2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4487 | — | — | 1.9% | Nov 20, 2013 | Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6... |
| CVE-2013-4466 | — | — | 2.0% | Nov 20, 2013 | Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x be... |
| CVE-2013-4386 | — | — | 1.2% | Nov 20, 2013 | Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attack... |
| CVE-2013-6282 | HIGH | 8.8 | 39.7% | Nov 20, 2013 | The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not ... |
| CVE-2013-6074 | — | — | 1.4% | Nov 20, 2013 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-r... |
| CVE-2013-5966 | — | — | 1.2% | Nov 20, 2013 | Cross-site scripting (XSS) vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web s... |
| CVE-2013-5730 | — | — | 1.2% | Nov 20, 2013 | Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remot... |
| CVE-2013-5215 | — | — | 1.9% | Nov 20, 2013 | Cross-site scripting (XSS) vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows re... |
| CVE-2013-4592 | — | — | 0.5% | Nov 20, 2013 | Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local u... |
| CVE-2013-4591 | — | — | 0.6% | Nov 20, 2013 | Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows loc... |
| CVE-2013-4588 | HIGH | 7 | 0.4% | Nov 20, 2013 | Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_I... |
| CVE-2013-4579 | — | — | 10.2% | Nov 20, 2013 | The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 ... |
| CVE-2013-4563 | — | — | 3.9% | Nov 20, 2013 | The udp6_ufo_fragment function in net/ipv6/udp_offload.c in the Linux kernel through 3.12, when UDP Fragmentation Offloa... |
| CVE-2013-4507 | — | — | 0.9% | Nov 20, 2013 | Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attacke... |
| CVE-2013-3095 | — | — | 1.2% | Nov 20, 2013 | Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b... |
| CVE-2013-6797 | — | — | 2.9% | Nov 19, 2013 | Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin be... |
| CVE-2013-6631 | — | — | 1.6% | Nov 19, 2013 | Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, ... |
| CVE-2013-6630 | — | — | 2.1% | Nov 19, 2013 | The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and othe... |
| CVE-2013-6629 | — | — | 10.1% | Nov 19, 2013 | The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome befor... |
| CVE-2013-6042 | — | — | 1.8% | Nov 19, 2013 | Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo befor... |
| CVE-2013-5223 | MEDIUM | 5.4 | 33.6% | Nov 19, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated use... |
| CVE-2013-4519 | — | — | 2.0% | Nov 19, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow re... |
| CVE-2013-2271 | — | — | 5.4% | Nov 19, 2013 | The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers ... |
| CVE-2013-0741 | — | — | 1.4% | Nov 19, 2013 | Cross-site scripting (XSS) vulnerability in imagegen.ashx in Percipient Studios ImageGen before 2.9.0 for Umbraco CMS al... |
| CVE-2013-6802 | — | — | 1.4% | Nov 18, 2013 | Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access t... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now