2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-5009 | — | — | 0.8% | Jan 10, 2014 | The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoin... |
| CVE-2013-4460 | — | — | 1.5% | Jan 10, 2014 | Cross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1.2.15 allows remote auth... |
| CVE-2013-7282 | — | — | 9.6% | Jan 10, 2014 | The management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS-WIR300N router with fi... |
| CVE-2013-6974 | — | — | 1.4% | Jan 10, 2014 | Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote ... |
| CVE-2013-6334 | — | — | 1.4% | Jan 10, 2014 | IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5... |
| CVE-2013-6321 | — | — | 1.2% | Jan 10, 2014 | SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Gover... |
| CVE-2013-7139 | — | — | 1.0% | Jan 9, 2014 | SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows rem... |
| CVE-2013-7138 | — | — | 1.9% | Jan 9, 2014 | Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and ... |
| CVE-2013-6923 | — | — | 3.2% | Jan 9, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331... |
| CVE-2013-6462 | — | — | 10.3% | Jan 9, 2014 | Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 al... |
| CVE-2013-7283 | — | — | 1.6% | Jan 9, 2014 | Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has ... |
| CVE-2013-7174 | — | — | 2.1% | Jan 9, 2014 | Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitra... |
| CVE-2013-6955 | — | — | 84.6% | Jan 9, 2014 | webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before ... |
| CVE-2013-4353 | — | — | 11.9% | Jan 9, 2014 | The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial o... |
| CVE-2013-6997 | — | — | 1.3% | Jan 9, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and earlier allow remote attacke... |
| CVE-2013-5359 | — | — | 2.3% | Jan 9, 2014 | Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to ex... |
| CVE-2013-5358 | — | — | 1.3% | Jan 9, 2014 | Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafte... |
| CVE-2013-5357 | — | — | 2.3% | Jan 9, 2014 | Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary ... |
| CVE-2013-5349 | — | — | 2.3% | Jan 9, 2014 | Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary... |
| CVE-2013-6982 | — | — | 2.8% | Jan 8, 2014 | The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages wi... |
| CVE-2013-7281 | — | — | 0.5% | Jan 8, 2014 | The dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value wi... |
| CVE-2013-7280 | — | — | 5.8% | Jan 8, 2014 | Buffer overflow in HansoTools Hanso Player 2.1.0, 2.5.0, and earlier allows remote attackers to cause a denial of servic... |
| CVE-2013-7279 | — | — | 2.0% | Jan 8, 2014 | Cross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3 Video plugin before 0.983... |
| CVE-2013-7278 | — | — | 2.6% | Jan 8, 2014 | SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via th... |
| CVE-2013-7277 | — | — | 1.7% | Jan 8, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote atta... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now