2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4531 | — | — | 4.1% | Nov 4, 2014 | Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and po... |
| CVE-2013-4530 | — | — | 5.2% | Nov 4, 2014 | Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly ... |
| CVE-2013-4529 | — | — | 3.3% | Nov 4, 2014 | Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possi... |
| CVE-2013-4527 | — | — | 5.3% | Nov 4, 2014 | Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vecto... |
| CVE-2013-4526 | — | — | 4.1% | Nov 4, 2014 | Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly ... |
| CVE-2013-4151 | — | — | 5.1% | Nov 4, 2014 | The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code v... |
| CVE-2013-4150 | — | — | 5.0% | Nov 4, 2014 | The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to ... |
| CVE-2013-4149 | — | — | 5.3% | Nov 4, 2014 | Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow rem... |
| CVE-2013-4148 | — | — | 4.9% | Nov 4, 2014 | Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote a... |
| CVE-2013-7057 | — | — | 1.4% | Nov 4, 2014 | Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to ... |
| CVE-2013-0336 | — | — | 2.8% | Nov 3, 2014 | The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) i... |
| CVE-2013-0334 | — | — | 3.8% | Oct 31, 2014 | Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by ... |
| CVE-2013-7409 | — | — | 67.9% | Oct 30, 2014 | Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib... |
| CVE-2013-3304 | — | — | 3.8% | Oct 30, 2014 | Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote attackers to read arbitrary ... |
| CVE-2013-7408 | — | — | 2.0% | Oct 26, 2014 | F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to ... |
| CVE-2013-6796 | — | — | 6.3% | Oct 26, 2014 | The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, whic... |
| CVE-2013-1641 | — | — | 3.7% | Oct 26, 2014 | Directory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5 allows remote attackers t... |
| CVE-2013-4594 | — | — | 1.0% | Oct 25, 2014 | The Payment for Webform module 7.x-1.x before 7.x-1.5 for Drupal does not restrict access by anonymous users, which allo... |
| CVE-2013-7407 | — | — | 0.6% | Oct 22, 2014 | Cross-site request forgery (CSRF) vulnerability in the MRBS module for Drupal allows remote attackers to hijack the auth... |
| CVE-2013-7406 | — | — | 1.3% | Oct 21, 2014 | SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via ... |
| CVE-2013-7330 | — | — | 1.6% | Oct 17, 2014 | Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related ... |
| CVE-2013-4488 | — | — | 1.0% | Oct 10, 2014 | libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to s... |
| CVE-2013-7329 | — | — | 1.9% | Oct 6, 2014 | The CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified, allows remote attacke... |
| CVE-2013-1436 | — | — | 9.0% | Oct 6, 2014 | The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands... |
| CVE-2013-6496 | — | — | 1.8% | Oct 6, 2014 | Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now