# Vulnerabilities published in 2013 - [PSF-2013-3](https://insights.sbomify.com/PSF-2013-3/): CGI directory traversal (URL parsing) (not scored) - [CVE-2013-7491](https://insights.sbomify.com/CVE-2013-7491/): Memory corruption in n/a (medium 5.3) - [CVE-2013-7490](https://insights.sbomify.com/CVE-2013-7490/): Memory corruption in n/a (medium 5.3) - [CVE-2013-7489](https://insights.sbomify.com/CVE-2013-7489/): Deserialization of Untrusted Data in Beaker (medium 6.8) - [CVE-2013-7488](https://insights.sbomify.com/CVE-2013-7488/): Denial of service in n/a (high 7.5) - [CVE-2013-7487](https://insights.sbomify.com/CVE-2013-7487/): Command injection in n/a (critical 9.8) - [CVE-2013-7486](https://insights.sbomify.com/CVE-2013-7486/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7485](https://insights.sbomify.com/CVE-2013-7485/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7484](https://insights.sbomify.com/CVE-2013-7484/): Weak cryptography in n/a (high 7.5) - [CVE-2013-7483](https://insights.sbomify.com/CVE-2013-7483/): Path traversal in n/a (critical 9.8) - [CVE-2013-7482](https://insights.sbomify.com/CVE-2013-7482/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7481](https://insights.sbomify.com/CVE-2013-7481/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7480](https://insights.sbomify.com/CVE-2013-7480/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7479](https://insights.sbomify.com/CVE-2013-7479/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7478](https://insights.sbomify.com/CVE-2013-7478/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7477](https://insights.sbomify.com/CVE-2013-7477/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7476](https://insights.sbomify.com/CVE-2013-7476/): Cross-site request forgery in n/a (high 8.8) - [CVE-2013-7475](https://insights.sbomify.com/CVE-2013-7475/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7474](https://insights.sbomify.com/CVE-2013-7474/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7473](https://insights.sbomify.com/CVE-2013-7473/): Cross-site request forgery in n/a (high 8.8) - [CVE-2013-7472](https://insights.sbomify.com/CVE-2013-7472/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7471](https://insights.sbomify.com/CVE-2013-7471/): Command injection in n/a (critical 9.8) - [CVE-2013-7470](https://insights.sbomify.com/CVE-2013-7470/): Denial of service in n/a (medium 5.9) - [CVE-2013-7469](https://insights.sbomify.com/CVE-2013-7469/): Weak cryptography in n/a (high 7.5) - [CVE-2013-7468](https://insights.sbomify.com/CVE-2013-7468/): Code injection in n/a (high 8.1) - [CVE-2013-7467](https://insights.sbomify.com/CVE-2013-7467/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7466](https://insights.sbomify.com/CVE-2013-7466/): Path traversal in n/a (high 8.8) - [CVE-2013-7465](https://insights.sbomify.com/CVE-2013-7465/): Auth bypass in n/a (critical 9.8) - [CVE-2013-7464](https://insights.sbomify.com/CVE-2013-7464/): Cross-site request forgery in n/a (high 8.8) - [CVE-2013-7463](https://insights.sbomify.com/CVE-2013-7463/): Aescrypt does not sufficiently use random values (high 7.5) - [CVE-2013-7462](https://insights.sbomify.com/CVE-2013-7462/): Path traversal in SaaS Control Console (SCC) Platform (high 7.5) - [CVE-2013-7461](https://insights.sbomify.com/CVE-2013-7461/): Security feature bypass in Change Control (MCC) (medium 5.5) - [CVE-2013-7460](https://insights.sbomify.com/CVE-2013-7460/): Security feature bypass in Application Control (MAC) (medium 5.5) - [CVE-2013-7459](https://insights.sbomify.com/CVE-2013-7459/): Buffer