2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4710 | — | — | 42.6% | Mar 3, 2014 | Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp... |
| CVE-2013-4054 | — | — | 2.3% | Mar 2, 2014 | Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to rea... |
| CVE-2013-2498 | — | — | 1.3% | Mar 1, 2014 | SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earli... |
| CVE-2013-3712 | — | — | 1.4% | Feb 26, 2014 | SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has ... |
| CVE-2013-7331 | MEDIUM | 6.5 | 58.0% | Feb 26, 2014 | The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exist... |
| CVE-2013-7332 | — | — | 13.3% | Feb 26, 2014 | The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during enti... |
| CVE-2013-6731 | — | — | 0.8% | Feb 26, 2014 | IBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change arbitrary passwords via an... |
| CVE-2013-6204 | — | — | 5.5% | Feb 26, 2014 | The Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, 7.0, and 7.1 all... |
| CVE-2013-6203 | — | — | 5.5% | Feb 26, 2014 | The Web Console in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, 7.0, and 7.1 all... |
| CVE-2013-4841 | — | — | 10.4% | Feb 26, 2014 | Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Softwar... |
| CVE-2013-4590 | — | — | 9.5% | Feb 26, 2014 | Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" ... |
| CVE-2013-4322 | — | — | 9.5% | Feb 26, 2014 | Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without prop... |
| CVE-2013-4286 | — | — | 16.8% | Feb 26, 2014 | Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is use... |
| CVE-2013-2824 | — | — | 1.8% | Feb 26, 2014 | Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 thro... |
| CVE-2013-6047 | — | — | 1.2% | Feb 25, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 ... |
| CVE-2013-6661 | — | — | 1.3% | Feb 24, 2014 | Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protect... |
| CVE-2013-6660 | — | — | 0.9% | Feb 24, 2014 | The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in Web... |
| CVE-2013-6659 | — | — | 0.8% | Feb 24, 2014 | The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before... |
| CVE-2013-6658 | — | — | 2.1% | Feb 24, 2014 | Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750... |
| CVE-2013-6657 | — | — | 1.2% | Feb 24, 2014 | core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the ... |
| CVE-2013-6656 | — | — | 1.1% | Feb 24, 2014 | The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome b... |
| CVE-2013-6655 | — | — | 1.3% | Feb 24, 2014 | Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a... |
| CVE-2013-6654 | — | — | 1.3% | Feb 24, 2014 | The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chr... |
| CVE-2013-6653 | — | — | 1.3% | Feb 24, 2014 | Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote atta... |
| CVE-2013-6652 | — | — | 1.2% | Feb 24, 2014 | Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on W... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now