2013 CVE Vulnerabilities
6,830 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-0672 | — | — | 1.2% | Mar 21, 2013 | Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authe... |
| CVE-2013-0671 | — | — | 2.3% | Mar 21, 2013 | Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-app... |
| CVE-2013-0670 | — | — | 1.5% | Mar 21, 2013 | CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inje... |
| CVE-2013-0669 | — | — | 1.8% | Mar 21, 2013 | The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service ... |
| CVE-2013-0668 | — | — | 1.5% | Mar 21, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow re... |
| CVE-2013-0667 | — | — | 1.5% | Mar 21, 2013 | Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attac... |
| CVE-2013-0665 | — | — | 1.2% | Mar 21, 2013 | Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Fil... |
| CVE-2013-2617 | — | — | 4.4% | Mar 20, 2013 | lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a... |
| CVE-2013-2616 | — | — | 3.6% | Mar 20, 2013 | lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell ... |
| CVE-2013-2615 | — | — | 2.3% | Mar 20, 2013 | lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via s... |
| CVE-2013-1875 | — | — | 3.6% | Mar 20, 2013 | command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacha... |
| CVE-2013-1878 | — | — | — | Mar 20, 2013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2617. Reason: This candidate is a duplicate of... |
| CVE-2013-1877 | — | — | — | Mar 20, 2013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2616. Reason: This candidate is a duplicate of... |
| CVE-2013-1876 | — | — | — | Mar 20, 2013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2615. Reason: This candidate is a duplicate of... |
| CVE-2013-1750 | — | — | 3.2% | Mar 20, 2013 | Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote... |
| CVE-2013-0716 | — | — | 2.4% | Mar 20, 2013 | The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash)... |
| CVE-2013-0715 | — | — | 1.9% | Mar 20, 2013 | The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of servic... |
| CVE-2013-0714 | — | — | 6.4% | Mar 20, 2013 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or ca... |
| CVE-2013-0713 | — | — | 2.2% | Mar 20, 2013 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of ... |
| CVE-2013-0712 | — | — | 2.6% | Mar 20, 2013 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of ... |
| CVE-2013-0711 | — | — | 3.3% | Mar 20, 2013 | IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (d... |
| CVE-2013-2275 | — | — | 2.9% | Mar 20, 2013 | The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x be... |
| CVE-2013-2274 | — | — | 2.9% | Mar 20, 2013 | Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitra... |
| CVE-2013-1655 | — | — | 4.6% | Mar 20, 2013 | Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute ... |
| CVE-2013-1654 | — | — | 2.9% | Mar 20, 2013 | Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does not properly negotiate... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now