Overflow in pycrypto (critical 9.8) - [CVE-2013-7458](https://insights.sbomify.com/CVE-2013-7458/): Information disclosure in n/a (low 3.3) - [CVE-2013-7457](https://insights.sbomify.com/CVE-2013-7457/): Privilege escalation in n/a (high 7.8) - [CVE-2013-7456](https://insights.sbomify.com/CVE-2013-7456/): Memory corruption in n/a (high 7.6) - [CVE-2013-7455](https://insights.sbomify.com/CVE-2013-7455/): Use after free in n/a (critical 9.8) - [CVE-2013-7454](https://insights.sbomify.com/CVE-2013-7454/): Multiple XSS Filter Bypasses in validator (medium 6.1) - [CVE-2013-7453](https://insights.sbomify.com/CVE-2013-7453/): Moderate severity vulnerability that affects validator (medium 6.1) - [CVE-2013-7452](https://insights.sbomify.com/CVE-2013-7452/): Moderate severity vulnerability that affects validator (medium 6.1) - [CVE-2013-7451](https://insights.sbomify.com/CVE-2013-7451/): Moderate severity vulnerability that affects validator (medium 6.1) - [CVE-2013-7450](https://insights.sbomify.com/CVE-2013-7450/): Hardcoded credentials in n/a (high 7.5) - [CVE-2013-7449](https://insights.sbomify.com/CVE-2013-7449/): Security feature bypass in n/a (medium 6.5) - [CVE-2013-7448](https://insights.sbomify.com/CVE-2013-7448/): Path traversal in n/a (high 7.5) - [CVE-2013-7447](https://insights.sbomify.com/CVE-2013-7447/): Integer overflow in n/a (medium 6.5) - [CVE-2013-7446](https://insights.sbomify.com/CVE-2013-7446/): Use after free in n/a (medium 5.3) - [CVE-2013-7445](https://insights.sbomify.com/CVE-2013-7445/): Denial of service in n/a (high 7.8) - [CVE-2013-7444](https://insights.sbomify.com/CVE-2013-7444/): Information disclosure in n/a (medium 5.0) - [CVE-2013-7443](https://insights.sbomify.com/CVE-2013-7443/): Memory corruption in n/a (medium 5.0) - [CVE-2013-7442](https://insights.sbomify.com/CVE-2013-7442/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2013-7441](https://insights.sbomify.com/CVE-2013-7441/): Denial of service in n/a (high 7.8) - [CVE-2013-7440](https://insights.sbomify.com/CVE-2013-7440/): The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, w (medium 5.9) - [CVE-2013-7439](https://insights.sbomify.com/CVE-2013-7439/): Memory corruption in n/a (high 7.5) - [CVE-2013-7438](https://insights.sbomify.com/CVE-2013-7438/): Memory corruption in n/a (high 7.5) - [CVE-2013-7437](https://insights.sbomify.com/CVE-2013-7437/): Integer overflow in n/a (medium 5.0) - [CVE-2013-7436](https://insights.sbomify.com/CVE-2013-7436/): Information disclosure in n/a (medium 4.3) - [CVE-2013-7435](https://insights.sbomify.com/CVE-2013-7435/): Information disclosure in n/a (medium 6.5) - [CVE-2013-7433](https://insights.sbomify.com/CVE-2013-7433/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7432](https://insights.sbomify.com/CVE-2013-7432/): The Googlemaps plugin before 3.1 for Joomla! (high 7.5) - [CVE-2013-7431](https://insights.sbomify.com/CVE-2013-7431/): Information disclosure in n/a (medium 5.3) - [CVE-2013-7430](https://insights.sbomify.com/CVE-2013-7430/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-7429](https://insights.sbomify.com/CVE-2013-7429/): XML external entity in n/a (critical 9.8) - [CVE-2013-7428](https://insights.sbomify.com/CVE-2013-7428/): Denial of service in n/a (high 7.5) - [CVE-2013-7426](https://insights.sbomify.com/CVE-2013-7426/): File upload in n/a (critical 9.8) - [CVE-2013-7424](https://insights.sbomify.com/CVE-2013-7424/): Memory corruption in n/a (medium 5.1) - [CVE-2013-7423](https://insights.sbomify.com/CVE-2013-7423/): Other in n/a (medium 