2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7276 | — | — | 2.4% | Jan 8, 2014 | Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin 2.0.2 for WordPress all... |
| CVE-2013-7275 | — | — | 1.9% | Jan 8, 2014 | Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers... |
| CVE-2013-7274 | — | — | 1.5% | Jan 8, 2014 | Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitr... |
| CVE-2013-7097 | — | — | 3.6% | Jan 8, 2014 | Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrar... |
| CVE-2013-6436 | — | — | 0.4% | Jan 7, 2014 | The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the s... |
| CVE-2013-6480 | — | — | 2.1% | Jan 7, 2014 | Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows loca... |
| CVE-2013-6419 | — | — | 1.8% | Jan 7, 2014 | Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID ... |
| CVE-2013-4969 | — | — | 0.4% | Jan 7, 2014 | Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users... |
| CVE-2013-6888 | — | — | 4.1% | Jan 7, 2014 | Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball. |
| CVE-2013-6884 | — | — | 10.3% | Jan 7, 2014 | The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and ... |
| CVE-2013-6881 | — | — | 12.6% | Jan 7, 2014 | CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands vi... |
| CVE-2013-4564 | — | — | 2.6% | Jan 7, 2014 | Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version o... |
| CVE-2013-7271 | — | — | 0.5% | Jan 6, 2014 | The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without en... |
| CVE-2013-7270 | — | — | 0.5% | Jan 6, 2014 | The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value b... |
| CVE-2013-7269 | — | — | 0.5% | Jan 6, 2014 | The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value witho... |
| CVE-2013-7268 | — | — | 0.4% | Jan 6, 2014 | The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without en... |
| CVE-2013-7267 | — | — | 0.4% | Jan 6, 2014 | The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value witho... |
| CVE-2013-7266 | — | — | 0.4% | Jan 6, 2014 | The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a ... |
| CVE-2013-7265 | — | — | 0.5% | Jan 6, 2014 | The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before... |
| CVE-2013-7264 | — | — | 0.4% | Jan 6, 2014 | The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value befo... |
| CVE-2013-7263 | — | — | 0.5% | Jan 6, 2014 | The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been i... |
| CVE-2013-6463 | — | — | — | Jan 6, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-7266, CVE-2013-7267, CVE-2013-7268, CVE-2013-72... |
| CVE-2013-6405 | — | — | — | Jan 6, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, CVE-2013-72... |
| CVE-2013-7262 | — | — | 2.2% | Jan 5, 2014 | SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when ... |
| CVE-2013-6402 | — | — | 0.5% | Jan 5, 2014 | base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files vi... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now