2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7323 | — | — | 2.9% | Jun 9, 2014 | python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in u... |
| CVE-2013-6223 | — | — | 0.5% | Jun 9, 2014 | LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local user... |
| CVE-2013-5760 | — | — | 1.3% | Jun 9, 2014 | QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to pho... |
| CVE-2013-4599 | — | — | 1.3% | Jun 9, 2014 | The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is... |
| CVE-2013-4597 | — | — | 1.1% | Jun 9, 2014 | The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content mar... |
| CVE-2013-4595 | — | — | 1.0% | Jun 9, 2014 | The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which causes HTTP to be used ins... |
| CVE-2013-3082 | — | — | 3.2% | Jun 9, 2014 | Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote att... |
| CVE-2013-3081 | — | — | 2.4% | Jun 9, 2014 | SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 ... |
| CVE-2013-2564 | — | — | 2.5% | Jun 9, 2014 | Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a c... |
| CVE-2013-2563 | — | — | 0.5% | Jun 9, 2014 | Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin passw... |
| CVE-2013-2562 | — | — | 0.5% | Jun 9, 2014 | Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain... |
| CVE-2013-1973 | — | — | 1.1% | Jun 9, 2014 | The autocomplete callback in Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) module 6.x-1.x befor... |
| CVE-2013-1756 | — | — | 3.7% | Jun 9, 2014 | The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attacke... |
| CVE-2013-4728 | — | — | 1.2% | Jun 6, 2014 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote at... |
| CVE-2013-4727 | — | — | 2.7% | Jun 6, 2014 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote at... |
| CVE-2013-4725 | — | — | 1.2% | Jun 6, 2014 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the... |
| CVE-2013-4724 | — | — | 1.2% | Jun 6, 2014 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include... |
| CVE-2013-2602 | — | — | 3.6% | Jun 6, 2014 | Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote... |
| CVE-2013-0250 | — | — | 3.1% | Jun 6, 2014 | The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, w... |
| CVE-2013-4860 | — | — | 2.0% | Jun 5, 2014 | Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote... |
| CVE-2013-3739 | — | — | 3.7% | Jun 5, 2014 | Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read ... |
| CVE-2013-2618 | — | — | 4.7% | Jun 5, 2014 | Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inj... |
| CVE-2013-2130 | — | — | 2.2% | Jun 5, 2014 | ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted ... |
| CVE-2013-0733 | — | — | 5.1% | Jun 5, 2014 | Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local user... |
| CVE-2013-0304 | — | — | 1.0% | Jun 5, 2014 | ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now