2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-1401 | CRITICAL | 9.8 | 5.0% | Feb 13, 2020 | Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPre... |
| CVE-2013-1400 | CRITICAL | 9.8 | 3.2% | Feb 13, 2020 | Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to exec... |
| CVE-2013-0295 | — | — | — | Feb 13, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0342. Reason: This candidate is a duplicate of [... |
| CVE-2013-6022 | MEDIUM | 6.1 | 1.4% | Feb 12, 2020 | A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, whic... |
| CVE-2013-5106 | HIGH | 8.8 | 1.7% | Feb 12, 2020 | A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19. |
| CVE-2013-4602 | MEDIUM | 5.5 | 1.4% | Feb 12, 2020 | A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified fun... |
| CVE-2013-3725 | CRITICAL | 9.8 | 1.8% | Feb 12, 2020 | Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution. |
| CVE-2013-7286 | HIGH | 7.5 | 1.5% | Feb 12, 2020 | MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm |
| CVE-2013-2637 | MEDIUM | 6.1 | 4.2% | Feb 12, 2020 | A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 a... |
| CVE-2013-6681 | MEDIUM | 5.9 | 1.2% | Feb 12, 2020 | Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure Vulnerability |
| CVE-2013-6236 | CRITICAL | 9.8 | 10.2% | Feb 12, 2020 | IZON IP 2.0.2: hard-coded password vulnerability |
| CVE-2013-4395 | MEDIUM | 6.1 | 1.0% | Feb 12, 2020 | Simple Machines Forum (SMF) through 2.0.5 has XSS |
| CVE-2013-4090 | HIGH | 7.5 | 1.2% | Feb 12, 2020 | Varnish HTTP cache before 3.0.4: ACL bug |
| CVE-2013-3685 | HIGH | 7 | 0.4% | Feb 12, 2020 | A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4... |
| CVE-2013-3494 | HIGH | 7.8 | 1.6% | Feb 12, 2020 | A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loadin... |
| CVE-2013-2097 | HIGH | 7.8 | 25.5% | Feb 12, 2020 | ZPanel through 10.1.0 has Remote Command Execution |
| CVE-2013-1938 | MEDIUM | 6.1 | 3.3% | Feb 12, 2020 | Zimbra 2013 has XSS in aspell.php |
| CVE-2013-1924 | HIGH | 7.5 | 1.1% | Feb 12, 2020 | Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2 |
| CVE-2013-7381 | CRITICAL | 9.8 | 2.7% | Feb 12, 2020 | libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a... |
| CVE-2013-2010 | CRITICAL | 9.8 | 73.9% | Feb 12, 2020 | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability |
| CVE-2013-1410 | MEDIUM | 6.1 | 1.5% | Feb 12, 2020 | Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities |
| CVE-2013-7378 | CRITICAL | 9.8 | 2.7% | Feb 12, 2020 | scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary c... |
| CVE-2013-4225 | HIGH | 8.8 | 2.0% | Feb 11, 2020 | The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly ... |
| CVE-2013-2213 | MEDIUM | 5.5 | 0.3% | Feb 11, 2020 | The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's... |
| CVE-2013-2120 | HIGH | 8.4 | 0.6% | Feb 11, 2020 | The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now