Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
December

CVEs published in December 2013

472 vulnerabilities, 56 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm sterling b2b integrator, sterling file gateway +1 moreMultiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and...CVE-2013-54053.5 LowDecember 21, 2013
ibm spss collaboration and deployment servicesThe Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3...CVE-2013-40705.0 MediumDecember 21, 2013
ibm spss collaboration and deployment servicesThe Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3...CVE-2013-40695.0 MediumDecember 21, 2013
ibm lotus domino, lotus inotes +1 moreCross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x...CVE-2013-40652.6 LowDecember 21, 2013
ibm lotus domino, lotus inotes +1 moreCross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x...CVE-2013-40642.1 LowDecember 21, 2013
ibm lotus domino, lotus inotes +1 moreCross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x...CVE-2013-40634.3 MediumDecember 21, 2013
ibm spss collaboration and deployment servicesOpen redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1...CVE-2013-40465.8 MediumDecember 21, 2013
ibm spss collaboration and deployment servicesCross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and...CVE-2013-40454.3 MediumDecember 21, 2013
ibm spss collaboration and deployment servicesIBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows...CVE-2013-40444.0 MediumDecember 21, 2013
novatech orion5r dnp master, orionlx dnp master, orion5 dnp master +3 more +5 moreNovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10...CVE-2013-28224.7 MediumDecember 21, 2013
novatech orion5r dnp master, orionlx dnp master, orion5 dnp master +3 more +5 moreNovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10...CVE-2013-28217.1 HighDecember 21, 2013
cisco nx-osDirectory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users...CVE-2012-41354.6 MediumDecember 21, 2013
cisco nx-osDirectory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary...CVE-2012-41314.6 MediumDecember 21, 2013
efrontlearning efrontMultiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 ...CVE-2013-7194Public exploit3.5 LowDecember 21, 2013
etoshop c2c forward auction creatorMultiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers...CVE-2013-7193Public exploit7.5 HighDecember 21, 2013
etoshop dynamic biz website builder quickwebMultiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote...CVE-2013-7192Public exploit7.5 HighDecember 21, 2013
tenmiles helpdesk pilotCross-site scripting (XSS) vulnerability in Tenmiles Helpdesk Pilot allows remote attackers to...CVE-2013-71914.3 MediumDecember 21, 2013
typo3 flowTYPO3 Flow Cross-site scripting (XSS) vulnerabilityCVE-2013-7082Fix available4.3 MediumDecember 21, 2013
typo3TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration ModuleCVE-2013-7077Fix available4.3 MediumDecember 21, 2013
typo3Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4...CVE-2013-70764.3 MediumDecember 21, 2013
typo3TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards componentCVE-2013-7074Fix available3.5 LowDecember 21, 2013
livezillaCross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before...CVE-2013-70024.3 MediumDecember 21, 2013
code-crafters ability mail serverCross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote...CVE-2013-6162Public exploit4.3 MediumDecember 21, 2013
idleman leedMultiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed),...CVE-2013-26286.8 MediumDecember 21, 2013
idleman leedSQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable,...CVE-2013-2627Public exploit7.5 HighDecember 21, 2013
iscripts autohosterMultiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote...CVE-2013-7190Public exploit5.0 MediumDecember 20, 2013
iscripts autohosterMultiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote...CVE-2013-7189Public exploit7.5 HighDecember 20, 2013
hostbillapp hostbillCross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows...CVE-2013-71884.3 MediumDecember 20, 2013
ncrafts formcraftSQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress...CVE-2013-7187Public exploit7.5 HighDecember 20, 2013
steinberg mymp3proBuffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute...CVE-2013-7186Public exploitEPSS 11.6%9.3 HighDecember 20, 2013
quickheal antivirus proStack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users...CVE-2013-6767Public exploit7.2 HighDecember 20, 2013
upc ireland cisco epc2425The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number...CVE-2013-7136Public exploit9.3 HighDecember 19, 2013
wiresharkepan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4...CVE-2013-7113Fix available5.0 MediumDecember 19, 2013
digium asterisk, certified asterisk, asterisk digiumphones +2 moreBuffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x...CVE-2013-7100Fix available5.0 MediumDecember 19, 2013
cisco epc3925Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices...CVE-2013-6976Public exploit6.8 MediumDecember 19, 2013
realnetworks realplayerHeap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac...CVE-2013-6877Public exploitEPSS 11.3%9.3 HighDecember 19, 2013
ibm db2, db2 connect, db2 purescale feature 9.8 +2 moreThe OLAP query engine in IBM DB2 and DB2 Connect 9.7 through FP9, 9.8 through FP5, 10.1 through...CVE-2013-67174.0 MediumDecember 19, 2013
emc rsa archer egrcMultiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1...CVE-2013-61784.3 MediumDecember 19, 2013
ibm content navigatorIBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1...CVE-2013-54624.3 MediumDecember 19, 2013
ibm filenet business process frameworkIBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary...CVE-2013-54523.5 LowDecember 19, 2013
ibm infosphere master data management server for product information management, infosphere master data management collaboration server +1 moreSession fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition...CVE-2013-54264.9 MediumDecember 19, 2013
ibm rational clearcaseThe Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1...CVE-2013-54224.3 MediumDecember 19, 2013
wiresharkMultiple buffer overflows in the create_ntlmssp_v2_key function in epan/dissectors/packet-ntlmssp...CVE-2013-7114Fix available5.0 MediumDecember 19, 2013
wiresharkThe dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark...CVE-2013-7112Fix available5.0 MediumDecember 19, 2013
webbynodeWebbynode Code Injection vulnerabilityCVE-2013-70867.5 HighDecember 19, 2013
mike stefanello og featuresThe OG Features module 6.x-1.x before 6.x-1.4 for Drupal does not properly override pages that...CVE-2013-70675.8 MediumDecember 19, 2013
dlink dsr-1000, dsr-1000n, dsr-150 +12 more +14 moreD-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and...CVE-2013-70054.9 MediumDecember 19, 2013
dlink dsr-1000, dsr-1000n, dsr-150 +12 more +14 moreD-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and...CVE-2013-70047.8 HighDecember 19, 2013
no-margin-for-errors prettyphotoCross-site scripting (XSS) vulnerability in the setTimeout function in js/jquery.prettyPhoto.js...CVE-2013-68374.3 MediumDecember 19, 2013
gnome gnumericHeap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in...CVE-2013-6836Fix available4.3 MediumDecember 19, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open