2013 CVE Vulnerabilities

6,836 CVEs published in 2013.

CVE IDSeverityCVSSDescription
CVE-2013-5330——Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2...
CVE-2013-5329——Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2...
CVE-2013-5328——Adobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2013-5326——Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before ...
CVE-2013-6789——security/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which allows remote or local a...
CVE-2013-3940——Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Wi...
CVE-2013-3917——Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2013-3916——Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2013-3915——Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2013-3914——Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2013-3912——Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ...
CVE-2013-3911——Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem...
CVE-2013-3910——Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (...
CVE-2013-3909——Microsoft Internet Explorer 6 through 8 allows remote attackers to read content from a different (1) domain or (2) zone ...
CVE-2013-3908——Microsoft Internet Explorer 6 through 10 allows user-assisted remote attackers to bypass the Same Origin Policy and obta...
CVE-2013-3905——Microsoft Outlook 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT does not properly expand metadata contained in S/MIME ce...
CVE-2013-3898——Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows...
CVE-2013-3887——The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 20...
CVE-2013-3869——Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Window...
CVE-2013-2653——security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote ...
CVE-2013-1325——Heap-based buffer overflow in Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code v...
CVE-2013-1324——Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote at...
CVE-2013-0082——Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect docum...
CVE-2013-5726——Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actio...
CVE-2013-6763——The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memo...

Check if your code is affected by 2013 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now