2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4662 | — | — | 1.0% | Jan 29, 2014 | The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass ... |
| CVE-2013-4661 | — | — | 1.0% | Jan 29, 2014 | CiviCRM 2.0.0 through 4.2.9 and 4.3.0 through 4.3.3 does not properly enforce role-based access control (RBAC) restricti... |
| CVE-2013-2747 | — | — | 1.4% | Jan 29, 2014 | The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users ... |
| CVE-2013-6931 | — | — | 1.0% | Jan 29, 2014 | SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute ... |
| CVE-2013-6930 | — | — | 1.0% | Jan 29, 2014 | SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.... |
| CVE-2013-6749 | — | — | 4.0% | Jan 29, 2014 | Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remot... |
| CVE-2013-6748 | — | — | 3.1% | Jan 29, 2014 | Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remot... |
| CVE-2013-2974 | — | — | 1.2% | Jan 29, 2014 | The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote auth... |
| CVE-2013-5094 | — | — | 1.9% | Jan 28, 2014 | Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inj... |
| CVE-2013-6650 | — | — | 2.0% | Jan 28, 2014 | The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome... |
| CVE-2013-6649 | — | — | 1.4% | Jan 28, 2014 | Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as... |
| CVE-2013-7135 | — | — | 0.4% | Jan 28, 2014 | The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows ... |
| CVE-2013-6838 | — | — | 2.8% | Jan 28, 2014 | An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.... |
| CVE-2013-6747 | — | — | 2.2% | Jan 27, 2014 | IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Direc... |
| CVE-2013-7299 | — | — | 2.5% | Jan 26, 2014 | framework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain sensitive information ... |
| CVE-2013-7298 | — | — | 1.8% | Jan 26, 2014 | query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and c... |
| CVE-2013-7143 | — | — | 1.2% | Jan 26, 2014 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary... |
| CVE-2013-7142 | — | — | 1.8% | Jan 26, 2014 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inje... |
| CVE-2013-7141 | — | — | 1.8% | Jan 26, 2014 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inje... |
| CVE-2013-7140 | — | — | 1.8% | Jan 26, 2014 | XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows r... |
| CVE-2013-6467 | — | — | 2.4% | Jan 26, 2014 | Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon ... |
| CVE-2013-6466 | — | — | 2.7% | Jan 26, 2014 | Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemo... |
| CVE-2013-4304 | — | — | 2.1% | Jan 26, 2014 | The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a va... |
| CVE-2013-6429 | — | — | 90.5% | Jan 26, 2014 | The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not di... |
| CVE-2013-7296 | — | — | 2.2% | Jan 26, 2014 | The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier withi... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now