By publication date

Exploited and new serious CVEs: June 2013

54 records · 3 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
46Plan	CVE-2013-0136Weaponized	Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticatemutiny · mutiny · CWE-22 RCE Path traversal	High8.5	—	40.3%	Jun 1, 2013
23Monitor	CVE-2012-3544No exploit	Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remapache · tomcat · CWE-20 Pre-auth Denial of service	Medium5.0	—	11.0%	Jun 1, 2013
41Plan	CVE-2013-0984Proof of concept	Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crapple · mac os x · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	14.4%	Jun 5, 2013
52Plan	CVE-2013-2324No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	39.1%	Jun 6, 2013
58Plan	CVE-2013-2325No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
58Plan	CVE-2013-2326No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
58Plan	CVE-2013-2327No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
58Plan	CVE-2013-2328No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
58Plan	CVE-2013-2329No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
58Plan	CVE-2013-2330No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
58Plan	CVE-2013-2331No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
58Plan	CVE-2013-2332No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
67This week	CVE-2013-2333Weaponized	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	89.8%	Jun 6, 2013
54Plan	CVE-2013-2334No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	47.1%	Jun 6, 2013
58Plan	CVE-2013-2335No exploit	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknhp · storage data protector pre-auth RCE	Critical10.0	—	61.0%	Jun 6, 2013
40Plan	CVE-2013-4074Weaponized	The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x beforwireshark · wireshark · CWE-189 Pre-auth Denial of service	Medium5.0	—	60.6%	Jun 9, 2013
27Monitor	CVE-2013-1862No exploit	mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printapache · http server pre-auth RCE	Medium5.1	—	24.8%	Jun 10, 2013
85Now	CVE-2013-1331Weaponized	Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data microsoft · office · CWE-120 RCE Memory safety	High7.8	KEV	79.8%	Jun 11, 2013
43Plan	CVE-2013-1339No exploit	The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Winmicrosoft · windows 7 · CWE-399 RCE	Critical9.0	—	23.6%	Jun 11, 2013
43Plan	CVE-2013-3110No exploit	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
47Plan	CVE-2013-3111Proof of concept	Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	33.5%	Jun 11, 2013
43Plan	CVE-2013-3112No exploit	Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
43Plan	CVE-2013-3113No exploit	Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
43Plan	CVE-2013-3114No exploit	Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
43Plan	CVE-2013-3116No exploit	Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.1%	Jun 11, 2013
43Plan	CVE-2013-3117No exploit	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.1%	Jun 11, 2013
45Plan	CVE-2013-3118No exploit	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	26.5%	Jun 11, 2013
43Plan	CVE-2013-3119No exploit	Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
46Plan	CVE-2013-3120Proof of concept	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	31.6%	Jun 11, 2013
43Plan	CVE-2013-3121No exploit	Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.4%	Jun 11, 2013
43Plan	CVE-2013-3122No exploit	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
45Plan	CVE-2013-3123No exploit	Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	26.5%	Jun 11, 2013
43Plan	CVE-2013-3124No exploit	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
43Plan	CVE-2013-3125No exploit	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
41Plan	CVE-2013-3126No exploit	Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory during the processing of microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	13.5%	Jun 11, 2013
46Plan	CVE-2013-3138No exploit	Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windowsmicrosoft · windows 7 · CWE-189 Pre-auth Denial of service	High7.1	—	59.3%	Jun 11, 2013
43Plan	CVE-2013-3139No exploit	Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
43Plan	CVE-2013-3141No exploit	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.3%	Jun 11, 2013
43Plan	CVE-2013-3142No exploit	Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	19.9%	Jun 11, 2013
56Plan	CVE-2013-3576Weaponized	ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharactehp · system management homepage · CWE-78 RCE Command injection	Critical9.0	—	66.5%	Jun 14, 2013
43Plan	CVE-2013-2338No exploit	Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware befohp · integrated lights-out 3 firmware pre-auth RCE	Critical10.0	—	10.4%	Jun 14, 2013
47Plan	CVE-2013-3520Weaponized	VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary vmware · vcenter chargeback manager · CWE-94 pre-auth RCE	High7.5	—	55.6%	Jun 16, 2013
37Monitor	CVE-2013-1571No exploit	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 andoracle · jdk Pre-auth	Medium4.3	—	66.9%	Jun 18, 2013
58Plan	CVE-2013-2460Weaponized	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows roracle · jre Pre-auth	Critical9.3	—	70.0%	Jun 18, 2013
43Plan	CVE-2013-2463No exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlieroracle · jre Pre-auth	Critical10.0	—	10.1%	Jun 18, 2013
99Now	CVE-2013-2465Weaponized	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlieroracle · jre · CWE-693 Pre-auth	Critical9.8	KEV	98.8%	Jun 18, 2013
47Plan	CVE-2013-2470Proof of concept	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlieroracle · jre Pre-auth	Critical10.0	—	22.9%	Jun 18, 2013
45Plan	CVE-2013-2471No exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlieroracle · jre Pre-auth	Critical10.0	—	15.0%	Jun 18, 2013
47Plan	CVE-2013-2472Proof of concept	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlieroracle · jre Pre-auth	Critical10.0	—	22.9%	Jun 18, 2013
40Plan	CVE-2013-4614Weaponized	English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows thcanon · mg3100 printer · CWE-255	Low2.1	—	2.8%	Jun 21, 2013
40Plan	CVE-2013-4615Weaponized	The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service canon · mg3100 printer · CWE-20 Pre-auth Denial of service	Medium5.0	—	15.6%	Jun 21, 2013
86Now	CVE-2013-1690Weaponized	Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not propermozilla · firefox · CWE-119 pre-auth RCE Memory safety	High8.8	KEV	69.0%	Jun 25, 2013
40Plan	CVE-2013-4660Weaponized	The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attanodeca · js-yaml · CWE-20 pre-auth RCE	Medium6.8	—	17.3%	Jun 28, 2013
44Plan	CVE-2013-0137No exploit	The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device befdigital alert systems · dasdec eas · CWE-310 Pre-auth	Critical10.0	—	13.4%	Jun 30, 2013

