2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4167 | — | — | 1.2% | Oct 11, 2013 | Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) before 1.11.7 allows remote attackers to inject arbi... |
| CVE-2013-4137 | — | — | 1.1% | Oct 11, 2013 | Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitra... |
| CVE-2013-3693 | — | — | 1.0% | Oct 11, 2013 | The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly res... |
| CVE-2013-5028 | — | — | 1.9% | Oct 11, 2013 | SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authen... |
| CVE-2013-4306 | — | — | 0.9% | Oct 11, 2013 | Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, p... |
| CVE-2013-4305 | — | — | 1.5% | Oct 11, 2013 | Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, po... |
| CVE-2013-3687 | — | — | 2.6% | Oct 11, 2013 | AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cl... |
| CVE-2013-3686 | — | — | 27.6% | Oct 11, 2013 | cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the admin... |
| CVE-2013-2581 | — | — | 2.5% | Oct 11, 2013 | cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models be... |
| CVE-2013-2580 | — | — | 3.5% | Oct 11, 2013 | Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-... |
| CVE-2013-2579 | — | — | 3.9% | Oct 11, 2013 | TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.1... |
| CVE-2013-2578 | — | — | 73.7% | Oct 11, 2013 | cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models be... |
| CVE-2013-5533 | — | — | 0.3% | Oct 11, 2013 | The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell c... |
| CVE-2013-5532 | — | — | 2.1% | Oct 11, 2013 | Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of se... |
| CVE-2013-5528 | — | — | 23.3% | Oct 11, 2013 | Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all... |
| CVE-2013-5527 | — | — | 0.8% | Oct 10, 2013 | The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via ... |
| CVE-2013-5526 | — | — | 1.8% | Oct 10, 2013 | Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a... |
| CVE-2013-5525 | — | — | 1.3% | Oct 10, 2013 | SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote a... |
| CVE-2013-5524 | — | — | 1.5% | Oct 10, 2013 | Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and ear... |
| CVE-2013-5523 | — | — | 1.2% | Oct 10, 2013 | The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elem... |
| CVE-2013-5499 | — | — | 0.5% | Oct 10, 2013 | The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload... |
| CVE-2013-5008 | — | — | 0.2% | Oct 10, 2013 | The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used i... |
| CVE-2013-4396 | — | — | 4.1% | Oct 10, 2013 | Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.... |
| CVE-2013-4387 | — | — | 2.6% | Oct 10, 2013 | net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offl... |
| CVE-2013-4345 | — | — | 3.2% | Oct 10, 2013 | Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easie... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now