2013-70947.5 HighDecember 13, 2013
sap network interface routerSAP Network Interface Router (SAProuter) 39.3 SP4 allows remote attackers to bypass...CVE-2013-70935.0 MediumDecember 13, 2013
mcafee email gatewayMultiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway...CVE-2013-70926.5 MediumDecember 13, 2013
synacor zimbra collaboration suiteDirectory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx...CVE-2013-7091Public exploitEPSS 86.3%5.0 MediumDecember 13, 2013
devscripts devel team devscriptsThe get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using...CVE-2013-7050Fix available6.8 MediumDecember 13, 2013
juniper screenos, netscreen-5200, netscreen-5400 +2 moreJuniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is...CVE-2013-69587.1 HighDecember 13, 2013
juniper idp250, idp75, idp800 +1 more +3 moreCross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP...CVE-2013-69574.3 MediumDecember 13, 2013
juniper ive osCross-site scripting (XSS) vulnerability in the Secure Access Service Web rewriting feature in...CVE-2013-69562.1 LowDecember 13, 2013
percona xtrabackup, opensuse +1 morePercona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which...CVE-2013-63942.1 LowDecember 13, 2013
mediawikiThe CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1...CVE-2013-45694.3 MediumDecember 13, 2013
acme thttpd, open source development team sthttpd, fedoraproject fedora +2 more +4 morethttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log...CVE-2013-03482.1 LowDecember 13, 2013
mediawikiCross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before...CVE-2012-53946.8 MediumDecember 13, 2013
gnu libmicrohttpdStack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32,...CVE-2013-7039Fix available5.1 MediumDecember 13, 2013
gnu libmicrohttpdThe MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to...CVE-2013-7038Fix available6.4 MediumDecember 13, 2013
philippe jounin tftpd32Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a...CVE-2013-68095.0 MediumDecember 13, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open