2013 CVE Vulnerabilities

6,836 CVEs published in 2013.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2013-4225HIGH8.8The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly ...
CVE-2013-2120HIGH8.4The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not ...
CVE-2013-5582HIGH7.8Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assiste...
CVE-2013-3942HIGH7.8Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability
CVE-2013-0517HIGH7.8A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 ...
CVE-2013-4535HIGH8.8The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary fi...
CVE-2013-2109HIGH8.8WordPress plugin wp-cleanfix has Remote Code Execution
CVE-2013-3629HIGH8.8ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
CVE-2013-3628HIGH8.8Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
CVE-2013-3591HIGH8.8vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
CVE-2013-2009HIGH8.8WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution
CVE-2013-1202HIGH7.5Cisco ACE A2(3.6) allows log retention DoS.
CVE-2013-3638HIGH8.8SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL co...
CVE-2013-3568HIGH8.8Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentica...
CVE-2013-4572HIGH7.5The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-C...
CVE-2013-4166HIGH7.5The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data ...
CVE-2013-2680HIGH7.5Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive in...
CVE-2013-0507HIGH8.1IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability
CVE-2013-2678HIGH8.1Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers...
CVE-2013-2676HIGH7.5Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attacker...
CVE-2013-7053HIGH8.8D-Link DIR-100 4.03B07: cli.cgi CSRF
CVE-2013-7051HIGH8.8D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters
CVE-2013-2674HIGH7.5Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attacker...
CVE-2013-2672HIGH7.5Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.
CVE-2013-2646HIGH7.5TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability.

Check if your code is affected by 2013 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now