2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-7353 | MEDIUM | 6.5 | 1.9% | May 6, 2014 | Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-... |
| CVE-2013-7331 | MEDIUM | 6.5 | 58.0% | Feb 26, 2014 | The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exist... |
| CVE-2013-6954 | MEDIUM | 6.5 | 4.7% | Jan 12, 2014 | The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL poi... |
| CVE-2013-3572 | MEDIUM | 6.1 | 1.6% | Dec 31, 2013 | Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi ... |
| CVE-2013-6673 | MEDIUM | 5.9 | 2.9% | Dec 11, 2013 | Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not rec... |
| CVE-2013-3900 | MEDIUM | 5.5 | 44.6% | Dec 11, 2013 | Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update ... |
| CVE-2013-5223 | MEDIUM | 5.4 | 33.6% | Nov 19, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated use... |
| CVE-2013-4392 | MEDIUM | 5 | 0.5% | Oct 28, 2013 | systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for ... |
| CVE-2013-3896 | MEDIUM | 5.5 | 69.6% | Oct 9, 2013 | Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, wh... |
| CVE-2013-3245 | MEDIUM | 6.3 | 2.9% | Jul 10, 2013 | plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers... |
| CVE-2013-2128 | MEDIUM | 5.5 | 0.4% | Jun 7, 2013 | The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption,... |
| CVE-2013-1675 | MEDIUM | 6.5 | 6.7% | May 16, 2013 | Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before ... |
| CVE-2013-0270 | MEDIUM | 6.5 | 3.1% | Apr 12, 2013 | A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP reque... |
| CVE-2013-1815 | MEDIUM | 6.1 | 0.5% | Apr 10, 2013 | A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer ... |
| CVE-2013-1840 | MEDIUM | 6.5 | 1.4% | Mar 22, 2013 | A flaw was found in OpenStack Glance. Remote authenticated users can exploit this vulnerability by requesting a cached i... |
| CVE-2013-2566 | MEDIUM | 5.9 | 84.4% | Mar 15, 2013 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for ... |
| CVE-2013-0248 | MEDIUM | 6.8 | 0.7% | Mar 15, 2013 | The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp ... |
| CVE-2013-0266 | MEDIUM | 5.5 | 0.3% | Mar 8, 2013 | A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file pe... |
| CVE-2013-0375 | MEDIUM | 5.4 | 1.9% | Jan 17, 2013 | Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows rem... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now