2013 CVE Vulnerabilities

6,836 CVEs published in 2013.

CVE IDSeverityCVSSDescription
CVE-2013-0186MEDIUM6.1Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web scri...
CVE-2013-0180MEDIUM5.5Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.
CVE-2013-0178MEDIUM5.5Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.
CVE-2013-0165HIGH7.3cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.
CVE-2013-4367HIGH7.8ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel c...
CVE-2013-2227HIGH7.5GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
CVE-2013-1666CRITICAL9.8Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.
CVE-2013-4751HIGH8.1php-symfony2-Validator has loss of information during serialization
CVE-2013-3718MEDIUM5.5evince is missing a check on number of pages which can lead to a segmentation fault
CVE-2013-2739CRITICAL9.8MiniDLNA has heap-based buffer overflow
CVE-2013-2738CRITICAL9.8minidlna has SQL Injection that may allow retrieval of arbitrary files
CVE-2013-2600HIGH7.5MiniUPnPd has information disclosure use of snprintf()
CVE-2013-2075HIGH8.8Multiple buffer overflows in the (1) R5RS char-ready, (2) tcp-accept-ready, and (3) file-select procedures in Chicken th...
CVE-2013-2024HIGH8.8OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.
CVE-2013-2012HIGH7.3autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current ...
CVE-2013-1951MEDIUM6.1A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attacke...
CVE-2013-1945LOW3.3ruby193 uses an insecure LD_LIBRARY_PATH setting.
CVE-2013-1934MEDIUM5.4A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1...
CVE-2013-1932MEDIUM5.4A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 a...
CVE-2013-1931MEDIUM6.1A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or ...
CVE-2013-1930MEDIUM4.3MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.
CVE-2013-1910CRITICAL9.8yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other...
CVE-2013-1391HIGH7.5Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Wel...
CVE-2013-4848HIGH8.8TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
CVE-2013-4658CRITICAL9.8Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

Check if your code is affected by 2013 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now