2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-6685 | — | — | 0.3% | Nov 13, 2013 | The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allow... |
| CVE-2013-6684 | — | — | 0.9% | Nov 13, 2013 | The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, wh... |
| CVE-2013-6683 | — | — | 0.7% | Nov 13, 2013 | The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attacker... |
| CVE-2013-6682 | — | — | 0.7% | Nov 13, 2013 | The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly... |
| CVE-2013-6628 | — | — | 1.0% | Nov 13, 2013 | net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that ... |
| CVE-2013-6627 | — | — | 5.3% | Nov 13, 2013 | net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1x... |
| CVE-2013-6626 | — | — | 1.1% | Nov 13, 2013 | The WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents/web_contents_impl.cc in Google Chro... |
| CVE-2013-6625 | — | — | 1.5% | Nov 13, 2013 | Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allow... |
| CVE-2013-6624 | — | — | 1.5% | Nov 13, 2013 | Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service o... |
| CVE-2013-6623 | — | — | 1.4% | Nov 13, 2013 | The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial... |
| CVE-2013-6622 | — | — | 1.4% | Nov 13, 2013 | Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in... |
| CVE-2013-6621 | — | — | 1.8% | Nov 13, 2013 | Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service o... |
| CVE-2013-6357 | — | — | 2.5% | Nov 13, 2013 | Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows re... |
| CVE-2013-5990 | — | — | 4.6% | Nov 13, 2013 | Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ic... |
| CVE-2013-5568 | — | — | 1.2% | Nov 13, 2013 | The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote att... |
| CVE-2013-5560 | — | — | 2.0% | Nov 13, 2013 | The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is en... |
| CVE-2013-5552 | — | — | 1.2% | Nov 13, 2013 | Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse erro... |
| CVE-2013-5453 | — | — | 0.9% | Nov 13, 2013 | IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by ... |
| CVE-2013-5450 | — | — | 0.8% | Nov 13, 2013 | IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attac... |
| CVE-2013-5442 | — | — | 1.8% | Nov 13, 2013 | Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on X... |
| CVE-2013-5379 | — | — | 0.9% | Nov 13, 2013 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allo... |
| CVE-2013-5378 | — | — | 0.9% | Nov 13, 2013 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated user... |
| CVE-2013-4476 | — | — | 0.4% | Nov 13, 2013 | Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permission... |
| CVE-2013-4475 | — | — | 9.0% | Nov 13, 2013 | Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_stre... |
| CVE-2013-2931 | — | — | 2.3% | Nov 13, 2013 | Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or p... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now