2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4171 | — | — | 3.0% | Dec 7, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.2 allow remote attackers to inject arbit... |
| CVE-2013-6707 | — | — | 2.5% | Dec 7, 2013 | Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and ear... |
| CVE-2013-5455 | — | — | 0.9% | Dec 7, 2013 | IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment ... |
| CVE-2013-6999 | — | — | 2.0% | Dec 7, 2013 | The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 SP2 does not ... |
| CVE-2013-6920 | — | — | 3.2% | Dec 7, 2013 | Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, ... |
| CVE-2013-6640 | — | — | 1.8% | Dec 7, 2013 | The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google... |
| CVE-2013-6639 | — | — | 1.8% | Dec 7, 2013 | The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google... |
| CVE-2013-6638 | — | — | 1.9% | Dec 7, 2013 | Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, all... |
| CVE-2013-6637 | — | — | 1.3% | Dec 7, 2013 | Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.63 allow attackers to cause a denial of service o... |
| CVE-2013-6636 | — | — | 1.3% | Dec 7, 2013 | The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chr... |
| CVE-2013-6635 | — | — | 1.6% | Dec 7, 2013 | Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allow... |
| CVE-2013-6634 | — | — | 1.4% | Dec 7, 2013 | The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome ... |
| CVE-2013-6417 | — | — | 2.4% | Dec 7, 2013 | actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly con... |
| CVE-2013-6416 | — | — | 2.0% | Dec 7, 2013 | Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.r... |
| CVE-2013-6415 | — | — | 3.2% | Dec 7, 2013 | Cross-site scripting (XSS) vulnerability in the number_to_currency helper in actionpack/lib/action_view/helpers/number_h... |
| CVE-2013-6414 | — | — | 20.7% | Dec 7, 2013 | actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allo... |
| CVE-2013-4492 | — | — | 2.2% | Dec 7, 2013 | Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers ... |
| CVE-2013-4491 | — | — | 2.2% | Dec 7, 2013 | Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/translation_helper.rb in the internationa... |
| CVE-2013-2133 | — | — | 1.8% | Dec 6, 2013 | The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) bef... |
| CVE-2013-1090 | — | — | 0.4% | Dec 6, 2013 | The SUSE horde5 package before 5.0.2-2.4.1 sets incorrect ownership for certain configuration files and directories incl... |
| CVE-2013-6804 | — | — | 1.2% | Dec 5, 2013 | Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject... |
| CVE-2013-6787 | — | — | 2.7% | Dec 5, 2013 | SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlie... |
| CVE-2013-6395 | — | — | 2.2% | Dec 5, 2013 | Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject... |
| CVE-2013-6341 | — | — | 2.3% | Dec 5, 2013 | SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via ... |
| CVE-2013-6267 | — | — | 1.4% | Dec 5, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.11.9 allow remote attackers to inject arbitrar... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now