# Vulnerabilities published in 2013 - [CVE-2013-4965](https://insights.sbomify.com/CVE-2013-4965/): Auth bypass in n/a (medium 5.0) - [CVE-2013-4964](https://insights.sbomify.com/CVE-2013-4964/): Security feature bypass in n/a (medium 5.0) - [CVE-2013-4963](https://insights.sbomify.com/CVE-2013-4963/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-4962](https://insights.sbomify.com/CVE-2013-4962/): Missing authorization in n/a (medium 5.8) - [CVE-2013-4961](https://insights.sbomify.com/CVE-2013-4961/): Information disclosure in n/a (medium 5.0) - [CVE-2013-4959](https://insights.sbomify.com/CVE-2013-4959/): Information disclosure in n/a (low 2.1) - [CVE-2013-4958](https://insights.sbomify.com/CVE-2013-4958/): Missing authorization in n/a (medium 6.9) - [CVE-2013-4957](https://insights.sbomify.com/CVE-2013-4957/): Code injection in n/a (medium 6.8) - [CVE-2013-4956](https://insights.sbomify.com/CVE-2013-4956/): Misconfiguration in n/a (low 3.6) - [CVE-2013-4955](https://insights.sbomify.com/CVE-2013-4955/): Open redirect in n/a (medium 5.8) - [CVE-2013-4954](https://insights.sbomify.com/CVE-2013-4954/): Cross-site scripting in n/a (low 2.6) - [CVE-2013-4953](https://insights.sbomify.com/CVE-2013-4953/): SQL injection in n/a (high 7.5) - [CVE-2013-4952](https://insights.sbomify.com/CVE-2013-4952/): SQL injection in n/a (high 7.5) - [CVE-2013-4951](https://insights.sbomify.com/CVE-2013-4951/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4950](https://insights.sbomify.com/CVE-2013-4950/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4949](https://insights.sbomify.com/CVE-2013-4949/): File upload in n/a (medium 6.8) - [CVE-2013-4948](https://insights.sbomify.com/CVE-2013-4948/): SQL injection in n/a (high 7.5) - [CVE-2013-4947](https://insights.sbomify.com/CVE-2013-4947/): Other in n/a (high 7.5) - [CVE-2013-4946](https://insights.sbomify.com/CVE-2013-4946/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4945](https://insights.sbomify.com/CVE-2013-4945/): SQL injection in n/a (high 7.5) - [CVE-2013-4944](https://insights.sbomify.com/CVE-2013-4944/): Cross-site scripting in n/a (low 2.6) - [CVE-2013-4943](https://insights.sbomify.com/CVE-2013-4943/): Privilege escalation in n/a (high 7.2) - [CVE-2013-4942](https://insights.sbomify.com/CVE-2013-4942/): YUI Cross-site Scripting (XSS) vulnerability (medium 4.3) - [CVE-2013-4941](https://insights.sbomify.com/CVE-2013-4941/): YUI Cross-site Scripting (XSS) vulnerability (medium 4.3) - [CVE-2013-4940](https://insights.sbomify.com/CVE-2013-4940/): YUI Cross-site Scripting (XSS) vulnerability (medium 4.3) - [CVE-2013-4939](https://insights.sbomify.com/CVE-2013-4939/): Cross-Site Scripting in yui (medium 4.3) - [CVE-2013-4938](https://insights.sbomify.com/CVE-2013-4938/): Information disclosure in n/a (medium 4.3) - [CVE-2013-4937](https://insights.sbomify.com/CVE-2013-4937/): Other in n/a (critical 10.0) - [CVE-2013-4936](https://insights.sbomify.com/CVE-2013-4936/): Null dereference in n/a (medium 5.0) - [CVE-2013-4935](https://insights.sbomify.com/CVE-2013-4935/): Denial of service in n/a (medium 4.3) - [CVE-2013-4934](https://insights.sbomify.com/CVE-2013-4934/): Denial of service in n/a (medium 4.3) - [CVE-2013-4933](https://insights.sbomify.com/CVE-2013-4933/): Memory corruption in n/a (medium 5.0) - [CVE-2013-4932](https://insights.sbomify.com/CVE-2013-4932/): Denial of service in n/a (medium 