2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7040 | — | — | 3.3% | May 19, 2014 | Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute h... |
| CVE-2013-7033 | — | — | 1.2% | May 19, 2014 | LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/c... |
| CVE-2013-6994 | — | — | 1.2% | May 19, 2014 | OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session... |
| CVE-2013-6807 | — | — | 0.6% | May 19, 2014 | The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle att... |
| CVE-2013-6806 | — | — | 1.0% | May 19, 2014 | OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain s... |
| CVE-2013-6805 | — | — | 0.7% | May 19, 2014 | OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to d... |
| CVE-2013-6766 | — | — | 1.6% | May 19, 2014 | OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication res... |
| CVE-2013-6765 | — | — | 7.3% | May 19, 2014 | OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restricti... |
| CVE-2013-6764 | — | — | — | May 19, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6795. Reason: This candidate is a duplicate of ... |
| CVE-2013-6413 | — | — | 2.4% | May 19, 2014 | Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (... |
| CVE-2013-4432 | — | — | 1.1% | May 19, 2014 | Mahara before 1.5.13, 1.6.x before 1.6.8, and 1.7.x before 1.7.4 does not properly restrict access to folders, which all... |
| CVE-2013-4431 | — | — | 1.3% | May 19, 2014 | Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allow... |
| CVE-2013-4430 | — | — | 1.2% | May 19, 2014 | Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remo... |
| CVE-2013-4429 | — | — | 1.1% | May 19, 2014 | Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which a... |
| CVE-2013-4427 | — | — | 0.3% | May 19, 2014 | pyxtrlock before 0.2 does not properly check the return values of the (1) xcb_grab_pointer and (2) xcb_grab_keyboard XCB... |
| CVE-2013-4426 | — | — | 0.4% | May 19, 2014 | pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock scr... |
| CVE-2013-4406 | — | — | 1.5% | May 19, 2014 | The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not pro... |
| CVE-2013-4498 | — | — | 0.9% | May 17, 2014 | The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group gr... |
| CVE-2013-4489 | — | — | 1.4% | May 17, 2014 | The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to exe... |
| CVE-2013-7382 | — | — | 2.8% | May 17, 2014 | VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for t... |
| CVE-2013-7379 | — | — | 2.5% | May 16, 2014 | The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a s... |
| CVE-2013-4730 | — | — | 66.5% | May 15, 2014 | Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE... |
| CVE-2013-1810 | — | — | 1.0% | May 15, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in core/summary_api.php in MantisBT 1.2.12 allow remote authenticate... |
| CVE-2013-0197 | — | — | 2.0% | May 15, 2014 | Cross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core/filter_api.php in MantisBT ... |
| CVE-2013-7376 | — | — | 1.3% | May 14, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now