2013 CVE Vulnerabilities
6,830 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-3644 | — | — | 4.2% | Jun 18, 2013 | Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, a... |
| CVE-2013-4616 | — | — | 0.9% | Jun 18, 2013 | The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UIText... |
| CVE-2013-1203 | — | — | 1.3% | Jun 18, 2013 | Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service (device reload) via cr... |
| CVE-2013-4612 | — | — | 1.4% | Jun 17, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary we... |
| CVE-2013-4611 | — | — | 2.9% | Jun 17, 2013 | Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors... |
| CVE-2013-4610 | — | — | 1.7% | Jun 17, 2013 | Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 h... |
| CVE-2013-4609 | — | — | 1.5% | Jun 17, 2013 | REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calcul... |
| CVE-2013-4608 | — | — | 1.2% | Jun 17, 2013 | Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script o... |
| CVE-2013-2981 | — | — | 1.8% | Jun 17, 2013 | Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read ... |
| CVE-2013-2980 | — | — | 0.6% | Jun 17, 2013 | Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote atta... |
| CVE-2013-1097 | — | — | 1.3% | Jun 17, 2013 | Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.... |
| CVE-2013-1095 | — | — | 1.3% | Jun 17, 2013 | Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.... |
| CVE-2013-1094 | — | — | 1.3% | Jun 17, 2013 | Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM... |
| CVE-2013-1093 | — | — | 1.3% | Jun 17, 2013 | Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Confi... |
| CVE-2013-3643 | — | — | 0.9% | Jun 17, 2013 | The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to o... |
| CVE-2013-3642 | — | — | 0.9% | Jun 17, 2013 | The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2... |
| CVE-2013-3520 | — | — | 55.6% | Jun 17, 2013 | VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers t... |
| CVE-2013-3026 | — | — | 2.9% | Jun 17, 2013 | Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001... |
| CVE-2013-2310 | — | — | 0.7% | Jun 17, 2013 | SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftB... |
| CVE-2013-2309 | — | — | 1.1% | Jun 17, 2013 | Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1... |
| CVE-2013-0148 | — | — | 0.7% | Jun 16, 2013 | The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption k... |
| CVE-2013-2066 | — | — | 2.3% | Jun 15, 2013 | Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly exec... |
| CVE-2013-2005 | — | — | 2.1% | Jun 15, 2013 | X.org libXt 1.1.3 and earlier does not check the return value of the XGetWindowProperty function, which allows X servers... |
| CVE-2013-2004 | — | — | 1.6% | Jun 15, 2013 | The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restri... |
| CVE-2013-2003 | — | — | 2.1% | Jun 15, 2013 | Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory an... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now