2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7239 | — | — | 1.2% | Jan 13, 2014 | memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credent... |
| CVE-2013-0179 | — | — | 1.5% | Jan 13, 2014 | The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verb... |
| CVE-2013-7292 | — | — | 1.1% | Jan 13, 2014 | VASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users to bypass Active Directory (AD) auth... |
| CVE-2013-6954 | MEDIUM | 6.5 | 4.7% | Jan 12, 2014 | The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL poi... |
| CVE-2013-6028 | — | — | 0.8% | Jan 12, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to... |
| CVE-2013-6017 | — | — | 4.4% | Jan 12, 2014 | Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary... |
| CVE-2013-5034 | — | — | 1.7% | Jan 12, 2014 | Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a differe... |
| CVE-2013-5033 | — | — | 1.7% | Jan 12, 2014 | Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a differe... |
| CVE-2013-5032 | — | — | 1.7% | Jan 12, 2014 | Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a differe... |
| CVE-2013-5031 | — | — | 1.7% | Jan 12, 2014 | Unspecified vulnerability in Atmail before 6.6.4, and 7.x before 7.1.2, has unknown impact and attack vectors, a differe... |
| CVE-2013-4517 | — | — | 8.9% | Jan 11, 2014 | Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial... |
| CVE-2013-3713 | — | — | 0.4% | Jan 11, 2014 | The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" grou... |
| CVE-2013-2050 | — | — | 16.1% | Jan 11, 2014 | SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and Mana... |
| CVE-2013-7289 | — | — | 1.2% | Jan 10, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 a... |
| CVE-2013-7288 | — | — | 1.2% | Jan 10, 2014 | Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulle... |
| CVE-2013-5011 | — | — | 0.5% | Jan 10, 2014 | Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and ... |
| CVE-2013-5010 | — | — | 0.3% | Jan 10, 2014 | The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 ... |
| CVE-2013-5009 | — | — | 0.8% | Jan 10, 2014 | The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoin... |
| CVE-2013-4460 | — | — | 1.5% | Jan 10, 2014 | Cross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1.2.15 allows remote auth... |
| CVE-2013-7282 | — | — | 9.6% | Jan 10, 2014 | The management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS-WIR300N router with fi... |
| CVE-2013-6974 | — | — | 1.4% | Jan 10, 2014 | Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote ... |
| CVE-2013-6334 | — | — | 1.4% | Jan 10, 2014 | IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1.5... |
| CVE-2013-6321 | — | — | 1.2% | Jan 10, 2014 | SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Gover... |
| CVE-2013-7139 | — | — | 1.0% | Jan 9, 2014 | SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows rem... |
| CVE-2013-7138 | — | — | 1.9% | Jan 9, 2014 | Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now