2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-3860 | — | — | 31.6% | Oct 9, 2013 | Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly parse a DTD during XML digital-signa... |
| CVE-2013-3200 | — | — | 5.4% | Oct 9, 2013 | The USB drivers in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista S... |
| CVE-2013-3195 | — | — | 38.5% | Oct 9, 2013 | The DSA_InsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows S... |
| CVE-2013-3128 | — | — | 50.4% | Oct 9, 2013 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server ... |
| CVE-2013-2099 | — | — | 4.9% | Oct 9, 2013 | Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspeci... |
| CVE-2013-2098 | — | — | — | Oct 9, 2013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2099. Reason: This candidate is a duplicate of... |
| CVE-2013-3627 | — | — | 2.0% | Oct 5, 2013 | FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927 and 4.6 before 4.6.0.325... |
| CVE-2013-3610 | — | — | 0.7% | Oct 5, 2013 | qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allow... |
| CVE-2013-2808 | — | — | 4.3% | Oct 5, 2013 | Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Informatio... |
| CVE-2013-3689 | — | — | 1.5% | Oct 4, 2013 | Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.... |
| CVE-2013-3543 | — | — | 4.1% | Oct 4, 2013 | The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote ... |
| CVE-2013-3541 | — | — | 8.9% | Oct 4, 2013 | Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows... |
| CVE-2013-3540 | — | — | 1.0% | Oct 4, 2013 | Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD... |
| CVE-2013-0188 | — | — | — | Oct 4, 2013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0189, CVE-2013-0191. Reason: this identifier w... |
| CVE-2013-5091 | — | — | 1.2% | Oct 4, 2013 | SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated u... |
| CVE-2013-4986 | — | — | 4.1% | Oct 4, 2013 | Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and ea... |
| CVE-2013-6044 | — | — | 2.3% | Oct 4, 2013 | The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats... |
| CVE-2013-6011 | — | — | 1.5% | Oct 4, 2013 | Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial o... |
| CVE-2013-5915 | — | — | 2.1% | Oct 4, 2013 | The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might all... |
| CVE-2013-4788 | — | — | 11.4% | Oct 4, 2013 | The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLI... |
| CVE-2013-4758 | — | — | 2.3% | Oct 4, 2013 | Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before... |
| CVE-2013-4344 | — | — | 0.4% | Oct 4, 2013 | Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached de... |
| CVE-2013-4330 | — | — | 8.5% | Oct 4, 2013 | Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arb... |
| CVE-2013-4249 | — | — | 2.9% | Oct 4, 2013 | Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x b... |
| CVE-2013-4157 | — | — | 0.4% | Oct 4, 2013 | Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now