Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2013

30 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2013-1616
    36Monitor

    The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by inj

    HighCVSS 8.3Proof of conceptEPSS 10%

    symantec · web gatewayAug 1, 2013

  • CVE-2013-3724
    24Monitor

    The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash an

    MediumCVSS 5.0Proof of conceptEPSS 13%

    monkey-project · monkeyAug 1, 2013

  • CVE-2013-4124
    41Plan

    Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4

    MediumCVSS 5.0WeaponizedEPSS 69%

    samba · sambaAug 5, 2013

  • CVE-2013-1710
    52Plan

    The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbi

    CriticalCVSS 10.0WeaponizedEPSS 40%

    mozilla · seamonkeyAug 6, 2013

  • CVE-2013-2577
    41Plan

    Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    xnview · xnviewAug 9, 2013

  • CVE-2013-4625
    20Monitor

    Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote at

    MediumCVSS 4.3Proof of conceptEPSS 11%

    wordpress · wordpressAug 9, 2013

  • CVE-2013-4115
    43Plan

    Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to

    HighCVSS 7.5No exploitEPSS 43%

    opensuse · opensuseAug 9, 2013

  • CVE-2013-3175
    48Plan

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,

    CriticalCVSS 10.0No exploitEPSS 28%

    microsoft · windows 7Aug 14, 2013

  • CVE-2013-3181
    43Plan

    usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execut

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · windows server 2003Aug 14, 2013

  • CVE-2013-3182
    59Plan

    The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processi

    HighCVSS 7.8No exploitEPSS 94%

    microsoft · windows server 2012Aug 14, 2013

  • CVE-2013-3183
    54Plan

    The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012,

    HighCVSS 7.8No exploitEPSS 78%

    microsoft · windows 7Aug 14, 2013

  • CVE-2013-3184
    54Plan

    Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    CriticalCVSS 9.3WeaponizedEPSS 58%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3185
    32Monitor

    Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, an

    MediumCVSS 5.0No exploitEPSS 40%

    microsoft · active directory federation servicesAug 14, 2013

  • CVE-2013-3186
    33Monitor

    The Protected Mode feature in Microsoft Internet Explorer 7 through 10 on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S

    HighCVSS 7.6No exploitEPSS 10%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3187
    43Plan

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3188
    45Plan

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    CriticalCVSS 9.3No exploitEPSS 27%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3189
    43Plan

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3190
    43Plan

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3191
    43Plan

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3192
    20Monitor

    Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script

    MediumCVSS 4.3No exploitEPSS 11%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3193
    43Plan

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3194
    43Plan

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-3199
    43Plan

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerAug 14, 2013

  • CVE-2013-2250
    44Plan

    Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to e

    CriticalCVSS 10.0No exploitEPSS 12%

    apache · ofbizAug 15, 2013

  • CVE-2013-3319
    40Plan

    The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a

    MediumCVSS 5.0WeaponizedEPSS 20%

    sap · netweaverAug 16, 2013

  • CVE-2013-2160
    30Monitor

    The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a de

    MediumCVSS 5.0Proof of conceptEPSS 32%

    apache · cxfAug 19, 2013

  • CVE-2013-1662
    40Plan

    vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to

    MediumCVSS 6.9WeaponizedEPSS 4%

    vmware · workstationAug 23, 2013

  • CVE-2013-3585
    27Monitor

    Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive inf

    MediumCVSS 5.0Proof of conceptEPSS 23%

    samsung · smart viewerAug 28, 2013

  • CVE-2013-3586
    33Monitor

    Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.

    HighCVSS 7.6Proof of conceptEPSS 11%

    samsung · smart viewerAug 28, 2013

  • CVE-2013-3346
    93Now

    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a

    CriticalCVSS 9.8KEVWeaponizedEPSS 78%

    adobe · acrobatAug 30, 2013