2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-2499 | HIGH | 7.5 | 3.3% | Jan 27, 2020 | SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via sp... |
| CVE-2013-2474 | HIGH | 7.5 | 10.0% | Jan 27, 2020 | Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' paramete... |
| CVE-2013-2267 | HIGH | 7.2 | 8.8% | Jan 27, 2020 | PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbit... |
| CVE-2013-7390 | CRITICAL | 9.8 | 74.5% | Jan 27, 2020 | Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before buil... |
| CVE-2013-4770 | MEDIUM | 6.1 | 0.8% | Jan 27, 2020 | Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.1 allows remote attacke... |
| CVE-2013-4441 | CRITICAL | 9.8 | 2.0% | Jan 27, 2020 | The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers t... |
| CVE-2013-6056 | HIGH | 7.5 | 1.7% | Jan 27, 2020 | OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability |
| CVE-2013-5659 | HIGH | 7.5 | 1.3% | Jan 27, 2020 | Wiz 5.0.3 has a user mode write access violation |
| CVE-2013-4462 | CRITICAL | 9.1 | 2.8% | Jan 27, 2020 | WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability |
| CVE-2013-3493 | CRITICAL | 9.8 | 1.6% | Jan 27, 2020 | XnView 2.03 has an integer overflow vulnerability |
| CVE-2013-3492 | CRITICAL | 9.8 | 1.5% | Jan 27, 2020 | XnView 2.03 has a stack-based buffer overflow vulnerability |
| CVE-2013-3486 | CRITICAL | 9.6 | 1.8% | Jan 27, 2020 | IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability |
| CVE-2013-0286 | MEDIUM | 5.4 | 0.8% | Jan 27, 2020 | Pinboard 1.0.6 theme for Wordpress has XSS. |
| CVE-2013-1744 | CRITICAL | 9.8 | 5.1% | Jan 25, 2020 | IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands. |
| CVE-2013-1598 | HIGH | 8.8 | 20.5% | Jan 24, 2020 | A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to th... |
| CVE-2013-1597 | MEDIUM | 6.5 | 14.2% | Jan 24, 2020 | A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET requ... |
| CVE-2013-1596 | MEDIUM | 5.3 | 10.4% | Jan 24, 2020 | An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP pac... |
| CVE-2013-1595 | CRITICAL | 9.8 | 41.6% | Jan 24, 2020 | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the... |
| CVE-2013-1594 | HIGH | 7.5 | 7.3% | Jan 24, 2020 | An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire... |
| CVE-2013-4333 | CRITICAL | 9.1 | 2.2% | Jan 24, 2020 | OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability |
| CVE-2013-3960 | CRITICAL | 9.9 | 1.6% | Jan 24, 2020 | Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass |
| CVE-2013-1593 | HIGH | 7.5 | 2.4% | Jan 23, 2020 | A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.... |
| CVE-2013-1592 | CRITICAL | 9.8 | 22.6% | Jan 23, 2020 | A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending speci... |
| CVE-2013-6792 | CRITICAL | 9.8 | 3.0% | Jan 23, 2020 | Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability |
| CVE-2013-6785 | MEDIUM | 4.3 | 4.4% | Jan 23, 2020 | Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attacker... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now