2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-5596 | — | — | 3.1% | Oct 30, 2013 | The cycle collection (CC) implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird befor... |
| CVE-2013-5595 | — | — | 2.1% | Oct 30, 2013 | The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird ... |
| CVE-2013-5593 | — | — | 2.0% | Oct 30, 2013 | The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1,... |
| CVE-2013-5592 | — | — | 5.1% | Oct 30, 2013 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 allow remote attackers to caus... |
| CVE-2013-5591 | — | — | 4.4% | Oct 30, 2013 | Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbir... |
| CVE-2013-5590 | — | — | 5.2% | Oct 30, 2013 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.... |
| CVE-2013-4261 | — | — | 1.7% | Oct 29, 2013 | OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly han... |
| CVE-2013-4185 | — | — | 2.1% | Oct 29, 2013 | Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not pro... |
| CVE-2013-5968 | — | — | 2.6% | Oct 29, 2013 | Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote... |
| CVE-2013-5741 | — | — | 2.2% | Oct 29, 2013 | Triangle Research International (aka Tri) Nano-10 PLC devices with firmware r81 and earlier do not properly handle large... |
| CVE-2013-6289 | — | — | 1.8% | Oct 28, 2013 | Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows rem... |
| CVE-2013-6288 | — | — | 2.2% | Oct 28, 2013 | Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and re... |
| CVE-2013-6014 | CRITICAL | 9.3 | 0.8% | Oct 28, 2013 | Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.... |
| CVE-2013-6012 | — | — | 2.2% | Oct 28, 2013 | Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does n... |
| CVE-2013-5744 | — | — | 1.0% | Oct 28, 2013 | Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary... |
| CVE-2013-4402 | — | — | 5.0% | Oct 28, 2013 | The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a den... |
| CVE-2013-4394 | — | — | 0.3% | Oct 28, 2013 | The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on... |
| CVE-2013-4393 | — | — | 0.4% | Oct 28, 2013 | journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service ... |
| CVE-2013-4392 | MEDIUM | 5 | 0.5% | Oct 28, 2013 | systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for ... |
| CVE-2013-4391 | — | — | 5.3% | Oct 28, 2013 | Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cau... |
| CVE-2013-3704 | — | — | 1.5% | Oct 28, 2013 | The RPM GPG key import and handling feature in libzypp 12.15.0 and earlier reports a different key fingerprint than the ... |
| CVE-2013-3243 | — | — | 1.3% | Oct 28, 2013 | Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code ... |
| CVE-2013-2208 | — | — | 2.6% | Oct 28, 2013 | tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP template file. |
| CVE-2013-2186 | — | — | 12.7% | Oct 28, 2013 | The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, ... |
| CVE-2013-2102 | — | — | 1.0% | Oct 28, 2013 | The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentic... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now