2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-1936 | — | — | — | Feb 23, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2013-4891 | — | — | 1.5% | Feb 21, 2018 | The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechani... |
| CVE-2013-0267 | — | — | 3.8% | Feb 21, 2018 | The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2 and 2.1 al... |
| CVE-2013-3553 | — | — | 2.4% | Feb 8, 2018 | Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code vi... |
| CVE-2013-3552 | — | — | 2.8% | Feb 8, 2018 | Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code vi... |
| CVE-2013-2830 | HIGH | 7.8 | 3.7% | Feb 8, 2018 | Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via... |
| CVE-2013-4317 | — | — | 1.2% | Feb 6, 2018 | In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-adminis... |
| CVE-2013-7435 | — | — | 2.2% | Feb 1, 2018 | The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attacker... |
| CVE-2013-4364 | — | — | 0.4% | Jan 8, 2018 | (1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Ent... |
| CVE-2013-4578 | — | — | 2.4% | Dec 29, 2017 | jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanis... |
| CVE-2013-7400 | — | — | 1.6% | Dec 29, 2017 | The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information b... |
| CVE-2013-6465 | — | — | 1.1% | Dec 19, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inje... |
| CVE-2013-6055 | — | — | — | Nov 8, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2013-4366 | CRITICAL | 9.8 | 2.2% | Oct 30, 2017 | http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifie... |
| CVE-2013-4246 | — | — | 2.8% | Oct 30, 2017 | libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access t... |
| CVE-2013-3734 | — | — | 1.6% | Oct 24, 2017 | The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML r... |
| CVE-2013-7377 | — | — | 2.0% | Oct 23, 2017 | The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitra... |
| CVE-2013-6049 | — | — | 0.4% | Oct 20, 2017 | apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unk... |
| CVE-2013-6355 | — | — | — | Oct 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6355. Reason: This candidate is a duplicate of C... |
| CVE-2013-6924 | — | — | 15.2% | Oct 11, 2017 | Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via s... |
| CVE-2013-7429 | — | — | 2.2% | Sep 14, 2017 | The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parame... |
| CVE-2013-7428 | — | — | 1.9% | Sep 7, 2017 | The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter ... |
| CVE-2013-7433 | — | — | 0.9% | Aug 29, 2017 | Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!. |
| CVE-2013-7432 | — | — | 1.6% | Aug 29, 2017 | The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended protection mechanism. |
| CVE-2013-7431 | — | — | 1.1% | Aug 29, 2017 | Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!. |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now