2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-1056 | — | — | 0.3% | Oct 28, 2013 | X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or poss... |
| CVE-2013-6285 | — | — | 1.3% | Oct 28, 2013 | The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obtai... |
| CVE-2013-6020 | — | — | 1.1% | Oct 28, 2013 | passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-rec... |
| CVE-2013-6019 | — | — | 1.0% | Oct 28, 2013 | Cross-site scripting (XSS) vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to inject arbitra... |
| CVE-2013-6018 | — | — | 0.6% | Oct 28, 2013 | Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attacke... |
| CVE-2013-5430 | — | — | 0.9% | Oct 28, 2013 | The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, wh... |
| CVE-2013-4428 | — | — | 3.1% | Oct 27, 2013 | OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when t... |
| CVE-2013-4302 | — | — | 2.0% | Oct 27, 2013 | (1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5) ApiQueryDeletedrevs.php, (6) ApiToken... |
| CVE-2013-4301 | — | — | 2.1% | Oct 27, 2013 | includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x be... |
| CVE-2013-4122 | — | — | 3.6% | Oct 27, 2013 | Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt... |
| CVE-2013-0337 | — | — | 1.9% | Oct 27, 2013 | The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log ... |
| CVE-2013-6016 | — | — | 2.8% | Oct 26, 2013 | The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 ... |
| CVE-2013-5914 | — | — | 3.0% | Oct 26, 2013 | Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow r... |
| CVE-2013-4885 | — | — | 7.2% | Oct 26, 2013 | The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote s... |
| CVE-2013-1445 | — | — | 2.0% | Oct 26, 2013 | The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (... |
| CVE-2013-6284 | — | — | 2.0% | Oct 26, 2013 | Unspecified vulnerability in the Statutory Reporting for Insurance (FS_SR) component in the Financial Services module fo... |
| CVE-2013-6283 | — | — | 10.0% | Oct 25, 2013 | VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly ex... |
| CVE-2013-4965 | — | — | 1.3% | Oct 25, 2013 | Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, wh... |
| CVE-2013-4957 | — | — | 1.1% | Oct 25, 2013 | The dashboard report in Puppet Enterprise before 3.0.1 allows attackers to execute arbitrary YAML code via a crafted rep... |
| CVE-2013-4465 | — | — | 2.4% | Oct 25, 2013 | Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 ... |
| CVE-2013-4434 | — | — | 5.7% | Oct 25, 2013 | Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depend... |
| CVE-2013-4421 | — | — | 6.4% | Oct 25, 2013 | The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial ... |
| CVE-2013-1067 | — | — | 0.4% | Oct 25, 2013 | Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users... |
| CVE-2013-6128 | — | — | 2.6% | Oct 25, 2013 | The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 doe... |
| CVE-2013-6127 | — | — | 13.9% | Oct 25, 2013 | The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now