Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
December

CVEs published in December 2013

472 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

zabbixZabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix...CVE-2013-6824Fix available7.5 HighDecember 19, 2013
dlink dsr-1000, dsr-1000n, dsr-150 +12 more +14 moreThe runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR...CVE-2013-594610.0 HighDecember 19, 2013
netgear prosafe gs724t, prosafe firmware, prosafe gs510tp +2 more +4 moreNETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier, GS748Tv4 5.4.1.14, and...CVE-2013-4776Public exploit7.8 HighDecember 19, 2013
netgear prosafe gs724t, prosafe firmware, prosafe gs510tp +8 more +10 moreNETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware...CVE-2013-4775Public exploitEPSS 15.0%7.8 HighDecember 19, 2013
cisco ons 15454, ons 15454 system software, ons 15454 mspp +5 more +7 moreThe tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with...CVE-2013-67015.0 MediumDecember 18, 2013
ibm db2, db2 connect, db2 purescale feature 9.8 +2 moreThe XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8...CVE-2013-54664.0 MediumDecember 18, 2013
ibm infosphere information serverIBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain...CVE-2013-54402.1 LowDecember 18, 2013
ibm rational clearcaseUnspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and...CVE-2013-54167.2 HighDecember 18, 2013
ibm rational clearcaseBuffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x...CVE-2013-54157.2 HighDecember 18, 2013
ibm change and configuration management database, maximo asset management, maximo asset management essentials +9 more +11 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset Management...CVE-2013-54023.5 LowDecember 18, 2013
ibm rational focal pointUnspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before...CVE-2013-53983.3 LowDecember 18, 2013
ibm rational focal pointUnspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before...CVE-2013-53973.3 LowDecember 18, 2013
apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-52286.8 MediumDecember 18, 2013
apple safariApple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin...CVE-2013-52276.4 MediumDecember 18, 2013
apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-52256.8 MediumDecember 18, 2013
apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51996.8 MediumDecember 18, 2013
apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51986.8 MediumDecember 18, 2013
apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51976.8 MediumDecember 18, 2013
apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51966.8 MediumDecember 18, 2013
apple safari, webkit, itunes +2 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51956.8 MediumDecember 18, 2013
canonical ubuntu linux, debian linux, opensuse +1 more +3 moreInteger underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context...CVE-2013-6424Fix available5.0 MediumDecember 18, 2013
gnupgGnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns...CVE-2013-4576Fix available2.1 LowDecember 18, 2013
python3 Mageia, python-virtualenv Mageia, bzr Mageia +5 more +7 moreUpdated python3 and related packages fix security vulnerabilities and prevent an errorMGASA-2013-0376Fix availableNo scoreDecember 17, 2013
themebeans blooog themeCross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows...CVE-2013-71294.3 MediumDecember 17, 2013
cru-inc ditto forensic fieldstation, ditto forensic fieldstation firmware +1 moreCross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware...CVE-2013-6883Public exploit6.8 MediumDecember 17, 2013
cru-inc ditto forensic fieldstation, ditto forensic fieldstation firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with...CVE-2013-6882Public exploit4.3 MediumDecember 17, 2013
valvesoftware steamosValve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores...CVE-2013-71282.1 LowDecember 17, 2013
apple mac os x, safari +1 moreApple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession...CVE-2013-71272.1 LowDecember 17, 2013
ibm sametimeCross-site scripting (XSS) vulnerability in the Web Application in the Classic Meeting Server in...CVE-2013-67334.3 MediumDecember 17, 2013
ibm websphere service registry and repositoryCross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR)...CVE-2013-67213.5 LowDecember 17, 2013
ibm global security kit, content manager ondemand for multiplatforms, security access manager for web +2 moreIBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other...CVE-2013-63297.8 HighDecember 17, 2013
ibm sterling connect enterprise http optionCross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1...CVE-2013-63274.3 MediumDecember 17, 2013
hp color laserjet cm1312nfi multifunction printer, color laserjet cm2320n multifunction printer, color laserjet cp1515 +22 more +24 moreUnspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw,...CVE-2013-61935.0 MediumDecember 17, 2013
trimble sketchup viewerStack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to...CVE-2013-60386.8 MediumDecember 17, 2013
cooperindustries smp 16 gateway \(data concentrator\), smp 4\/dp gateway \(data concentrator\), smp 4 gateway \(data concentrator\) +2 moreThe DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically...CVE-2013-28164.7 MediumDecember 17, 2013
cooperindustries dnp3 master opc serverCooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of...CVE-2013-28147.1 HighDecember 17, 2013
cooperindustries smp 16 gateway \(data concentrator\), smp 4\/dp gateway \(data concentrator\), smp 4 gateway \(data concentrator\) +2 moreThe DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers...CVE-2013-28137.1 HighDecember 17, 2013
haxx libcurl, canonical ubuntu linux, debian linux +2 moreThe GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature...CVE-2013-6422Fix available4.0 MediumDecember 17, 2013
cisco webex training centerOpen redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect...CVE-2013-69665.8 MediumDecember 17, 2013
siemens ruggedcom rugged operating systemThe integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated...CVE-2013-69268.0 HighDecember 17, 2013
siemens ruggedcom rugged operating systemThe integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to...CVE-2013-69258.3 HighDecember 17, 2013
hp operations orchestrationCross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows...CVE-2013-61926.8 MediumDecember 17, 2013
hp operations orchestrationCross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote...CVE-2013-61914.3 MediumDecember 17, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute...CVE-2013-3140EPSS 24.1%9.3 HighDecember 16, 2013
cisco webex training centerCisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted...CVE-2013-69734.3 MediumDecember 14, 2013
cisco webex training centerCisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host...CVE-2013-69725.0 MediumDecember 14, 2013
cisco webex training centerOpen redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect...CVE-2013-69715.8 MediumDecember 14, 2013
cisco webex meeting centerCisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading...CVE-2013-69705.0 MediumDecember 14, 2013
cisco webex training centerThe training-registration page in Cisco WebEx Training Center allows remote attackers to modify...CVE-2013-69694.3 MediumDecember 14, 2013
cisco webex training centerCisco WebEx Training Center provides different error messages for registration attempts depending...CVE-2013-69685.0 MediumDecember 14, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open