2013 CVE Vulnerabilities

6,836 CVEs published in 2013.

CVE IDSeverityCVSSDescription
CVE-2013-4357HIGH7.5The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause...
CVE-2013-4161HIGH7.8gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it d...
CVE-2013-2016HIGH7.8A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space ...
CVE-2013-0264HIGH7.5An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabl...
CVE-2013-0196MEDIUM6.5A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has...
CVE-2013-5027CRITICAL9.8Collabtive 1.0 has incorrect access control
CVE-2013-4985HIGH7.5Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
CVE-2013-4982CRITICAL9.8AVTECH AVN801 DVR has a security bypass via the administration login captcha
CVE-2013-4976CRITICAL9.8Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
CVE-2013-4975HIGH8.8Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
CVE-2013-4868MEDIUM5.3Karotz API 12.07.19.00: Session Token Information Disclosure
CVE-2013-4867MEDIUM6.3Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
CVE-2013-4859HIGH8.1INSTEON Hub 2242-222 lacks Web and API authentication
CVE-2013-4796HIGH8.8ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
CVE-2013-4764MEDIUM4.3Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitr...
CVE-2013-4763MEDIUM4.6Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission...
CVE-2013-4743CRITICAL9.8Static HTTP Server 1.0 has a Local Overflow
CVE-2013-4692MEDIUM6.1Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
CVE-2013-4621CRITICAL9.8Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities
CVE-2013-4695HIGH7.8Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
CVE-2013-4693MEDIUM6.1WordPress Xorbin Digital Flash Clock 1.0 has XSS
CVE-2013-4691MEDIUM6.1Sencha Labs Connect has XSS with connect.methodOverride()
CVE-2013-4665MEDIUM6.5SPBAS Business Automation Software 2012 has CSRF.
CVE-2013-4664MEDIUM6.1SPBAS Business Automation Software 2012 has XSS.
CVE-2013-3088CRITICAL9.8Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".

Check if your code is affected by 2013 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now