CVE-2013-3896

CVE-2013-3896 affects Microsoft Silverlight 5 before 5.1.20913.0, where improper pointer validation during access to Silverlight elements leads to potential information disclosure. Affected component is Silverlight runtime; impact is partial confidentiality loss without integrity or availability ...

CVE-2013-3897

CVE-2013-3897 is a use-after-free vulnerability in the CDisplayPointer class of mshtml.dll used by Microsoft Internet Explorer (IE6–IE11). The flaw is triggered via crafted JavaScript using the onpropertychange event, leading to remote code execution or memory corruption. Public discussions and r...

CVE-2013-3893

CVE-2013-3893 is a use-after-free in mshtml.dll (Internet Explorer) specifically in SetMouseCapture, exploited via crafted JavaScript (notably through ms-help URLs) to achieve remote code execution across IE 6–11. Connected KEV/CISA entries confirm active exploitation in the wild and classify it ...

CVE-2013-4810

HP ProCurve Manager (PCM) 3.20/4.0, PCM+ 3.20/4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management are affected. The root cause is a remote code execution vector via a marshalled object to the EJBInvokerServlet or JMXInvokerServlet, enabling an attacker to execute arbitrar...

CVE-2013-3346

CVE-2013-3346 affects Adobe Reader and Acrobat where the ToolButton use-after-free in the ToolButton callback enables memory corruption leading to arbitrary code execution or Denial of Service. Affected product versions are Adobe Reader/Acrobat 9.x <= 9.5.4, 10.x <= 10.1.6, and 11.x

CVE-2013-4878

CVE-2013-4878 affects Parallels Plesk Panel 9.0.x–9.2.x on UNIX and Small Business Panel 10.x on UNIX, due to an improper ScriptAlias directive for phppath that enables remote code execution via crafted requests. Affected versions expose code execution under the web server user; exploitation reli...

CVE-2013-2251

CVE-2013-2251 affects Apache Struts 2 (versions 2.0.0–2.3.15) via improper handling of prefixed parameters in DefaultActionMapper (action:, redirect:, redirectAction:), allowing remote OGNL expression execution and arbitrary code execution. Some sources indicate this was addressed in Struts 2.3.1...

CVE-2013-2135

CVE-2013-2135 affects Apache Struts 2 prior to 2.3.14.3, allowing remote execution via OGNL when a crafted value contains both "${}" and "%{}" sequences that cause double evaluation. The issue is documented in multiple sources (S2-015) and is tied to how includeParams is handled in certain reques...

CVE-2013-2134

CVE-2013-2134: Apache Struts 2 before 2.3.14.3 allows remote OGNL code execution through a crafted action name during wildcard matching. IBM and other bulletins link this family of Struts vulnerabilities to exposed management interfaces and unauthorized access risks, with remediation typically de...

CVE-2013-3151

CVE-2013-3163 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 8–10 that could be triggered by visiting a crafted website, enabling remote code execution or a denial of service. Public documentation in the connected sources consistently describes it as Internet Expl...

CVE-2013-3144

Microsoft Internet Explorer 8–10 is affected by a memory corruption vulnerability exploitable via a crafted web site (CVE-2013-3144 family). The connected data confirms related exploitation activity (MS13-055) targeting IE8 with a use-after-free in CAnchorElement handling, and publicly available ...

CVE-2013-3163

Microsoft Internet Explorer 8–10 contains a memory corruption vulnerability (CVE-2013-3163) that allows remote code execution or a denial of service when a user visits a crafted web site. Affected component: IE’s memory handling in versions 8–10; root cause described as memory corruption via craf...

CVE-2013-4786

CVE-2013-4786 is an IPMI 2.0 vulnerability where RAKP authentication can leak HMAC data, enabling an attacker with IPMI network access to obtain password hashes and potentially hijack or replay BMC sessions. CERT notes that an unauthenticated attacker on the BMC network can predict session identi...

CVE-2013-1690

CVE-2013-1690 affects Mozilla Firefox prior to 22.0, Firefox ESR 17.x prior to 17.0.7, Thunderbird prior to 17.0.7, and Thunderbird ESR 17.x prior to 17.0.7. Root cause is improper handling of onreadystatechange events with page reload, enabling a crafted web page to cause a denial-of-service (cr...

CVE-2013-2469

CVE-2013-2469 is a Java Runtime Environment (JRE) vulnerability reported across IBM advisories related to IBM Java SDK shipped with Tivoli/TPC, WebSphere Real Time, and ITM components. The issue affects JREs included in Oracle Java SE 7u21 and earlier, 6u45 and earlier, 5.0u45 and earlier, and Op...

CVE-2013-2472

CVE-2013-2472 is an unspecified vulnerability in the JRE component of Oracle Java SE up to 7u21, 6u45, 5.0u45 and OpenJDK 7, with unknown vectors related to 2D. It is described as potentially bypassing the Java sandbox, impacting confidentiality, integrity, and availability. No public remediation...

CVE-2013-2470

CVE-2013-2470 affects Oracle Java SE (7u21 and earlier, 6u45 and earlier, 5.0u45 and earlier) and OpenJDK 7. The flaw is a memory corruption/heap-buffer overflow in the 2D ImagingLib.lookupByteBI path, enabling a remote attacker to execute arbitrary code or potentially terminate the JVM. Public a...

CVE-2013-2473

CVE-2013-2473 is described as an unspecified vulnerability in the Java Runtime Environment (JRE) affecting Oracle Java SE 7u21 and earlier, 6u45 and earlier, 5.0u45 and earlier, and OpenJDK 7, with an attack vector related to the 2D component and potential Java sandbox bypass. IBM documentation l...

CVE-2013-2471

CVE-2013-2471 is a remote-code-execution type vulnerability in the Java 2D/awt stack affecting Oracle JRE/JDK and OpenJDK (across 6 and 7 lines) identified by multiple advisories. The issue is described as memory corruption in the 2D component related to IntegerComponentRaster size checks, with p...

CVE-2013-2464

CVE-2013-2464 is described as an unspecified vulnerability in the Oracle Java SE JRE with potential impact to confidentiality, integrity, and availability via unknown vectors related to 2D. Connected documents provide concrete details for related CVEs (2463, 2465, 2470, 2471, 2472, 2473) indicati...