2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-6451 | MEDIUM | 6.1 | 1.1% | Jan 28, 2020 | Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.... |
| CVE-2013-2571 | CRITICAL | 9.8 | 16.2% | Jan 28, 2020 | Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary ... |
| CVE-2013-1895 | HIGH | 7.5 | 2.8% | Jan 28, 2020 | The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to ... |
| CVE-2013-1437 | CRITICAL | 9.8 | 2.9% | Jan 28, 2020 | Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute a... |
| CVE-2013-2612 | CRITICAL | 9.8 | 3.0% | Jan 27, 2020 | Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary ... |
| CVE-2013-2499 | HIGH | 7.5 | 3.3% | Jan 27, 2020 | SimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in 'user_manager.php' via sp... |
| CVE-2013-2474 | HIGH | 7.5 | 10.0% | Jan 27, 2020 | Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' paramete... |
| CVE-2013-2267 | HIGH | 7.2 | 8.8% | Jan 27, 2020 | PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbit... |
| CVE-2013-7390 | CRITICAL | 9.8 | 74.5% | Jan 27, 2020 | Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before buil... |
| CVE-2013-4770 | MEDIUM | 6.1 | 0.8% | Jan 27, 2020 | Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.1 allows remote attacke... |
| CVE-2013-4441 | CRITICAL | 9.8 | 2.0% | Jan 27, 2020 | The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers t... |
| CVE-2013-6056 | HIGH | 7.5 | 1.7% | Jan 27, 2020 | OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability |
| CVE-2013-5659 | HIGH | 7.5 | 1.3% | Jan 27, 2020 | Wiz 5.0.3 has a user mode write access violation |
| CVE-2013-4462 | CRITICAL | 9.1 | 2.8% | Jan 27, 2020 | WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability |
| CVE-2013-3493 | CRITICAL | 9.8 | 1.6% | Jan 27, 2020 | XnView 2.03 has an integer overflow vulnerability |
| CVE-2013-3492 | CRITICAL | 9.8 | 1.5% | Jan 27, 2020 | XnView 2.03 has a stack-based buffer overflow vulnerability |
| CVE-2013-3486 | CRITICAL | 9.6 | 1.8% | Jan 27, 2020 | IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability |
| CVE-2013-0286 | MEDIUM | 5.4 | 0.8% | Jan 27, 2020 | Pinboard 1.0.6 theme for Wordpress has XSS. |
| CVE-2013-1744 | CRITICAL | 9.8 | 5.1% | Jan 25, 2020 | IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands. |
| CVE-2013-1598 | HIGH | 8.8 | 20.5% | Jan 24, 2020 | A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to th... |
| CVE-2013-1597 | MEDIUM | 6.5 | 14.2% | Jan 24, 2020 | A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET requ... |
| CVE-2013-1596 | MEDIUM | 5.3 | 10.4% | Jan 24, 2020 | An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP pac... |
| CVE-2013-1595 | CRITICAL | 9.8 | 41.6% | Jan 24, 2020 | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the... |
| CVE-2013-1594 | HIGH | 7.5 | 7.3% | Jan 24, 2020 | An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire... |
| CVE-2013-4333 | CRITICAL | 9.1 | 2.2% | Jan 24, 2020 | OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now