2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4457 | — | — | 1.5% | Nov 2, 2013 | The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a craf... |
| CVE-2013-4401 | — | — | 1.7% | Nov 2, 2013 | The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission inste... |
| CVE-2013-2652 | — | — | 2.5% | Nov 2, 2013 | CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject a... |
| CVE-2013-5977 | — | — | 3.2% | Nov 1, 2013 | Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordP... |
| CVE-2013-4447 | — | — | 2.7% | Nov 1, 2013 | Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7... |
| CVE-2013-2701 | — | — | 1.0% | Nov 1, 2013 | Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote a... |
| CVE-2013-5555 | — | — | 1.1% | Nov 1, 2013 | Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (serv... |
| CVE-2013-5551 | — | — | 1.0% | Nov 1, 2013 | Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are e... |
| CVE-2013-5548 | — | — | 1.1% | Nov 1, 2013 | The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec... |
| CVE-2013-5431 | — | — | 1.4% | Nov 1, 2013 | Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.... |
| CVE-2013-4713 | — | — | 1.4% | Nov 1, 2013 | Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote aut... |
| CVE-2013-4484 | — | — | 3.0% | Nov 1, 2013 | Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching out... |
| CVE-2013-3630 | — | — | 42.6% | Nov 1, 2013 | Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell ... |
| CVE-2013-5547 | — | — | 1.9% | Oct 31, 2013 | Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) ... |
| CVE-2013-5546 | — | — | 1.9% | Oct 31, 2013 | The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote att... |
| CVE-2013-5545 | — | — | 1.9% | Oct 31, 2013 | The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a den... |
| CVE-2013-5543 | — | — | 1.9% | Oct 31, 2013 | Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of se... |
| CVE-2013-5604 | — | — | 6.5% | Oct 30, 2013 | The txXPathNodeUtils::getBaseURI function in the XSLT processor in Mozilla Firefox before 25.0, Firefox ESR 17.x before ... |
| CVE-2013-5603 | — | — | 5.4% | Oct 30, 2013 | Use-after-free vulnerability in the nsContentUtils::ContentIsHostIncludingDescendantOf function in Mozilla Firefox befor... |
| CVE-2013-5602 | — | — | 5.2% | Oct 30, 2013 | The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0, Firefox ESR 17.x... |
| CVE-2013-5601 | — | — | 5.3% | Oct 30, 2013 | Use-after-free vulnerability in the nsEventListenerManager::SetEventHandler function in Mozilla Firefox before 25.0, Fir... |
| CVE-2013-5600 | — | — | 5.3% | Oct 30, 2013 | Use-after-free vulnerability in the nsIOService::NewChannelFromURIWithProxyFlags function in Mozilla Firefox before 25.0... |
| CVE-2013-5599 | — | — | 5.2% | Oct 30, 2013 | Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) impl... |
| CVE-2013-5598 | — | — | 2.9% | Oct 30, 2013 | PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 does not properly handle the appending of an IFRA... |
| CVE-2013-5597 | — | — | 6.3% | Oct 30, 2013 | Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now