2013 CVE Vulnerabilities

6,836 CVEs published in 2013.

CVE IDSeverityCVSSDescription
CVE-2013-4769——The cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns.recursive.enabled sett...
CVE-2013-4754——Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users ...
CVE-2013-4753——Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to ...
CVE-2013-7401——The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via...
CVE-2013-4442——Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which ma...
CVE-2013-4440——Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent...
CVE-2013-7402——Multiple unspecified vulnerabilities in request.c in c-icap 0.2.x allow remote attackers to cause a denial of service (c...
CVE-2013-6435——Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose ...
CVE-2013-4399——The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identi...
CVE-2013-2810——Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC...
CVE-2013-7416——canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell ...
CVE-2013-6494——fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows ...
CVE-2013-6497——clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as ...
CVE-2013-3678——Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to g...
CVE-2013-0347——The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to ha...
CVE-2013-3737——The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13, when using t...
CVE-2013-6399——Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to exec...
CVE-2013-4542——The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute...
CVE-2013-4541——The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary...
CVE-2013-4540——Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code...
CVE-2013-4539——Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote att...
CVE-2013-4538——Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attacke...
CVE-2013-4537——The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code vi...
CVE-2013-4534——Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possib...
CVE-2013-4533——Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause...

Check if your code is affected by 2013 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now