2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4857 | CRITICAL | 9.8 | 1.6% | Oct 25, 2019 | D-Link DIR-865L has PHP File Inclusion in the router xml file. |
| CVE-2013-4856 | MEDIUM | 6.5 | 0.8% | Oct 25, 2019 | D-Link DIR-865L has Information Disclosure. |
| CVE-2013-4855 | HIGH | 8.8 | 1.5% | Oct 25, 2019 | D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be creat... |
| CVE-2013-7333 | HIGH | 7.5 | 1.1% | Oct 23, 2019 | A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to th... |
| CVE-2013-7483 | — | — | 2.1% | Aug 22, 2019 | The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion. |
| CVE-2013-7482 | — | — | 0.9% | Aug 22, 2019 | The reflex-gallery plugin before 1.4.3 for WordPress has XSS. |
| CVE-2013-7481 | — | — | 0.9% | Aug 22, 2019 | The contact-form-plugin plugin before 3.3.5 for WordPress has XSS. |
| CVE-2013-7480 | — | — | 0.9% | Aug 22, 2019 | The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas. |
| CVE-2013-7479 | — | — | 0.9% | Aug 22, 2019 | The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field. |
| CVE-2013-7478 | — | — | 0.9% | Aug 22, 2019 | The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. |
| CVE-2013-7477 | — | — | 0.9% | Aug 22, 2019 | The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. |
| CVE-2013-7476 | — | — | 0.7% | Aug 14, 2019 | The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. |
| CVE-2013-7475 | — | — | 0.9% | Aug 13, 2019 | The contact-form-plugin plugin before 3.52 for WordPress has XSS. |
| CVE-2013-7474 | — | — | 0.8% | Aug 1, 2019 | Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to... |
| CVE-2013-7473 | — | — | 0.6% | Aug 1, 2019 | Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account. |
| CVE-2013-7472 | — | — | 1.0% | Jun 15, 2019 | The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow paramete... |
| CVE-2013-7471 | CRITICAL | 9.8 | 24.0% | Jun 11, 2019 | An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-6... |
| CVE-2013-1752 | — | — | — | Jun 3, 2019 | Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to ca... |
| CVE-2013-7285 | CRITICAL | 9.8 | 84.4% | May 15, 2019 | Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a rem... |
| CVE-2013-7470 | — | — | 2.5% | Apr 23, 2019 | cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allow... |
| CVE-2013-2805 | — | — | 3.9% | Mar 26, 2019 | Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5,... |
| CVE-2013-2807 | — | — | 3.9% | Mar 26, 2019 | Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5,... |
| CVE-2013-2806 | — | — | 3.9% | Mar 26, 2019 | Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5,... |
| CVE-2013-7468 | — | — | 1.7% | Mar 7, 2019 | Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang di... |
| CVE-2013-7467 | — | — | 0.8% | Mar 7, 2019 | Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter. |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now