2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-3591 | HIGH | 8.8 | 43.1% | Feb 7, 2020 | vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability |
| CVE-2013-4334 | CRITICAL | 9.8 | 1.4% | Feb 7, 2020 | opWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities |
| CVE-2013-2009 | HIGH | 8.8 | 13.0% | Feb 7, 2020 | WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution |
| CVE-2013-2008 | MEDIUM | 6.1 | 1.5% | Feb 7, 2020 | WordPress Super Cache Plugin 1.3 has XSS. |
| CVE-2013-1202 | HIGH | 7.5 | 1.0% | Feb 7, 2020 | Cisco ACE A2(3.6) allows log retention DoS. |
| CVE-2013-0192 | MEDIUM | 4.9 | 3.8% | Feb 7, 2020 | File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. |
| CVE-2013-3638 | HIGH | 8.8 | 1.4% | Feb 6, 2020 | SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL co... |
| CVE-2013-3568 | HIGH | 8.8 | 25.1% | Feb 6, 2020 | Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentica... |
| CVE-2013-3564 | MEDIUM | 5.3 | 1.1% | Feb 6, 2020 | The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view ... |
| CVE-2013-2684 | MEDIUM | 6.1 | 3.7% | Feb 6, 2020 | Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web... |
| CVE-2013-2683 | MEDIUM | 5.3 | 13.4% | Feb 6, 2020 | Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers... |
| CVE-2013-4521 | CRITICAL | 9.8 | 4.1% | Feb 6, 2020 | RichFaces implementation in Nuxeo Platform 5.6.0 before HF27 and 5.8.0 before HF-01 does not restrict the classes for wh... |
| CVE-2013-4572 | HIGH | 7.5 | 2.1% | Feb 6, 2020 | The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-C... |
| CVE-2013-4166 | HIGH | 7.5 | 1.9% | Feb 6, 2020 | The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data ... |
| CVE-2013-2682 | MEDIUM | 4.3 | 6.3% | Feb 5, 2020 | Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain ... |
| CVE-2013-2681 | CRITICAL | 9.8 | 10.1% | Feb 5, 2020 | Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to... |
| CVE-2013-2680 | HIGH | 7.5 | 8.7% | Feb 5, 2020 | Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive in... |
| CVE-2013-5989 | — | — | — | Feb 5, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4969. Reason: This candidate is a duplicate of C... |
| CVE-2013-2675 | MEDIUM | 6.5 | 2.2% | Feb 5, 2020 | Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could a... |
| CVE-2013-0507 | HIGH | 8.1 | 1.2% | Feb 5, 2020 | IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability |
| CVE-2013-2678 | HIGH | 8.1 | 16.9% | Feb 4, 2020 | Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers... |
| CVE-2013-2676 | HIGH | 7.5 | 2.4% | Feb 4, 2020 | Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attacker... |
| CVE-2013-7055 | CRITICAL | 9.8 | 7.0% | Feb 4, 2020 | D-Link DIR-100 4.03B07 has PPTP and poe information disclosure |
| CVE-2013-7054 | MEDIUM | 6.1 | 3.5% | Feb 4, 2020 | D-Link DIR-100 4.03B07: cli.cgi XSS |
| CVE-2013-7053 | HIGH | 8.8 | 3.4% | Feb 4, 2020 | D-Link DIR-100 4.03B07: cli.cgi CSRF |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now