CVE-2013-4158

smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790)

• CWE-79

• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113987.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114008.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/07/20/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/61371Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-4158Broken Link, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4158Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85887Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-4158Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113987.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114008.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/07/20/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/61371Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-4158Broken Link, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4158Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85887Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-4158Third Party Advisory

Published

Dec 11, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4152The Spring OXM wrapper in Spring Framework before 3.2.4 and …
• CVE-2013-4153Double free vulnerability in the qemuAgentGetVCPUs function …
• CVE-2013-4154The qemuAgentCommand function in libvirt before 1.1.1, when …
• CVE-2013-4155OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana …
• CVE-2013-4156Apache OpenOffice.org (OOo) before 4.0 allows remote attacke…
• CVE-2013-4157Red Hat Storage 2.0 allows local users to overwrite arbitrar…
• CVE-2013-4159ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create te…
• CVE-2013-4160Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and poss…
• CVE-2013-4161gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in…7.8
• CVE-2013-4162The udp_v6_push_pending_frames function in net/ipv6/udp.c in…
• CVE-2013-4163The ip6_append_data_mtu function in net/ipv6/ip6_output.c in…
• CVE-2013-4164Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p48…