5.0) - [CVE-2013-7422](https://insights.sbomify.com/CVE-2013-7422/): Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attack (high 7.5) - [CVE-2013-7421](https://insights.sbomify.com/CVE-2013-7421/): Privilege escalation in n/a (low 2.1) - [CVE-2013-7420](https://insights.sbomify.com/CVE-2013-7420/): Memory corruption in n/a (high 7.5) - [CVE-2013-7419](https://insights.sbomify.com/CVE-2013-7419/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-7418](https://insights.sbomify.com/CVE-2013-7418/): Command injection in n/a (medium 6.5) - [CVE-2013-7417](https://insights.sbomify.com/CVE-2013-7417/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-7416](https://insights.sbomify.com/CVE-2013-7416/): Command injection in n/a (high 7.5) - [CVE-2013-7409](https://insights.sbomify.com/CVE-2013-7409/): Memory corruption in n/a (high 7.5) - [CVE-2013-7408](https://insights.sbomify.com/CVE-2013-7408/): Weak cryptography in n/a (high 7.5) - [CVE-2013-7407](https://insights.sbomify.com/CVE-2013-7407/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-7406](https://insights.sbomify.com/CVE-2013-7406/): SQL injection in n/a (high 7.5) - [CVE-2013-7405](https://insights.sbomify.com/CVE-2013-7405/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2013-7404](https://insights.sbomify.com/CVE-2013-7404/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2013-7402](https://insights.sbomify.com/CVE-2013-7402/): Denial of service in n/a (medium 5.0) - [CVE-2013-7401](https://insights.sbomify.com/CVE-2013-7401/): Denial of service in n/a (medium 5.0) - [CVE-2013-7400](https://insights.sbomify.com/CVE-2013-7400/): The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information (high 7.5) - [CVE-2013-7398](https://insights.sbomify.com/CVE-2013-7398/): Insufficient Verification of Data Authenticity in Async Http Client (medium 4.3) - [CVE-2013-7397](https://insights.sbomify.com/CVE-2013-7397/): Insufficient Verification of Data Authenticity in Async Http Client (medium 4.3) - [CVE-2013-7395](https://insights.sbomify.com/CVE-2013-7395/): Hardcoded credentials in n/a (medium 4.9) - [CVE-2013-7394](https://insights.sbomify.com/CVE-2013-7394/): Command injection in n/a (critical 9.0) - [CVE-2013-7393](https://insights.sbomify.com/CVE-2013-7393/): Path traversal in n/a (low 2.4) - [CVE-2013-7392](https://insights.sbomify.com/CVE-2013-7392/): Command injection in n/a (high 7.5) - [CVE-2013-7391](https://insights.sbomify.com/CVE-2013-7391/): Missing authorization in n/a (medium 5.0) - [CVE-2013-7390](https://insights.sbomify.com/CVE-2013-7390/): File upload in n/a (critical 9.8) - [CVE-2013-7389](https://insights.sbomify.com/CVE-2013-7389/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-7388](https://insights.sbomify.com/CVE-2013-7388/): Memory corruption in n/a (critical 9.3) - [CVE-2013-7387](https://insights.sbomify.com/CVE-2013-7387/): Auth bypass in n/a (medium 6.8) - [CVE-2013-7386](https://insights.sbomify.com/CVE-2013-7386/): Memory corruption in n/a (medium 5.0) - [CVE-2013-7385](https://insights.sbomify.com/CVE-2013-7385/): Information disclosure in n/a (medium 6.8) - [CVE-2013-7384](https://insights.sbomify.com/CVE-2013-7384/): Null dereference in n/a (medium 5.0) - [CVE-2013-7383](https://insights.sbomify.com/CVE-2013-7383/): Privilege escalation in n/a (critical 9.0) - [CVE-2013-7382](https://insights.sbomify.com/CVE-2013-7382/): Hardcoded credentials in n/a (medium 5.0) - [CVE-2013-7381](https://insights.sbomify.com/CVE-2013-7381/): Potential Command Injection in libnotify (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2013/