2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7391 | — | — | 1.4% | Jul 19, 2014 | The Entity API module 7.x-1.x before 7.x-1.2 for Drupal, when using the (a) Views field or (b) area plugins, allows remo... |
| CVE-2013-4273 | — | — | 1.1% | Jul 19, 2014 | The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows... |
| CVE-2013-5855 | — | — | 4.7% | Jul 17, 2014 | Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText... |
| CVE-2013-5755 | — | — | 4.3% | Jul 16, 2014 | config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account,... |
| CVE-2013-6691 | — | — | 1.7% | Jul 14, 2014 | The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote C... |
| CVE-2013-5567 | — | — | 2.1% | Jul 14, 2014 | Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overl... |
| CVE-2013-6117 | — | — | 70.7% | Jul 11, 2014 | Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio... |
| CVE-2013-7389 | — | — | 27.8% | Jul 7, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allo... |
| CVE-2013-5423 | — | — | 1.4% | Jul 7, 2014 | IBM Flex System Manager (FSM) 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unsp... |
| CVE-2013-3004 | — | — | 1.9% | Jul 1, 2014 | Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7... |
| CVE-2013-7388 | — | — | 13.2% | Jul 1, 2014 | Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), ... |
| CVE-2013-3664 | — | — | 29.8% | Jul 1, 2014 | Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code vi... |
| CVE-2013-3662 | — | — | 31.9% | Jul 1, 2014 | Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via ... |
| CVE-2013-6311 | — | — | 1.0% | Jun 28, 2014 | SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitr... |
| CVE-2013-6310 | — | — | 0.8% | Jun 28, 2014 | Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to i... |
| CVE-2013-6309 | — | — | 0.9% | Jun 28, 2014 | IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read record... |
| CVE-2013-6308 | — | — | 0.9% | Jun 28, 2014 | IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login cr... |
| CVE-2013-6737 | — | — | 1.6% | Jun 21, 2014 | IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dum... |
| CVE-2013-1068 | — | — | 1.2% | Jun 19, 2014 | The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubunt... |
| CVE-2013-5017 | — | — | 7.0% | Jun 18, 2014 | SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute a... |
| CVE-2013-6221 | — | — | 77.9% | Jun 18, 2014 | Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoP... |
| CVE-2013-6078 | — | — | 1.0% | Jun 17, 2014 | The default configuration of EMC RSA BSAFE Toolkits and RSA Data Protection Manager (DPM) 20130918 uses the Dual Ellipti... |
| CVE-2013-7072 | — | — | — | Jun 16, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2013-5356 | — | — | 1.7% | Jun 13, 2014 | Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allow... |
| CVE-2013-5353 | — | — | 2.3% | Jun 13, 2014 | Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and ear... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now