2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-3960 | CRITICAL | 9.9 | 1.6% | Jan 24, 2020 | Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass |
| CVE-2013-1593 | HIGH | 7.5 | 2.4% | Jan 23, 2020 | A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.... |
| CVE-2013-1592 | CRITICAL | 9.8 | 22.6% | Jan 23, 2020 | A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending speci... |
| CVE-2013-6792 | CRITICAL | 9.8 | 3.0% | Jan 23, 2020 | Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability |
| CVE-2013-6785 | MEDIUM | 4.3 | 4.4% | Jan 23, 2020 | Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attacker... |
| CVE-2013-6773 | HIGH | 7.8 | 0.3% | Jan 23, 2020 | Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate pri... |
| CVE-2013-6772 | MEDIUM | 4.3 | 0.7% | Jan 23, 2020 | Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking |
| CVE-2013-6358 | HIGH | 8.8 | 3.7% | Jan 23, 2020 | PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then... |
| CVE-2013-4176 | MEDIUM | 5.5 | 0.4% | Jan 23, 2020 | mysecureshell 1.31: Local Information Disclosure Vulnerability |
| CVE-2013-4175 | MEDIUM | 5.5 | 0.4% | Jan 23, 2020 | MySecureShell 1.31 has a Local Denial of Service Vulnerability |
| CVE-2013-7185 | HIGH | 7.8 | 2.8% | Jan 14, 2020 | PotPlayer 1.5.40688: .avi File Memory Corruption |
| CVE-2013-2773 | HIGH | 7.8 | 0.4% | Jan 14, 2020 | Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution |
| CVE-2013-6225 | CRITICAL | 9.8 | 26.6% | Jan 13, 2020 | LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability |
| CVE-2013-7380 | CRITICAL | 9.8 | 2.2% | Jan 10, 2020 | The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability |
| CVE-2013-6430 | MEDIUM | 5.4 | 3.2% | Jan 10, 2020 | The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.... |
| CVE-2013-6231 | HIGH | 8.8 | 9.9% | Jan 10, 2020 | SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script |
| CVE-2013-5658 | MEDIUM | 6.1 | 1.5% | Jan 7, 2020 | AultWare pwStore 2010.8.30.0 has XSS |
| CVE-2013-5657 | HIGH | 7.5 | 6.8% | Jan 7, 2020 | AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request |
| CVE-2013-5656 | HIGH | 7.8 | 1.5% | Jan 7, 2020 | FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability |
| CVE-2013-5638 | MEDIUM | 5.4 | 0.6% | Jan 7, 2020 | Transcend WiFiSD 1.8 has persistent XSS |
| CVE-2013-5637 | MEDIUM | 5.4 | 0.5% | Jan 7, 2020 | PQI AirCard has persistent XSS |
| CVE-2013-5571 | MEDIUM | 5.9 | 0.9% | Jan 7, 2020 | HMailServer 5.3.x and prior: Memory Corruption which could cause DOS |
| CVE-2013-5122 | CRITICAL | 9.8 | 3.7% | Jan 7, 2020 | Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthent... |
| CVE-2013-1642 | MEDIUM | 6.1 | 1.6% | Jan 2, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in QuiXplorer before 2.5.5 allow remote attackers to inject arbitrar... |
| CVE-2013-1420 | MEDIUM | 6.1 | 1.1% | Jan 2, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbit... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now