5.0) - [CVE-2013-4931](https://insights.sbomify.com/CVE-2013-4931/): Denial of service in n/a (medium 5.0) - [CVE-2013-4930](https://insights.sbomify.com/CVE-2013-4930/): Denial of service in n/a (medium 5.0) - [CVE-2013-4929](https://insights.sbomify.com/CVE-2013-4929/): Denial of service in n/a (high 7.8) - [CVE-2013-4928](https://insights.sbomify.com/CVE-2013-4928/): Integer overflow in n/a (high 7.8) - [CVE-2013-4927](https://insights.sbomify.com/CVE-2013-4927/): Integer overflow in n/a (high 7.8) - [CVE-2013-4926](https://insights.sbomify.com/CVE-2013-4926/): Denial of service in n/a (medium 5.0) - [CVE-2013-4925](https://insights.sbomify.com/CVE-2013-4925/): Integer overflow in n/a (medium 5.0) - [CVE-2013-4924](https://insights.sbomify.com/CVE-2013-4924/): Denial of service in n/a (medium 5.0) - [CVE-2013-4923](https://insights.sbomify.com/CVE-2013-4923/): Denial of service in n/a (medium 5.0) - [CVE-2013-4922](https://insights.sbomify.com/CVE-2013-4922/): Use after free in n/a (medium 5.0) - [CVE-2013-4921](https://insights.sbomify.com/CVE-2013-4921/): Denial of service in n/a (medium 5.0) - [CVE-2013-4920](https://insights.sbomify.com/CVE-2013-4920/): Denial of service in n/a (medium 5.0) - [CVE-2013-4912](https://insights.sbomify.com/CVE-2013-4912/): Open redirect in n/a (medium 5.8) - [CVE-2013-4911](https://insights.sbomify.com/CVE-2013-4911/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-4900](https://insights.sbomify.com/CVE-2013-4900/): Path traversal in n/a (medium 5.0) - [CVE-2013-4899](https://insights.sbomify.com/CVE-2013-4899/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4898](https://insights.sbomify.com/CVE-2013-4898/): File upload in n/a (medium 6.5) - [CVE-2013-4891](https://insights.sbomify.com/CVE-2013-4891/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-4890](https://insights.sbomify.com/CVE-2013-4890/): Denial of service in n/a (high 7.8) - [CVE-2013-4889](https://insights.sbomify.com/CVE-2013-4889/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-4888](https://insights.sbomify.com/CVE-2013-4888/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4887](https://insights.sbomify.com/CVE-2013-4887/): SQL injection in n/a (high 7.5) - [CVE-2013-4885](https://insights.sbomify.com/CVE-2013-4885/): Path traversal in n/a (medium 6.8) - [CVE-2013-4884](https://insights.sbomify.com/CVE-2013-4884/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4883](https://insights.sbomify.com/CVE-2013-4883/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4882](https://insights.sbomify.com/CVE-2013-4882/): SQL injection in n/a (medium 6.5) - [CVE-2013-4881](https://insights.sbomify.com/CVE-2013-4881/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-4880](https://insights.sbomify.com/CVE-2013-4880/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4879](https://insights.sbomify.com/CVE-2013-4879/): SQL injection in n/a (high 7.5) - [CVE-2013-4878](https://insights.sbomify.com/CVE-2013-4878/): Misconfiguration in n/a (high 7.5) - [CVE-2013-4877](https://insights.sbomify.com/CVE-2013-4877/): Auth bypass in n/a (low 2.6) - [CVE-2013-4876](https://insights.sbomify.com/CVE-2013-4876/): Hardcoded credentials in n/a (medium 6.2) - [CVE-2013-4875](https://insights.sbomify.com/CVE-2013-4875/): Auth bypass in n/a (medium 6.2) - [CVE-2013-4874](https://insights.sbomify.com/CVE-2013-4874/): Auth bypass in n/a (medium 