2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4408 | — | — | 2.7% | Dec 10, 2013 | Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samb... |
| CVE-2013-7027 | — | — | 1.5% | Dec 9, 2013 | The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not chec... |
| CVE-2013-7026 | — | — | 0.4% | Dec 9, 2013 | Multiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to cause a denial of service (... |
| CVE-2013-6432 | — | — | 0.5% | Dec 9, 2013 | The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read syst... |
| CVE-2013-6431 | — | — | 0.4% | Dec 9, 2013 | The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code enc... |
| CVE-2013-6427 | — | — | 3.9% | Dec 9, 2013 | upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program fro... |
| CVE-2013-6356 | — | — | — | Dec 9, 2013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2013-6180 | — | — | 1.8% | Dec 9, 2013 | EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests ... |
| CVE-2013-4270 | — | — | 0.5% | Dec 9, 2013 | The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid a... |
| CVE-2013-2930 | — | — | 0.7% | Dec 9, 2013 | The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properl... |
| CVE-2013-2929 | — | — | 0.7% | Dec 9, 2013 | The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass inten... |
| CVE-2013-6985 | — | — | 1.1% | Dec 9, 2013 | SQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows ... |
| CVE-2013-6039 | — | — | 1.5% | Dec 9, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web s... |
| CVE-2013-5355 | — | — | 0.6% | Dec 9, 2013 | Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hijack the aut... |
| CVE-2013-5354 | — | — | 1.2% | Dec 9, 2013 | Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via... |
| CVE-2013-3929 | — | — | 0.7% | Dec 9, 2013 | Cross-site scripting (XSS) vulnerability in admin/editevent.php in CMS Made Simple (CMSMS) 1.11.9 allows remote authenti... |
| CVE-2013-7025 | — | — | 4.3% | Dec 9, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell So... |
| CVE-2013-7024 | — | — | 2.5% | Dec 9, 2013 | The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component numbe... |
| CVE-2013-7023 | — | — | 1.6% | Dec 9, 2013 | The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-alloca... |
| CVE-2013-7022 | — | — | 1.6% | Dec 9, 2013 | The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, w... |
| CVE-2013-7021 | — | — | 1.6% | Dec 9, 2013 | The filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO... |
| CVE-2013-7020 | — | — | 1.7% | Dec 9, 2013 | The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and co... |
| CVE-2013-7019 | — | — | 1.6% | Dec 9, 2013 | The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, w... |
| CVE-2013-7018 | — | — | 2.5% | Dec 9, 2013 | libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows... |
| CVE-2013-7017 | — | — | 2.3% | Dec 9, 2013 | libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (invalid pointer derefer... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now