2013 CVE Vulnerabilities
6,830 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7417 | — | — | 1.3% | Jan 2, 2015 | Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote ... |
| CVE-2013-3295 | — | — | 1.8% | Dec 30, 2014 | Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to inclu... |
| CVE-2013-4663 | — | — | 1.9% | Dec 28, 2014 | git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary comman... |
| CVE-2013-6998 | — | — | — | Dec 27, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6870. Reason: This candidate is a duplicate of... |
| CVE-2013-6919 | — | — | 1.2% | Dec 27, 2014 | The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote ... |
| CVE-2013-6241 | — | — | 0.9% | Dec 27, 2014 | The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, ... |
| CVE-2013-6227 | — | — | 8.0% | Dec 27, 2014 | Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly ... |
| CVE-2013-6043 | — | — | 2.9% | Dec 27, 2014 | The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attem... |
| CVE-2013-6041 | — | — | 3.6% | Dec 27, 2014 | index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharact... |
| CVE-2013-5958 | — | — | 1.9% | Dec 27, 2014 | The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 a... |
| CVE-2013-4793 | — | — | 1.4% | Dec 27, 2014 | The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS ... |
| CVE-2013-4769 | — | — | 1.2% | Dec 26, 2014 | The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled sett... |
| CVE-2013-4754 | — | — | 0.8% | Dec 26, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users ... |
| CVE-2013-4753 | — | — | 0.8% | Dec 26, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to ... |
| CVE-2013-7401 | — | — | 2.8% | Dec 19, 2014 | The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via... |
| CVE-2013-4442 | — | — | 2.2% | Dec 19, 2014 | Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which ma... |
| CVE-2013-4440 | — | — | 1.8% | Dec 19, 2014 | Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent... |
| CVE-2013-7402 | — | — | 2.8% | Dec 17, 2014 | Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (c... |
| CVE-2013-6435 | — | — | 7.7% | Dec 16, 2014 | Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose ... |
| CVE-2013-4399 | — | — | 2.1% | Dec 12, 2014 | The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identi... |
| CVE-2013-2810 | — | — | 6.0% | Dec 8, 2014 | Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC... |
| CVE-2013-7416 | — | — | 2.8% | Dec 3, 2014 | canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell ... |
| CVE-2013-6494 | — | — | 0.4% | Dec 2, 2014 | fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows ... |
| CVE-2013-6497 | — | — | 1.1% | Dec 1, 2014 | clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as ... |
| CVE-2013-3678 | — | — | 3.6% | Nov 19, 2014 | Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to g... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now