2013 CVE Vulnerabilities
6,830 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-1608 | — | — | 1.2% | Mar 26, 2013 | Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remot... |
| CVE-2013-1162 | — | — | 1.2% | Mar 26, 2013 | The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (... |
| CVE-2013-1161 | — | — | 0.9% | Mar 26, 2013 | The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of ser... |
| CVE-2013-1836 | — | — | 2.0% | Mar 25, 2013 | Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privi... |
| CVE-2013-1835 | — | — | 1.5% | Mar 25, 2013 | Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated ad... |
| CVE-2013-1834 | — | — | 1.7% | Mar 25, 2013 | notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x bef... |
| CVE-2013-1833 | — | — | 1.5% | Mar 25, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before... |
| CVE-2013-1832 | — | — | 1.1% | Mar 25, 2013 | repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 i... |
| CVE-2013-1831 | — | — | 1.4% | Mar 25, 2013 | lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote ... |
| CVE-2013-1830 | — | — | 1.6% | Mar 25, 2013 | user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce ... |
| CVE-2013-1829 | — | — | 1.1% | Mar 25, 2013 | calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displayin... |
| CVE-2013-2501 | — | — | 5.3% | Mar 22, 2013 | Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attacker... |
| CVE-2013-1865 | — | — | 2.6% | Mar 22, 2013 | OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through... |
| CVE-2013-1840 | — | — | 1.4% | Mar 22, 2013 | The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 st... |
| CVE-2013-1838 | — | — | 2.7% | Mar 22, 2013 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs,... |
| CVE-2013-0335 | HIGH | 7.6 | 2.1% | Mar 22, 2013 | OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access t... |
| CVE-2013-2640 | — | — | 2.4% | Mar 22, 2013 | ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax... |
| CVE-2013-0731 | — | — | 2.6% | Mar 22, 2013 | ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax... |
| CVE-2013-2636 | — | — | 0.4% | Mar 22, 2013 | net/bridge/br_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to... |
| CVE-2013-2635 | — | — | 0.4% | Mar 22, 2013 | The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain str... |
| CVE-2013-2634 | — | — | 0.5% | Mar 22, 2013 | net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obt... |
| CVE-2013-1873 | — | — | — | Mar 22, 2013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2634, CVE-2013-2635, CVE-2013-2636. Reason: This... |
| CVE-2013-1860 | — | — | 0.8% | Mar 22, 2013 | Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8... |
| CVE-2013-1848 | — | — | 0.6% | Mar 22, 2013 | fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related ... |
| CVE-2013-1828 | — | — | 1.0% | Mar 22, 2013 | The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now