2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4587 | — | — | 0.5% | Dec 14, 2013 | Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kern... |
| CVE-2013-7104 | — | — | 4.3% | Dec 14, 2013 | McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in ... |
| CVE-2013-7103 | — | — | 4.3% | Dec 14, 2013 | McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacte... |
| CVE-2013-7085 | — | — | 2.5% | Dec 14, 2013 | Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whi... |
| CVE-2013-7069 | — | — | 3.1% | Dec 14, 2013 | ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --outp... |
| CVE-2013-6428 | — | — | 1.7% | Dec 14, 2013 | The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote a... |
| CVE-2013-6426 | — | — | 1.0% | Dec 14, 2013 | The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before iceho... |
| CVE-2013-6411 | — | — | 3.3% | Dec 14, 2013 | The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a... |
| CVE-2013-6391 | — | — | 2.2% | Dec 14, 2013 | The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return... |
| CVE-2013-6051 | — | — | 2.2% | Dec 14, 2013 | The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which all... |
| CVE-2013-5107 | — | — | 1.8% | Dec 14, 2013 | Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .... |
| CVE-2013-1364 | — | — | 2.2% | Dec 14, 2013 | The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configu... |
| CVE-2013-7096 | — | — | 1.9% | Dec 13, 2013 | Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via u... |
| CVE-2013-7095 | — | — | 2.1% | Dec 13, 2013 | The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack ve... |
| CVE-2013-7094 | — | — | 1.4% | Dec 13, 2013 | SQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows remote attackers to exe... |
| CVE-2013-7093 | — | — | 2.6% | Dec 13, 2013 | SAP Network Interface Router (SAProuter) 39.3 SP4 allows remote attackers to bypass authentication and modify the config... |
| CVE-2013-7039 | — | — | 3.3% | Dec 13, 2013 | Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNEC... |
| CVE-2013-7038 | — | — | 1.8% | Dec 13, 2013 | The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive informati... |
| CVE-2013-6809 | — | — | 2.9% | Dec 13, 2013 | Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (cra... |
| CVE-2013-6400 | — | — | 0.7% | Dec 13, 2013 | Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses I... |
| CVE-2013-6359 | — | — | 1.8% | Dec 13, 2013 | Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection f... |
| CVE-2013-6048 | — | — | 2.5% | Dec 13, 2013 | The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a deni... |
| CVE-2013-5676 | — | — | 5.0% | Dec 13, 2013 | The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (clea... |
| CVE-2013-7092 | — | — | 1.9% | Dec 13, 2013 | Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authen... |
| CVE-2013-7091 | — | — | 86.2% | Dec 13, 2013 | Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zim... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now