2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-2645 | — | — | 3.0% | Oct 6, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_12... |
| CVE-2013-2644 | — | — | — | Oct 5, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2645, CVE-2014-2644. Reason: this ID was inten... |
| CVE-2013-3632 | HIGH | 8.8 | 56.8% | Sep 29, 2014 | The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users ... |
| CVE-2013-3092 | — | — | 2.2% | Sep 29, 2014 | The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors rela... |
| CVE-2013-3089 | — | — | 0.6% | Sep 29, 2014 | Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers t... |
| CVE-2013-3086 | — | — | 0.6% | Sep 29, 2014 | Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attackers to hij... |
| CVE-2013-3083 | — | — | 2.2% | Sep 29, 2014 | Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attac... |
| CVE-2013-3068 | — | — | 0.6% | Sep 29, 2014 | Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hij... |
| CVE-2013-3066 | — | — | 2.1% | Sep 29, 2014 | Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain se... |
| CVE-2013-3065 | — | — | 0.8% | Sep 29, 2014 | Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 ... |
| CVE-2013-3064 | — | — | 1.3% | Sep 29, 2014 | Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote att... |
| CVE-2013-2586 | — | — | 5.2% | Sep 29, 2014 | XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp ... |
| CVE-2013-2100 | — | — | 1.6% | Sep 29, 2014 | The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 c... |
| CVE-2013-1874 | — | — | 0.4% | Sep 29, 2014 | Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Tr... |
| CVE-2013-4444 | — | — | 14.0% | Sep 12, 2014 | Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java... |
| CVE-2013-6124 | — | — | 0.3% | Aug 31, 2014 | The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x al... |
| CVE-2013-2599 | — | — | 0.8% | Aug 31, 2014 | A certain Qualcomm Innovation Center (QuIC) patch to the NativeDaemonConnector class in services/java/com/android/server... |
| CVE-2013-2598 | — | — | 0.3% | Aug 31, 2014 | app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android co... |
| CVE-2013-2597 | HIGH | 8.4 | 1.5% | Aug 31, 2014 | Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6... |
| CVE-2013-2595 | — | — | 0.9% | Aug 31, 2014 | The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm... |
| CVE-2013-5467 | — | — | 0.8% | Aug 29, 2014 | Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Mo... |
| CVE-2013-6335 | — | — | 0.3% | Aug 26, 2014 | The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x bef... |
| CVE-2013-6222 | — | — | 3.4% | Aug 23, 2014 | Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP S... |
| CVE-2013-6306 | — | — | 0.3% | Aug 22, 2014 | Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 bef... |
| CVE-2013-7144 | — | — | 0.6% | Aug 16, 2014 | LINE 3.2.1.83 and earlier on Windows and 3.2.1 and earlier on OS X does not verify X.509 certificates from SSL servers, ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now