6.2) - [CVE-2013-4873](https://insights.sbomify.com/CVE-2013-4873/): Information disclosure in n/a (medium 5.0) - [CVE-2013-4872](https://insights.sbomify.com/CVE-2013-4872/): Open redirect in n/a (medium 6.9) - [CVE-2013-4871](https://insights.sbomify.com/CVE-2013-4871/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-4870](https://insights.sbomify.com/CVE-2013-4870/): SQL injection in n/a (high 7.5) - [CVE-2013-4869](https://insights.sbomify.com/CVE-2013-4869/): Hardcoded credentials in n/a (not scored) - [CVE-2013-4868](https://insights.sbomify.com/CVE-2013-4868/): Information disclosure in n/a (medium 5.3) - [CVE-2013-4867](https://insights.sbomify.com/CVE-2013-4867/): Privilege escalation in n/a (medium 6.3) - [CVE-2013-4866](https://insights.sbomify.com/CVE-2013-4866/): Hardcoded credentials in n/a (low 3.3) - [CVE-2013-4865](https://insights.sbomify.com/CVE-2013-4865/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2013-4864](https://insights.sbomify.com/CVE-2013-4864/): Server-side request forgery in n/a (critical 9.8) - [CVE-2013-4863](https://insights.sbomify.com/CVE-2013-4863/): Code injection in n/a (high 8.8) - [CVE-2013-4862](https://insights.sbomify.com/CVE-2013-4862/): Missing authorization in n/a (high 8.1) - [CVE-2013-4861](https://insights.sbomify.com/CVE-2013-4861/): Path traversal in n/a (medium 6.5) - [CVE-2013-4860](https://insights.sbomify.com/CVE-2013-4860/): Missing authorization in n/a (high 8.3) - [CVE-2013-4859](https://insights.sbomify.com/CVE-2013-4859/): Missing authorization in n/a (high 8.1) - [CVE-2013-4858](https://insights.sbomify.com/CVE-2013-4858/): Denial of service in n/a (medium 4.3) - [CVE-2013-4857](https://insights.sbomify.com/CVE-2013-4857/): Path traversal in n/a (critical 9.8) - [CVE-2013-4856](https://insights.sbomify.com/CVE-2013-4856/): Information disclosure in n/a (medium 6.5) - [CVE-2013-4855](https://insights.sbomify.com/CVE-2013-4855/): Path traversal in n/a (high 8.8) - [CVE-2013-4854](https://insights.sbomify.com/CVE-2013-4854/): Denial of service in n/a (high 7.8) - [CVE-2013-4852](https://insights.sbomify.com/CVE-2013-4852/): Integer overflow in n/a (medium 6.8) - [CVE-2013-4851](https://insights.sbomify.com/CVE-2013-4851/): Auth bypass in n/a (medium 6.4) - [CVE-2013-4848](https://insights.sbomify.com/CVE-2013-4848/): Cross-site request forgery in n/a (high 8.8) - [CVE-2013-4846](https://insights.sbomify.com/CVE-2013-4846/): Information disclosure in n/a (medium 5.0) - [CVE-2013-4845](https://insights.sbomify.com/CVE-2013-4845/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4844](https://insights.sbomify.com/CVE-2013-4844/): Code injection in n/a (high 7.5) - [CVE-2013-4843](https://insights.sbomify.com/CVE-2013-4843/): Information disclosure in n/a (medium 6.8) - [CVE-2013-4842](https://insights.sbomify.com/CVE-2013-4842/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4841](https://insights.sbomify.com/CVE-2013-4841/): Other in n/a (critical 10.0) - [CVE-2013-4840](https://insights.sbomify.com/CVE-2013-4840/): Denial of service in n/a (high 7.8) - [CVE-2013-4839](https://insights.sbomify.com/CVE-2013-4839/): Other in n/a (high 7.5) - [CVE-2013-4838](https://insights.sbomify.com/CVE-2013-4838/): Code injection in n/a (critical 10.0) - [CVE-2013-4837](https://insights.sbomify.com/CVE-2013-4837/): Code injection in n/a (critical 10.0) --- From sbomify Insights: https://insights.sbomify.com/years/2013/page/19/