2013 CVE Vulnerabilities
6,831 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-4065 | — | — | 0.9% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ult... |
| CVE-2013-4064 | — | — | 0.7% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ult... |
| CVE-2013-4063 | — | — | 0.9% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows re... |
| CVE-2013-4046 | — | — | 1.2% | Dec 21, 2013 | Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP... |
| CVE-2013-4045 | — | — | 1.1% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2... |
| CVE-2013-4044 | — | — | 1.1% | Dec 21, 2013 | IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated u... |
| CVE-2013-2822 | — | — | 0.3% | Dec 21, 2013 | NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Or... |
| CVE-2013-2821 | — | — | 1.3% | Dec 21, 2013 | NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Or... |
| CVE-2013-7194 | — | — | 2.6% | Dec 21, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote... |
| CVE-2013-7193 | — | — | 2.5% | Dec 21, 2013 | Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQ... |
| CVE-2013-7192 | — | — | 2.3% | Dec 21, 2013 | Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbit... |
| CVE-2013-7191 | — | — | 1.2% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in Tenmiles Helpdesk Pilot allows remote attackers to inject arbitrary web scri... |
| CVE-2013-7082 | — | — | 1.2% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in TYPO3 Flow (for... |
| CVE-2013-7077 | — | — | 1.2% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.... |
| CVE-2013-7076 | — | — | 1.4% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allow... |
| CVE-2013-7074 | — | — | 1.1% | Dec 21, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x befor... |
| CVE-2013-7002 | — | — | 1.2% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote a... |
| CVE-2013-6162 | — | — | 1.4% | Dec 21, 2013 | Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject ar... |
| CVE-2013-2628 | — | — | 0.7% | Dec 21, 2013 | Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stabl... |
| CVE-2013-2627 | — | — | 1.2% | Dec 21, 2013 | SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to e... |
| CVE-2013-7190 | — | — | 3.9% | Dec 20, 2013 | Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitr... |
| CVE-2013-7189 | — | — | 1.4% | Dec 20, 2013 | Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary... |
| CVE-2013-7188 | — | — | 1.3% | Dec 20, 2013 | Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject a... |
| CVE-2013-7187 | — | — | 4.8% | Dec 20, 2013 | SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers ... |
| CVE-2013-7186 | — | — | 11.6% | Dec 20, 2013 | Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long ... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now