2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-2706 | — | — | 1.0% | Apr 11, 2014 | Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote atta... |
| CVE-2013-7367 | — | — | 1.5% | Apr 10, 2014 | SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attac... |
| CVE-2013-7366 | — | — | 1.7% | Apr 10, 2014 | The SAP Software Deployment Manager (SDM), in certain unspecified conditions, allows remote attackers to cause a denial ... |
| CVE-2013-7365 | — | — | 1.3% | Apr 10, 2014 | Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script... |
| CVE-2013-7364 | — | — | 1.5% | Apr 10, 2014 | An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows rem... |
| CVE-2013-7363 | — | — | 1.5% | Apr 10, 2014 | Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensi... |
| CVE-2013-7362 | — | — | 2.1% | Apr 10, 2014 | An unspecified RFC function in SAP CCMS Agent allows remote attackers to execute arbitrary commands via unknown vectors. |
| CVE-2013-7361 | — | — | 1.3% | Apr 10, 2014 | Directory traversal vulnerability in SAP CMS and CM Services allows attackers to upload arbitrary files via unspecified ... |
| CVE-2013-7360 | — | — | 1.3% | Apr 10, 2014 | Unspecified vulnerability in SAP adminadapter allows remote attackers to read or write to arbitrary files via unknown ve... |
| CVE-2013-7359 | — | — | 1.2% | Apr 10, 2014 | Unspecified vulnerability in SAP Mobile Infrastructure allows remote attackers to obtain sensitive port information via ... |
| CVE-2013-7358 | — | — | 1.2% | Apr 10, 2014 | Unspecified vulnerability in SAP Guided Procedures Archive Monitor allows remote attackers to obtain usernames, roles, p... |
| CVE-2013-7357 | — | — | 1.2% | Apr 10, 2014 | Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential i... |
| CVE-2013-7356 | — | — | 1.0% | Apr 10, 2014 | Unspecified vulnerability in the SAP CCMS / Database Monitors for Oracle allows attackers to obtain the database passwor... |
| CVE-2013-7355 | — | — | 1.2% | Apr 10, 2014 | SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL comman... |
| CVE-2013-0740 | — | — | 1.2% | Apr 10, 2014 | Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redir... |
| CVE-2013-6468 | — | — | 2.0% | Apr 10, 2014 | JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated user... |
| CVE-2013-3252 | — | — | 1.1% | Apr 10, 2014 | Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for Wor... |
| CVE-2013-3251 | — | — | 1.0% | Apr 10, 2014 | Cross-site request forgery (CSRF) vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote ... |
| CVE-2013-2699 | — | — | 1.1% | Apr 10, 2014 | Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote ... |
| CVE-2013-2693 | — | — | 1.1% | Apr 10, 2014 | Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows r... |
| CVE-2013-2033 | — | — | 1.9% | Apr 10, 2014 | Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.46... |
| CVE-2013-5680 | — | — | 7.8% | Apr 6, 2014 | Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote ... |
| CVE-2013-1946 | — | — | 1.3% | Apr 6, 2014 | The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page ... |
| CVE-2013-3930 | — | — | 3.0% | Apr 4, 2014 | Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a ... |
| CVE-2013-2287 | — | — | 9.2% | Apr 4, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now