2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-6500 | — | — | — | Feb 20, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2013-2027 | — | — | 0.4% | Feb 13, 2015 | Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass i... |
| CVE-2013-4186 | — | — | — | Feb 9, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2013-5557 | — | — | 2.0% | Feb 7, 2015 | The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.... |
| CVE-2013-6892 | — | — | 1.0% | Jan 21, 2015 | WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit. |
| CVE-2013-7252 | — | — | 2.1% | Jan 18, 2015 | kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the ... |
| CVE-2013-2604 | — | — | 0.9% | Jan 12, 2015 | RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (C... |
| CVE-2013-2603 | — | — | 4.2% | Jan 12, 2015 | The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.48... |
| CVE-2013-7420 | — | — | 7.0% | Jan 12, 2015 | Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attr... |
| CVE-2013-7419 | — | — | 1.9% | Jan 9, 2015 | Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel... |
| CVE-2013-6126 | — | — | — | Jan 5, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2013-6125 | — | — | — | Jan 5, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2013-2131 | — | — | 10.9% | Jan 4, 2015 | Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attacker... |
| CVE-2013-7418 | — | — | 2.4% | Jan 2, 2015 | cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrar... |
| CVE-2013-7417 | — | — | 1.3% | Jan 2, 2015 | Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote ... |
| CVE-2013-3295 | — | — | 1.8% | Dec 30, 2014 | Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to inclu... |
| CVE-2013-4663 | — | — | 1.9% | Dec 28, 2014 | git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary comman... |
| CVE-2013-6998 | — | — | — | Dec 27, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6870. Reason: This candidate is a duplicate of... |
| CVE-2013-6919 | — | — | 1.2% | Dec 27, 2014 | The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote ... |
| CVE-2013-6241 | — | — | 0.9% | Dec 27, 2014 | The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, ... |
| CVE-2013-6227 | — | — | 8.0% | Dec 27, 2014 | Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly ... |
| CVE-2013-6043 | — | — | 2.9% | Dec 27, 2014 | The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attem... |
| CVE-2013-6041 | — | — | 3.6% | Dec 27, 2014 | index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharact... |
| CVE-2013-5958 | — | — | 1.9% | Dec 27, 2014 | The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 a... |
| CVE-2013-4793 | — | — | 1.4% | Dec 27, 2014 | The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now