2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-6365 | MEDIUM | 5.3 | 1.1% | Nov 5, 2019 | Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions |
| CVE-2013-6364 | HIGH | 8.8 | 2.1% | Nov 5, 2019 | Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book |
| CVE-2013-4110 | MEDIUM | 5.3 | 2.0% | Nov 5, 2019 | Cryptocat has an Unspecified Chat Participant User List Disclosure |
| CVE-2013-4107 | MEDIUM | 6.1 | 1.1% | Nov 5, 2019 | Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting |
| CVE-2013-4374 | HIGH | 7.1 | 0.3% | Nov 4, 2019 | An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped ... |
| CVE-2013-4409 | CRITICAL | 9.8 | 3.0% | Nov 4, 2019 | An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when ... |
| CVE-2013-4251 | HIGH | 7.8 | 0.4% | Nov 4, 2019 | The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories. |
| CVE-2013-4280 | MEDIUM | 5.5 | 0.4% | Nov 4, 2019 | Insecure temporary file vulnerability in RedHat vsdm 4.9.6. |
| CVE-2013-4105 | HIGH | 7.5 | 1.1% | Nov 4, 2019 | Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure |
| CVE-2013-2260 | CRITICAL | 9.8 | 2.2% | Nov 4, 2019 | Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness |
| CVE-2013-2259 | CRITICAL | 9.8 | 3.7% | Nov 4, 2019 | Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview |
| CVE-2013-2258 | MEDIUM | 5.3 | 1.4% | Nov 4, 2019 | Cryptocat before 2.0.22 has Nickname User Impersonation |
| CVE-2013-2257 | HIGH | 7.5 | 1.7% | Nov 4, 2019 | Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness |
| CVE-2013-4104 | HIGH | 7.5 | 0.8% | Nov 4, 2019 | Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol |
| CVE-2013-2262 | HIGH | 7.5 | 1.9% | Nov 4, 2019 | Cryptocat strophe.js before 2.0.22 has information disclosure |
| CVE-2013-2261 | HIGH | 7.5 | 11.1% | Nov 4, 2019 | Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure |
| CVE-2013-4103 | CRITICAL | 9.8 | 6.9% | Nov 4, 2019 | Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input |
| CVE-2013-4102 | CRITICAL | 9.1 | 2.0% | Nov 4, 2019 | Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness |
| CVE-2013-4101 | MEDIUM | 5.3 | 1.4% | Nov 4, 2019 | Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness |
| CVE-2013-4100 | HIGH | 7.5 | 2.4% | Nov 4, 2019 | Cryptocat before 2.0.22 has Remote Denial of Service via username |
| CVE-2013-4518 | MEDIUM | 5.5 | 0.3% | Nov 4, 2019 | RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates |
| CVE-2013-4423 | MEDIUM | 5.5 | 0.3% | Nov 4, 2019 | CloudForms stores user passwords in recoverable format |
| CVE-2013-4412 | HIGH | 7.5 | 2.9% | Nov 4, 2019 | slim has NULL pointer dereference when using crypt() method from glibc 2.17 |
| CVE-2013-4168 | MEDIUM | 6.1 | 1.1% | Nov 1, 2019 | Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields. |
| CVE-2013-2255 | MEDIUM | 5.9 | 1.0% | Nov 1, 2019 | HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now