2013-07-23 - CVE Archive

CVE-2013-2249 Jul 23, 17:20 HIGH POC THREAT Act Now

mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 43.7%.

Apache Information Disclosure Http Server Apache HTTP Server

NVD

CVSS 2.0

7.5

EPSS

43.7%

Threat

4.3

CVE-2013-4890 Jul 23, 11:03 HIGH POC THREAT Act Now

The DMCRUIS/0.1 web server on the Samsung PS50C7700 TV allows remote attackers to cause a denial of service (daemon crash) via a long URI to TCP port 5600. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 13.5%.

Denial Of Service Samsung Ps50C7700 Television Firmware Ps50C7700 Television

NVD Exploit-DB

CVSS 2.0

7.8

EPSS

13.5%

CVE-2013-2165 Jul 23, 11:03 HIGH PATCH Act Now

ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 24.1%.

Privilege Escalation RCE Java Deserialization Red Hat +8

NVD

CVSS 2.0

7.5

EPSS

24.1%

CVE-2013-4002 Jul 23, 11:03 HIGH PATCH This Week

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable.

Denial Of Service Apache Java IBM Oracle +16

NVD

CVSS 2.0

7.1

EPSS

5.6%