CVE-2013-0136
46Plan
Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticate
HighCVSS 8.5WeaponizedEPSS 40%
- RCE
- Path traversal
mutiny · mutinyJun 1, 2013
CVE-2012-3544
23Monitor
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows rem
MediumCVSS 5.0No exploitEPSS 11%
- Pre-auth
- Denial of service
apache · tomcatJun 1, 2013
CVE-2013-0984
41Plan
Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon cr
CriticalCVSS 9.3Proof of conceptEPSS 14%
- pre-auth RCE
- Memory safety
apple · mac os xJun 5, 2013
CVE-2013-2324
52Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 39%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2325
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2326
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2327
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2328
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2329
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2330
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2331
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2332
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2333
67This week
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0WeaponizedEPSS 89%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2334
54Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 47%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-2335
58Plan
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn
CriticalCVSS 10.0No exploitEPSS 61%
- pre-auth RCE
hp · storage data protectorJun 6, 2013
CVE-2013-4074
40Plan
The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x befor
MediumCVSS 5.0WeaponizedEPSS 60%
- Pre-auth
- Denial of service
wireshark · wiresharkJun 9, 2013
CVE-2013-1862
27Monitor
mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-print
MediumCVSS 5.1No exploitEPSS 24%
- pre-auth RCE
apache · http serverJun 10, 2013
CVE-2013-1331
85Now
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data
HighCVSS 7.8KEVWeaponizedEPSS 79%
- RCE
- Memory safety
microsoft · officeJun 11, 2013
CVE-2013-1339
43Plan
The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Win
CriticalCVSS 9.0No exploitEPSS 23%
- RCE
microsoft · windows 7Jun 11, 2013
CVE-2013-3110
43Plan
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3111
47Plan
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3Proof of conceptEPSS 33%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3112
43Plan
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3113
43Plan
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3114
43Plan
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3116
43Plan
Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3117
43Plan
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3118
45Plan
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 26%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3119
43Plan
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3120
46Plan
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3Proof of conceptEPSS 31%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3121
43Plan
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3122
43Plan
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3123
45Plan
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 26%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3124
43Plan
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3125
43Plan
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3126
41Plan
Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory during the processing of
CriticalCVSS 9.3No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3138
46Plan
Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows
HighCVSS 7.1No exploitEPSS 59%
- Pre-auth
- Denial of service
microsoft · windows 7Jun 11, 2013
CVE-2013-3139
43Plan
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3141
43Plan
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3142
43Plan
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · internet explorerJun 11, 2013
CVE-2013-3576
56Plan
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacte
CriticalCVSS 9.0WeaponizedEPSS 66%
- RCE
- Command injection
hp · system management homepageJun 14, 2013
CVE-2013-2338
43Plan
Unspecified vulnerability on HP Integrated Lights-Out 3 (aka iLO3) cards with firmware before 1.57 and 4 (aka iLO4) cards with firmware befo
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · integrated lights-out 3 firmwareJun 14, 2013
CVE-2013-3520
47Plan
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary
HighCVSS 7.5WeaponizedEPSS 55%
- pre-auth RCE
vmware · vcenter chargeback managerJun 16, 2013
CVE-2013-1571
37Monitor
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and
MediumCVSS 4.3No exploitEPSS 66%
- Pre-auth
oracle · jdkJun 18, 2013
CVE-2013-2460
58Plan
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows r
CriticalCVSS 9.3WeaponizedEPSS 70%
- Pre-auth
oracle · jreJun 18, 2013
CVE-2013-2463
43Plan
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier
CriticalCVSS 10.0No exploitEPSS 10%
- Pre-auth
oracle · jreJun 18, 2013
CVE-2013-2465
99Now
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier
CriticalCVSS 9.8KEVWeaponizedEPSS 98%
- Pre-auth
oracle · jreJun 18, 2013
CVE-2013-2470
47Plan
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier
CriticalCVSS 10.0Proof of conceptEPSS 22%
- Pre-auth
oracle · jreJun 18, 2013
CVE-2013-2471
45Plan
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier
CriticalCVSS 10.0No exploitEPSS 15%
- Pre-auth
oracle · jreJun 18, 2013
CVE-2013-2472
47Plan
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier
CriticalCVSS 10.0Proof of conceptEPSS 22%
- Pre-auth
oracle · jreJun 18, 2013
CVE-2013-4614
40Plan
English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows th
LowCVSS 2.1WeaponizedEPSS 2%
canon · mg3100 printerJun 21, 2013
CVE-2013-4615
40Plan
The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service
MediumCVSS 5.0WeaponizedEPSS 15%
- Pre-auth
- Denial of service
canon · mg3100 printerJun 21, 2013
CVE-2013-1690
86Now
Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not proper
HighCVSS 8.8KEVWeaponizedEPSS 69%
- pre-auth RCE
- Memory safety
mozilla · firefoxJun 25, 2013
CVE-2013-4660
40Plan
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote atta
MediumCVSS 6.8WeaponizedEPSS 17%
- pre-auth RCE
nodeca · js-yamlJun 28, 2013
CVE-2013-0137
44Plan
The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device bef
CriticalCVSS 10.0No exploitEPSS 13%
- Pre-auth
digital alert systems · dasdec easJun 30, 2013