2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4738 | — | — | 0.3% | Feb 3, 2014 | Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation ... |
| CVE-2013-0234 | — | — | 1.5% | Feb 2, 2014 | Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remo... |
| CVE-2013-7301 | — | — | 1.5% | Feb 2, 2014 | Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensit... |
| CVE-2013-7300 | — | — | 1.5% | Feb 2, 2014 | Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full path... |
| CVE-2013-6491 | — | — | 1.9% | Feb 2, 2014 | The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when q... |
| CVE-2013-4331 | — | — | 0.4% | Feb 2, 2014 | Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permission... |
| CVE-2013-7177 | — | — | 3.2% | Feb 1, 2014 | config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger th... |
| CVE-2013-7176 | — | — | 3.2% | Feb 1, 2014 | config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the bloc... |
| CVE-2013-6724 | — | — | 3.1% | Feb 1, 2014 | Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote att... |
| CVE-2013-4043 | — | — | 1.4% | Feb 1, 2014 | The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before ... |
| CVE-2013-6143 | — | — | 1.4% | Jan 31, 2014 | The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attac... |
| CVE-2013-6235 | — | — | 2.2% | Jan 31, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote att... |
| CVE-2013-4979 | — | — | 5.1% | Jan 31, 2014 | Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary cod... |
| CVE-2013-4383 | — | — | 0.9% | Jan 31, 2014 | Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote ... |
| CVE-2013-6727 | — | — | 1.7% | Jan 31, 2014 | The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plu... |
| CVE-2013-7303 | — | — | 2.4% | Jan 30, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/for... |
| CVE-2013-7246 | — | — | 11.3% | Jan 30, 2014 | Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows... |
| CVE-2013-3090 | — | — | 1.2% | Jan 30, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Belkin N300 router allow remote attackers to inject arbitrary web... |
| CVE-2013-3087 | — | — | 1.2% | Jan 30, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web... |
| CVE-2013-3084 | — | — | 1.0% | Jan 30, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Belkin Model F5D8236-4 v2 router allow remote attackers to inject... |
| CVE-2013-1376 | — | — | 7.2% | Jan 30, 2014 | Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attacker... |
| CVE-2013-0177 | — | — | 21.2% | Jan 30, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business ... |
| CVE-2013-7318 | — | — | 1.0% | Jan 29, 2014 | Cross-site scripting (XSS) vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers ... |
| CVE-2013-6141 | — | — | 1.0% | Jan 29, 2014 | Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors relat... |
| CVE-2013-5092 | — | — | 3.2% | Jan 29, 2014 | Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attacke... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now