2013 CVE Vulnerabilities

6,836 CVEs published in 2013.

CVE IDSeverityCVSSDescription
CVE-2013-0855——Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to ...
CVE-2013-0854——The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to h...
CVE-2013-0853——The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspec...
CVE-2013-0852——The parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an uns...
CVE-2013-0851——The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impa...
CVE-2013-0850——The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecifie...
CVE-2013-0849——The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspeci...
CVE-2013-0848——The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified imp...
CVE-2013-0847——The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified i...
CVE-2013-0846——Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attack...
CVE-2013-0845——libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block len...
CVE-2013-0844——Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers...
CVE-2013-6410——nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attac...
CVE-2013-6409——Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly...
CVE-2013-6408——The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allo...
CVE-2013-6407——The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML...
CVE-2013-6397——Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitr...
CVE-2013-6050——Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML table...
CVE-2013-4558——The get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in Subversion 1.7.11 through 1.7.1...
CVE-2013-4505——The is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0 through 1.8.4 allows r...
CVE-2013-4479——lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary...
CVE-2013-4478——Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metachara...
CVE-2013-4446——The _json_decode function in plugins/context_reaction_block.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x...
CVE-2013-4445——The json rendering functionality in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal uses...
CVE-2013-4212——Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute ...

Check if your code is affected by 2013 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now