2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-1398 | — | — | 1.5% | Mar 14, 2014 | The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of priva... |
| CVE-2013-6476 | — | — | 0.3% | Mar 14, 2014 | The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0... |
| CVE-2013-6475 | — | — | 3.2% | Mar 14, 2014 | Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups... |
| CVE-2013-6474 | — | — | 3.1% | Mar 14, 2014 | Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to exe... |
| CVE-2013-6473 | — | — | 3.4% | Mar 14, 2014 | Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers ... |
| CVE-2013-0307 | — | — | 0.7% | Mar 14, 2014 | Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote ... |
| CVE-2013-0298 | — | — | 1.0% | Mar 14, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to inject arbi... |
| CVE-2013-0297 | — | — | 0.8% | Mar 14, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote authen... |
| CVE-2013-2671 | — | — | 1.3% | Mar 14, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remo... |
| CVE-2013-2670 | — | — | 2.0% | Mar 14, 2014 | Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows r... |
| CVE-2013-2507 | — | — | 2.0% | Mar 14, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remo... |
| CVE-2013-1759 | — | — | 2.0% | Mar 14, 2014 | Cross-site scripting (XSS) vulnerability in the Responsive Logo Slideshow plugin for WordPress allows remote attackers t... |
| CVE-2013-1758 | — | — | 2.1% | Mar 14, 2014 | Cross-site scripting (XSS) vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress allows remote attackers to... |
| CVE-2013-6835 | — | — | 6.8% | Mar 14, 2014 | TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime au... |
| CVE-2013-6442 | — | — | 4.1% | Mar 14, 2014 | The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL duri... |
| CVE-2013-6209 | — | — | 2.7% | Mar 14, 2014 | Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to c... |
| CVE-2013-6206 | — | — | 3.1% | Mar 14, 2014 | Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows remote attacker... |
| CVE-2013-6205 | — | — | 0.3% | Mar 14, 2014 | Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows local users to ... |
| CVE-2013-6188 | — | — | 1.0% | Mar 14, 2014 | Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote a... |
| CVE-2013-5133 | — | — | 1.7% | Mar 14, 2014 | Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files dur... |
| CVE-2013-4846 | — | — | 2.2% | Mar 14, 2014 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote attackers to obtain sensitive ... |
| CVE-2013-4496 | — | — | 10.6% | Mar 14, 2014 | Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection m... |
| CVE-2013-3729 | — | — | 1.2% | Mar 13, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hija... |
| CVE-2013-3728 | — | — | 3.0% | Mar 13, 2014 | Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissio... |
| CVE-2013-3727 | — | — | 2.9% | Mar 13, 2014 | SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL co... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now