2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-2830 | HIGH | 7.8 | 3.7% | Feb 8, 2018 | Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via... |
| CVE-2013-4317 | — | — | 1.2% | Feb 6, 2018 | In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-adminis... |
| CVE-2013-7435 | — | — | 2.2% | Feb 1, 2018 | The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attacker... |
| CVE-2013-4364 | — | — | 0.4% | Jan 8, 2018 | (1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Ent... |
| CVE-2013-4578 | — | — | 2.4% | Dec 29, 2017 | jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanis... |
| CVE-2013-7400 | — | — | 1.6% | Dec 29, 2017 | The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information b... |
| CVE-2013-6465 | — | — | 1.1% | Dec 19, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inje... |
| CVE-2013-6055 | — | — | — | Nov 8, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2013-4366 | CRITICAL | 9.8 | 2.2% | Oct 30, 2017 | http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifie... |
| CVE-2013-4246 | — | — | 2.8% | Oct 30, 2017 | libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access t... |
| CVE-2013-3734 | — | — | 1.6% | Oct 24, 2017 | The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML r... |
| CVE-2013-7377 | — | — | 2.0% | Oct 23, 2017 | The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitra... |
| CVE-2013-6049 | — | — | 0.4% | Oct 20, 2017 | apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unk... |
| CVE-2013-6355 | — | — | — | Oct 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6355. Reason: This candidate is a duplicate of C... |
| CVE-2013-6924 | — | — | 15.2% | Oct 11, 2017 | Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via s... |
| CVE-2013-7429 | — | — | 2.2% | Sep 14, 2017 | The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parame... |
| CVE-2013-7428 | — | — | 1.9% | Sep 7, 2017 | The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter ... |
| CVE-2013-7433 | — | — | 0.9% | Aug 29, 2017 | Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!. |
| CVE-2013-7432 | — | — | 1.6% | Aug 29, 2017 | The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism. |
| CVE-2013-7431 | — | — | 1.1% | Aug 29, 2017 | Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!. |
| CVE-2013-7426 | — | — | 2.2% | Aug 29, 2017 | Insecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1. |
| CVE-2013-7430 | — | — | 0.8% | Aug 28, 2017 | Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inje... |
| CVE-2013-0870 | — | — | 1.5% | Aug 28, 2017 | The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check. |
| CVE-2013-4360 | — | — | — | May 16, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2013-7169 | — | — | — | May 11, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now