2013 CVE Vulnerabilities
6,830 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-0328 | — | — | 1.4% | Mar 19, 2013 | Cross-site scripting (XSS) vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to injec... |
| CVE-2013-0327 | — | — | 3.1% | Mar 19, 2013 | Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows ... |
| CVE-2013-0251 | — | — | 5.0% | Mar 19, 2013 | Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a... |
| CVE-2013-0227 | — | — | 0.9% | Mar 19, 2013 | Cross-site scripting (XSS) vulnerability in the Search API Sorts module 7.x-1.x before 7.x-1.4 for Drupal allows remote ... |
| CVE-2013-0226 | — | — | 0.9% | Mar 19, 2013 | The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which ... |
| CVE-2013-0225 | — | — | 1.0% | Mar 19, 2013 | Cross-site scripting (XSS) vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-... |
| CVE-2013-0224 | — | — | 0.3% | Mar 19, 2013 | The Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows local users to execute arbi... |
| CVE-2013-0207 | — | — | 0.6% | Mar 19, 2013 | Cross-site request forgery (CSRF) vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows rem... |
| CVE-2013-0206 | — | — | 1.9% | Mar 19, 2013 | Unrestricted file upload vulnerability in the Live CSS module 6.x-2.x before 6.x-2.1 and 7.x-2.x before 7.x-2.7 for Drup... |
| CVE-2013-0205 | — | — | 0.7% | Mar 19, 2013 | Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7... |
| CVE-2013-1495 | — | — | 0.4% | Mar 18, 2013 | asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via... |
| CVE-2013-0915 | — | — | 0.7% | Mar 18, 2013 | The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have ... |
| CVE-2013-0913 | — | — | 0.6% | Mar 18, 2013 | Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) ... |
| CVE-2013-2492 | — | — | 42.2% | Mar 15, 2013 | Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windo... |
| CVE-2013-2373 | — | — | 1.3% | Mar 15, 2013 | The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0... |
| CVE-2013-2372 | — | — | 1.1% | Mar 15, 2013 | Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0... |
| CVE-2013-2371 | — | — | 2.0% | Mar 15, 2013 | The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5... |
| CVE-2013-2566 | MEDIUM | 5.9 | 84.4% | Mar 15, 2013 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for ... |
| CVE-2013-2560 | — | — | 9.3% | Mar 15, 2013 | Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote a... |
| CVE-2013-0976 | — | — | 2.3% | Mar 15, 2013 | IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial ... |
| CVE-2013-0973 | — | — | 1.2% | Mar 15, 2013 | Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, whic... |
| CVE-2013-0971 | — | — | 1.8% | Mar 15, 2013 | Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code... |
| CVE-2013-0970 | — | — | 1.1% | Mar 15, 2013 | Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a c... |
| CVE-2013-0969 | — | — | 0.4% | Mar 15, 2013 | Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which al... |
| CVE-2013-0967 | — | — | 1.5% | Mar 15, 2013 | CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attack... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now