2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4177 | — | — | 1.4% | May 29, 2014 | The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly ide... |
| CVE-2013-2193 | — | — | 0.7% | May 29, 2014 | Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-mi... |
| CVE-2013-0199 | — | — | 2.1% | May 29, 2014 | The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNT... |
| CVE-2013-5036 | — | — | 46.2% | May 27, 2014 | The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter t... |
| CVE-2013-4598 | — | — | 1.9% | May 27, 2014 | The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which ... |
| CVE-2013-3477 | — | — | 1.1% | May 27, 2014 | Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows... |
| CVE-2013-2698 | — | — | 1.1% | May 27, 2014 | Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attacker... |
| CVE-2013-2225 | — | — | 7.6% | May 27, 2014 | inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr... |
| CVE-2013-2125 | — | — | 2.5% | May 27, 2014 | OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service... |
| CVE-2013-2124 | — | — | 2.6% | May 27, 2014 | Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote a... |
| CVE-2013-2111 | — | — | 2.4% | May 27, 2014 | The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and C... |
| CVE-2013-2090 | — | — | 4.2% | May 27, 2014 | The set_meta_data function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers... |
| CVE-2013-1883 | — | — | 2.8% | May 27, 2014 | Mantis Bug Tracker (aka MantisBT) 1.2.12 before 1.2.15 allows remote attackers to cause a denial of service (resource co... |
| CVE-2013-0724 | — | — | 2.7% | May 27, 2014 | PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPre... |
| CVE-2013-6714 | — | — | 0.3% | May 26, 2014 | The FlashCopy Manager for VMware component in IBM Tivoli Storage FlashCopy Manager 3.1 through 4.1.0.1 does not properly... |
| CVE-2013-6713 | — | — | 0.3% | May 26, 2014 | The Data Protection for VMware component in IBM Tivoli Storage Manager for Virtual Environments (TSMVE) 6.3 through 7.1.... |
| CVE-2013-6741 | — | — | 1.0% | May 26, 2014 | IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control ... |
| CVE-2013-5465 | — | — | 1.2% | May 26, 2014 | IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before ... |
| CVE-2013-5464 | — | — | 1.1% | May 26, 2014 | IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCl... |
| CVE-2013-5460 | — | — | 1.0% | May 26, 2014 | IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2... |
| CVE-2013-4016 | — | — | 1.0% | May 26, 2014 | SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.... |
| CVE-2013-2998 | — | — | 1.0% | May 26, 2014 | frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and... |
| CVE-2013-3984 | — | — | 0.7% | May 26, 2014 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unspe... |
| CVE-2013-3982 | — | — | 13.2% | May 26, 2014 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspeci... |
| CVE-2013-3981 | — | — | 1.7% | May 26, 2014 | The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to download avata... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now