2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-5994 | — | — | 1.5% | Nov 21, 2013 | data/class/pages/mypage/LC_Page_Mypage_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers ... |
| CVE-2013-5993 | — | — | 1.1% | Nov 21, 2013 | Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijac... |
| CVE-2013-5992 | — | — | 1.2% | Nov 21, 2013 | Cross-site scripting (XSS) vulnerability in the displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2... |
| CVE-2013-5991 | — | — | 1.3% | Nov 21, 2013 | The displaySystemError function in html/handle_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers... |
| CVE-2013-6831 | — | — | 1.0% | Nov 20, 2013 | PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms has a sudoers file that does not properly restrict ... |
| CVE-2013-6830 | — | — | 8.9% | Nov 20, 2013 | admin/confnetworking.html in PineApp Mail-SeCure 3.70 and earlier on 5099SK and earlier platforms allows remote attacker... |
| CVE-2013-6829 | — | — | 78.3% | Nov 20, 2013 | admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacha... |
| CVE-2013-6828 | — | — | 1.3% | Nov 20, 2013 | admin/management.html in PineApp Mail-SeCure allows remote attackers to bypass authentication and perform a sys_usermng ... |
| CVE-2013-6827 | — | — | 1.4% | Nov 20, 2013 | Absolute path traversal vulnerability in admin/viewmsg.php in PineApp Mail-SeCure allows remote attackers to read arbitr... |
| CVE-2013-5607 | — | — | 3.0% | Nov 20, 2013 | Integer overflow in the PL_ArenaAllocate function in Mozilla Netscape Portable Runtime (NSPR) before 4.10.2, as used in ... |
| CVE-2013-1417 | — | — | 1.9% | Nov 20, 2013 | do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-compone... |
| CVE-2013-6826 | — | — | 1.9% | Nov 20, 2013 | cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate th... |
| CVE-2013-6823 | — | — | 1.2% | Nov 20, 2013 | GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors. |
| CVE-2013-6822 | — | — | 2.2% | Nov 20, 2013 | GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML Extern... |
| CVE-2013-6821 | — | — | 1.9% | Nov 20, 2013 | Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read ar... |
| CVE-2013-6819 | — | — | 1.1% | Nov 20, 2013 | Cross-site scripting (XSS) vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbi... |
| CVE-2013-6820 | — | — | 3.6% | Nov 20, 2013 | Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers to... |
| CVE-2013-6818 | — | — | 1.4% | Nov 20, 2013 | SAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended access restrictions vi... |
| CVE-2013-6817 | — | — | 2.7% | Nov 20, 2013 | Heap-based buffer overflow in SAP Network Interface Router (SAProuter) 7.30 allows remote attackers to cause a denial of... |
| CVE-2013-6816 | — | — | 1.2% | Nov 20, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in the (1) JavaDumpService and (2) DataCollector servlets in SAP Net... |
| CVE-2013-6814 | — | — | 1.8% | Nov 20, 2013 | The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web site... |
| CVE-2013-6815 | — | — | 1.7% | Nov 20, 2013 | The SHSTI_UPLOAD_XML function in the Application Server for ABAP (AS ABAP) in SAP NetWeaver 7.31 and earlier allows remo... |
| CVE-2013-4559 | — | — | 10.7% | Nov 20, 2013 | lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which ... |
| CVE-2013-4560 | — | — | 5.4% | Nov 20, 2013 | Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentatio... |
| CVE-2013-4495 | — | — | 3.3% | Nov 20, 2013 | The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now