2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4118 | — | — | 3.6% | Oct 3, 2016 | FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and applicatio... |
| CVE-2013-7458 | — | — | 0.5% | Aug 10, 2016 | linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local user... |
| CVE-2013-7456 | — | — | 3.8% | Aug 7, 2016 | gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.2... |
| CVE-2013-7457 | — | — | 0.4% | Jul 11, 2016 | Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges vi... |
| CVE-2013-7440 | — | — | 1.9% | Jun 7, 2016 | The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildc... |
| CVE-2013-7455 | — | — | 6.2% | May 7, 2016 | Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allow... |
| CVE-2013-7449 | — | — | 0.8% | Apr 21, 2016 | The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the... |
| CVE-2013-7448 | — | — | 3.5% | Feb 23, 2016 | Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page par... |
| CVE-2013-7447 | — | — | 4.6% | Feb 17, 2016 | Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gno... |
| CVE-2013-4312 | — | — | 0.6% | Feb 8, 2016 | The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory ... |
| CVE-2013-7446 | — | — | 0.6% | Dec 28, 2015 | Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intende... |
| CVE-2013-5229 | — | — | 0.3% | Nov 14, 2015 | The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box te... |
| CVE-2013-7445 | — | — | 2.7% | Oct 16, 2015 | The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution ... |
| CVE-2013-7444 | — | — | 2.3% | Sep 1, 2015 | The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked v... |
| CVE-2013-7424 | — | — | 2.7% | Aug 26, 2015 | The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dep... |
| CVE-2013-7422 | — | — | 3.0% | Aug 16, 2015 | Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows cont... |
| CVE-2013-7443 | — | — | 3.2% | Aug 12, 2015 | Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (cras... |
| CVE-2013-7442 | — | — | 1.7% | Aug 4, 2015 | GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the Administrator user and (2) ... |
| CVE-2013-7405 | — | — | 1.6% | Aug 4, 2015 | The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user... |
| CVE-2013-7404 | — | — | 1.7% | Aug 4, 2015 | GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for (1) Telnet and (2) FTP, which has un... |
| CVE-2013-7398 | — | — | 0.8% | Jun 24, 2015 | main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9... |
| CVE-2013-7397 | — | — | 1.0% | Jun 24, 2015 | Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStor... |
| CVE-2013-7441 | — | — | 3.6% | May 29, 2015 | The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a ... |
| CVE-2013-4866 | — | — | 1.0% | Apr 16, 2015 | The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physica... |
| CVE-2013-7439 | — | — | 4.3% | Apr 16, 2015 | Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now