2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7299 | — | — | 2.5% | Jan 26, 2014 | framework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain sensitive information ... |
| CVE-2013-7298 | — | — | 1.8% | Jan 26, 2014 | query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and c... |
| CVE-2013-7143 | — | — | 1.2% | Jan 26, 2014 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary... |
| CVE-2013-7142 | — | — | 1.8% | Jan 26, 2014 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inje... |
| CVE-2013-7141 | — | — | 1.8% | Jan 26, 2014 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inje... |
| CVE-2013-7140 | — | — | 1.8% | Jan 26, 2014 | XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows r... |
| CVE-2013-6467 | — | — | 2.4% | Jan 26, 2014 | Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon ... |
| CVE-2013-6466 | — | — | 2.7% | Jan 26, 2014 | Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemo... |
| CVE-2013-4304 | — | — | 2.1% | Jan 26, 2014 | The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a va... |
| CVE-2013-6429 | — | — | 90.5% | Jan 26, 2014 | The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not di... |
| CVE-2013-7296 | — | — | 2.2% | Jan 26, 2014 | The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier withi... |
| CVE-2013-7248 | — | — | 4.3% | Jan 26, 2014 | Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password fo... |
| CVE-2013-7247 | — | — | 2.7% | Jan 26, 2014 | cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows... |
| CVE-2013-6891 | — | — | 0.4% | Jan 26, 2014 | lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary fil... |
| CVE-2013-6853 | — | — | 1.9% | Jan 26, 2014 | Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac... |
| CVE-2013-5364 | — | — | 0.4% | Jan 26, 2014 | Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Lin... |
| CVE-2013-6458 | — | — | 0.6% | Jan 24, 2014 | Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) v... |
| CVE-2013-6457 | — | — | 0.7% | Jan 24, 2014 | The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not pr... |
| CVE-2013-6434 | — | — | 1.0% | Jan 24, 2014 | The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client inv... |
| CVE-2013-2192 | — | — | 1.1% | Jan 24, 2014 | The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, whe... |
| CVE-2013-1853 | — | — | 0.4% | Jan 24, 2014 | Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive i... |
| CVE-2013-1886 | — | — | 2.2% | Jan 24, 2014 | Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possib... |
| CVE-2013-1885 | — | — | 1.2% | Jan 24, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate Syst... |
| CVE-2013-7317 | — | — | 1.0% | Jan 24, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote attackers to inject arbitrary w... |
| CVE-2013-7316 | — | — | 1.9% | Jan 24, 2014 | Cross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows remote attackers to inject... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now