Vulnerabilities published in 2013
6,227 vulnerabilities were published in 2013: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 1 of 63.
- PSF-2013-3 CGI directory traversal (URL parsing)
- CVE-2013-7491 Memory corruption in n/a
- CVE-2013-7490 Memory corruption in n/a
- CVE-2013-7489 Deserialization of Untrusted Data in Beaker
- CVE-2013-7488 Denial of service in n/a
- CVE-2013-7487 Command injection in n/a
- CVE-2013-7486 Cross-site scripting in n/a
- CVE-2013-7485 Cross-site scripting in n/a
- CVE-2013-7484 Weak cryptography in n/a
- CVE-2013-7483 Path traversal in n/a
- CVE-2013-7482 Cross-site scripting in n/a
- CVE-2013-7481 Cross-site scripting in n/a
- CVE-2013-7480 Cross-site scripting in n/a
- CVE-2013-7479 Cross-site scripting in n/a
- CVE-2013-7478 Cross-site scripting in n/a
- CVE-2013-7477 Cross-site scripting in n/a
- CVE-2013-7476 Cross-site request forgery in n/a
- CVE-2013-7475 Cross-site scripting in n/a
- CVE-2013-7474 Cross-site scripting in n/a
- CVE-2013-7473 Cross-site request forgery in n/a
- CVE-2013-7472 Cross-site scripting in n/a
- CVE-2013-7471 Command injection in n/a
- CVE-2013-7470 Denial of service in n/a
- CVE-2013-7469 Weak cryptography in n/a
- CVE-2013-7468 Code injection in n/a
- CVE-2013-7467 Cross-site scripting in n/a
- CVE-2013-7466 Path traversal in n/a
- CVE-2013-7465 Auth bypass in n/a
- CVE-2013-7464 Cross-site request forgery in n/a
- CVE-2013-7463 Aescrypt does not sufficiently use random values
- CVE-2013-7462 Path traversal in SaaS Control Console (SCC) Platform
- CVE-2013-7461 Security feature bypass in Change Control (MCC)
- CVE-2013-7460 Security feature bypass in Application Control (MAC)
- CVE-2013-7459 Buffer Overflow in pycrypto
- CVE-2013-7458 Information disclosure in n/a
- CVE-2013-7457 Privilege escalation in n/a
- CVE-2013-7456 Memory corruption in n/a
- CVE-2013-7455 Use after free in n/a
- CVE-2013-7454 Multiple XSS Filter Bypasses in validator
- CVE-2013-7453 Moderate severity vulnerability that affects validator
- CVE-2013-7452 Moderate severity vulnerability that affects validator
- CVE-2013-7451 Moderate severity vulnerability that affects validator
- CVE-2013-7450 Hardcoded credentials in n/a
- CVE-2013-7449 Security feature bypass in n/a
- CVE-2013-7448 Path traversal in n/a
- CVE-2013-7447 Integer overflow in n/a
- CVE-2013-7446 Use after free in n/a
- CVE-2013-7445 Denial of service in n/a
- CVE-2013-7444 Information disclosure in n/a
- CVE-2013-7443 Memory corruption in n/a
- CVE-2013-7442 Hardcoded credentials in n/a
- CVE-2013-7441 Denial of service in n/a
- CVE-2013-7440 The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, w
- CVE-2013-7439 Memory corruption in n/a
- CVE-2013-7438 Memory corruption in n/a
- CVE-2013-7437 Integer overflow in n/a
- CVE-2013-7436 Information disclosure in n/a
- CVE-2013-7435 Information disclosure in n/a
- CVE-2013-7433 Cross-site scripting in n/a
- CVE-2013-7432 The Googlemaps plugin before 3.1 for Joomla!
- CVE-2013-7431 Information disclosure in n/a
- CVE-2013-7430 Cross-site scripting in n/a
- CVE-2013-7429 XML external entity in n/a
- CVE-2013-7428 Denial of service in n/a
- CVE-2013-7426 File upload in n/a
- CVE-2013-7424 Memory corruption in n/a
- CVE-2013-7423 Other in n/a
- CVE-2013-7422 Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attack
- CVE-2013-7421 Privilege escalation in n/a
- CVE-2013-7420 Memory corruption in n/a
- CVE-2013-7419 Cross-site scripting in n/a
- CVE-2013-7418 Command injection in n/a
- CVE-2013-7417 Cross-site scripting in n/a
- CVE-2013-7416 Command injection in n/a
- CVE-2013-7409 Memory corruption in n/a
- CVE-2013-7408 Weak cryptography in n/a
- CVE-2013-7407 Cross-site request forgery in n/a
- CVE-2013-7406 SQL injection in n/a
- CVE-2013-7405 Hardcoded credentials in n/a
- CVE-2013-7404 Hardcoded credentials in n/a
- CVE-2013-7402 Denial of service in n/a
- CVE-2013-7401 Denial of service in n/a
- CVE-2013-7400 The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information
- CVE-2013-7398 Insufficient Verification of Data Authenticity in Async Http Client
- CVE-2013-7397 Insufficient Verification of Data Authenticity in Async Http Client
- CVE-2013-7395 Hardcoded credentials in n/a
- CVE-2013-7394 Command injection in n/a
- CVE-2013-7393 Path traversal in n/a
- CVE-2013-7392 Command injection in n/a
- CVE-2013-7391 Missing authorization in n/a
- CVE-2013-7390 File upload in n/a
- CVE-2013-7389 Cross-site scripting in n/a
- CVE-2013-7388 Memory corruption in n/a
- CVE-2013-7387 Auth bypass in n/a
- CVE-2013-7386 Memory corruption in n/a
- CVE-2013-7385 Information disclosure in n/a
- CVE-2013-7384 Null dereference in n/a
- CVE-2013-7383 Privilege escalation in n/a
- CVE-2013-7382 Hardcoded credentials in n/a
- CVE-2013-7381 Potential Command Injection in libnotify