2013 CVE Vulnerabilities
6,830 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-1315 | — | — | 28.7% | Sep 11, 2013 | Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 S... |
| CVE-2013-0810 | HIGH | 8.1 | 59.9% | Sep 11, 2013 | Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote a... |
| CVE-2013-0081 | — | — | 77.5% | Sep 11, 2013 | Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly p... |
| CVE-2013-5673 | — | — | 6.5% | Sep 10, 2013 | SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attack... |
| CVE-2013-5672 | — | — | 3.2% | Sep 10, 2013 | Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow re... |
| CVE-2013-4298 | — | — | 4.7% | Sep 10, 2013 | The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of ser... |
| CVE-2013-4283 | — | — | 2.4% | Sep 10, 2013 | ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via ... |
| CVE-2013-4243 | — | — | 7.8% | Sep 10, 2013 | Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote ... |
| CVE-2013-4232 | — | — | 5.0% | Sep 10, 2013 | Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote ... |
| CVE-2013-4169 | — | — | 0.4% | Sep 10, 2013 | GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlin... |
| CVE-2013-3934 | — | — | 9.8% | Sep 10, 2013 | Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allow... |
| CVE-2013-5700 | — | — | 2.0% | Sep 10, 2013 | The Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote attackers to cause a deni... |
| CVE-2013-4984 | — | — | 8.1% | Sep 10, 2013 | The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1... |
| CVE-2013-4983 | — | — | 90.1% | Sep 10, 2013 | The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows... |
| CVE-2013-4703 | — | — | 1.1% | Sep 10, 2013 | Cross-site scripting (XSS) vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows remo... |
| CVE-2013-3658 | — | — | 3.7% | Sep 10, 2013 | Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete... |
| CVE-2013-3657 | — | — | 3.1% | Sep 10, 2013 | Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code o... |
| CVE-2013-5716 | — | — | 2.2% | Sep 9, 2013 | Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (applicat... |
| CVE-2013-5715 | — | — | 1.8% | Sep 9, 2013 | Buffer overflow in Gretech GOM Media Player before 2.2.53.5169 has unspecified impact and attack vectors. |
| CVE-2013-5714 | — | — | 2.0% | Sep 9, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration pl... |
| CVE-2013-5642 | — | — | 11.7% | Sep 9, 2013 | The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.... |
| CVE-2013-5641 | — | — | 4.1% | Sep 9, 2013 | The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1... |
| CVE-2013-4900 | — | — | 4.1% | Sep 9, 2013 | Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote... |
| CVE-2013-4899 | — | — | 1.2% | Sep 9, 2013 | Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arb... |
| CVE-2013-2992 | — | — | 1.6% | Sep 9, 2013 | The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, a... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now