2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-6172 | — | — | 2.9% | Nov 5, 2013 | steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify con... |
| CVE-2013-6077 | — | — | 1.7% | Nov 5, 2013 | Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allow... |
| CVE-2013-5670 | — | — | 1.2% | Nov 5, 2013 | Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Se... |
| CVE-2013-4439 | — | — | 1.5% | Nov 5, 2013 | Salt (aka SaltStack) before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions v... |
| CVE-2013-4438 | — | — | 2.1% | Nov 5, 2013 | Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE... |
| CVE-2013-4437 | — | — | 1.5% | Nov 5, 2013 | Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "inse... |
| CVE-2013-4436 | — | — | 1.8% | Nov 5, 2013 | The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, wh... |
| CVE-2013-4435 | — | — | 1.5% | Nov 5, 2013 | Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or cl... |
| CVE-2013-6366 | — | — | 7.0% | Nov 4, 2013 | The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary cod... |
| CVE-2013-6340 | — | — | 1.7% | Nov 4, 2013 | epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not pro... |
| CVE-2013-6339 | — | — | 2.0% | Nov 4, 2013 | The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x bef... |
| CVE-2013-6338 | — | — | 1.7% | Nov 4, 2013 | The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 an... |
| CVE-2013-6337 | — | — | 1.5% | Nov 4, 2013 | Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote ... |
| CVE-2013-6336 | — | — | 1.9% | Nov 4, 2013 | The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x... |
| CVE-2013-5564 | — | — | 1.8% | Nov 4, 2013 | The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attac... |
| CVE-2013-5561 | — | — | 1.2% | Nov 4, 2013 | The Safe Search enforcement feature in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security Software does n... |
| CVE-2013-5559 | — | — | 2.0% | Nov 4, 2013 | Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobil... |
| CVE-2013-4839 | — | — | 4.0% | Nov 4, 2013 | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to obtain sens... |
| CVE-2013-4838 | — | — | 10.7% | Nov 4, 2013 | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arb... |
| CVE-2013-4837 | — | — | 62.6% | Nov 4, 2013 | Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arb... |
| CVE-2013-4836 | — | — | 5.5% | Nov 4, 2013 | Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in... |
| CVE-2013-4835 | — | — | 71.0% | Nov 4, 2013 | The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authenti... |
| CVE-2013-4834 | — | — | 5.5% | Nov 4, 2013 | Unspecified vulnerability in the client component in HP Application LifeCycle Management (ALM) before 11 p11 allows remo... |
| CVE-2013-6114 | — | — | 4.9% | Nov 4, 2013 | Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denia... |
| CVE-2013-4483 | — | — | 0.5% | Nov 4, 2013 | The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, wh... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now