2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-2223 | — | — | 3.2% | Oct 4, 2013 | GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a ... |
| CVE-2013-2222 | — | — | 4.7% | Oct 4, 2013 | Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (c... |
| CVE-2013-2221 | — | — | 4.3% | Oct 4, 2013 | Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cau... |
| CVE-2013-5419 | — | — | 0.4% | Oct 4, 2013 | Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to ... |
| CVE-2013-5163 | — | — | 0.4% | Oct 4, 2013 | Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authe... |
| CVE-2013-4829 | — | — | 0.3% | Oct 4, 2013 | HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4... |
| CVE-2013-4828 | — | — | 2.7% | Oct 4, 2013 | HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4... |
| CVE-2013-4711 | — | — | 1.8% | Oct 4, 2013 | Cross-site scripting (XSS) vulnerability in Accela BizSearch 3.2 on Linux and Solaris allows remote attackers to inject ... |
| CVE-2013-2964 | — | — | 0.4% | Oct 4, 2013 | Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.... |
| CVE-2013-3248 | — | — | 18.6% | Oct 3, 2013 | Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wi... |
| CVE-2013-0742 | — | — | 34.7% | Oct 3, 2013 | Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial... |
| CVE-2013-4327 | — | — | 0.3% | Oct 3, 2013 | systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intend... |
| CVE-2013-4326 | — | — | 0.4% | Oct 3, 2013 | RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local us... |
| CVE-2013-4324 | — | — | 0.4% | Oct 3, 2013 | spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API... |
| CVE-2013-4311 | — | — | 0.4% | Oct 3, 2013 | libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass inte... |
| CVE-2013-4288 | — | — | 0.3% | Oct 3, 2013 | Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privilege... |
| CVE-2013-1066 | — | — | 0.4% | Oct 3, 2013 | language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for... |
| CVE-2013-1065 | — | — | 0.4% | Oct 3, 2013 | backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, whi... |
| CVE-2013-1064 | — | — | 0.4% | Oct 3, 2013 | apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication wi... |
| CVE-2013-1063 | — | — | 0.4% | Oct 3, 2013 | usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus ... |
| CVE-2013-1062 | — | — | 0.4% | Oct 3, 2013 | ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus f... |
| CVE-2013-1061 | — | — | 0.4% | Oct 3, 2013 | dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 befor... |
| CVE-2013-6010 | — | — | 2.0% | Oct 3, 2013 | Cross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to i... |
| CVE-2013-5701 | — | — | 1.0% | Oct 3, 2013 | Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebB... |
| CVE-2013-6009 | — | — | 1.0% | Oct 3, 2013 | CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now