# Vulnerabilities published in 2013


- [CVE-2013-4836](https://insights.sbomify.com/CVE-2013-4836/): Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application Life (high 7.5)
- [CVE-2013-4835](https://insights.sbomify.com/CVE-2013-4835/): Auth bypass in n/a (high 7.5)
- [CVE-2013-4834](https://insights.sbomify.com/CVE-2013-4834/): Code injection in n/a (high 7.5)
- [CVE-2013-4833](https://insights.sbomify.com/CVE-2013-4833/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4832](https://insights.sbomify.com/CVE-2013-4832/): Information disclosure in n/a (medium 4.0)
- [CVE-2013-4831](https://insights.sbomify.com/CVE-2013-4831/): Missing authorization in n/a (medium 5.5)
- [CVE-2013-4830](https://insights.sbomify.com/CVE-2013-4830/): Code injection in n/a (high 7.5)
- [CVE-2013-4829](https://insights.sbomify.com/CVE-2013-4829/): Information disclosure in n/a (low 1.5)
- [CVE-2013-4828](https://insights.sbomify.com/CVE-2013-4828/): Weak cryptography in n/a (medium 4.3)
- [CVE-2013-4827](https://insights.sbomify.com/CVE-2013-4827/): SQL injection in n/a (high 7.5)
- [CVE-2013-4826](https://insights.sbomify.com/CVE-2013-4826/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4825](https://insights.sbomify.com/CVE-2013-4825/): Auth bypass in n/a (high 7.5)
- [CVE-2013-4824](https://insights.sbomify.com/CVE-2013-4824/): Auth bypass in n/a (high 7.5)
- [CVE-2013-4823](https://insights.sbomify.com/CVE-2013-4823/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4822](https://insights.sbomify.com/CVE-2013-4822/): Code injection in n/a (critical 10.0)
- [CVE-2013-4821](https://insights.sbomify.com/CVE-2013-4821/): Denial of service in n/a (medium 4.0)
- [CVE-2013-4820](https://insights.sbomify.com/CVE-2013-4820/): Information disclosure in n/a (low 2.1)
- [CVE-2013-4819](https://insights.sbomify.com/CVE-2013-4819/): Information disclosure in n/a (low 3.5)
- [CVE-2013-4818](https://insights.sbomify.com/CVE-2013-4818/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4817](https://insights.sbomify.com/CVE-2013-4817/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4815](https://insights.sbomify.com/CVE-2013-4815/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4814](https://insights.sbomify.com/CVE-2013-4814/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4813](https://insights.sbomify.com/CVE-2013-4813/): Command injection in n/a (critical 10.0)
- [CVE-2013-4812](https://insights.sbomify.com/CVE-2013-4812/): File upload in n/a (critical 10.0)
- [CVE-2013-4811](https://insights.sbomify.com/CVE-2013-4811/): File upload in n/a (critical 10.0)
- [CVE-2013-4810](https://insights.sbomify.com/CVE-2013-4810/): HP Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2013-4809](https://insights.sbomify.com/CVE-2013-4809/): SQL injection in n/a (high 7.5)
- [CVE-2013-4808](https://insights.sbomify.com/CVE-2013-4808/): Auth bypass in n/a (critical 10.0)
- [CVE-2013-4807](https://insights.sbomify.com/CVE-2013-4807/): Other in n/a (high 7.8)
- [CVE-2013-4806](https://insights.sbomify.com/CVE-2013-4806/): Denial of service in n/a (high 7.0)
- [CVE-2013-4805](https://insights.sbomify.com/CVE-2013-4805/): Auth bypass in n/a (critical 9.0)
- [CVE-2013-4804](https://insights.sbomify.com/CVE-2013-4804/): Other in n/a (critical 10.0)
- [CVE-2013-4802](https://insights.sbomify.com/CVE-2013-4802/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4801](https://insights.sbomify.com/CVE-2013-4801/): Code injection in n/a (high 7.5)
- [CVE-2013-4800](https://insights.sbomify.com/CVE-2013-4800/): Code injection in n/a (critical 9.3)
- [CVE-2013-4799](https://insights.sbomify.com/CVE-2013-4799/): Code injection in n/a (high 7.6)
- [CVE-2013-4798](https://insights.sbomify.com/CVE-2013-4798/): Code injection in n/a (critical 10.0)
- [CVE-2013-4797](https://insights.sbomify.com/CVE-2013-4797/): Code injection in n/a (high 7.5)
- [CVE-2013-4796](https://insights.sbomify.com/CVE-2013-4796/): File upload in n/a (high 8.8)
- [CVE-2013-4795](https://insights.sbomify.com/CVE-2013-4795/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4793](https://insights.sbomify.com/CVE-2013-4793/): Auth bypass in n/a (high 7.5)
- [CVE-2013-4792](https://insights.sbomify.com/CVE-2013-4792/): Cross-site request forgery in n/a (medium 5.5)
- [CVE-2013-4791](https://insights.sbomify.com/CVE-2013-4791/): PrestaShop Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2013-4790](https://insights.sbomify.com/CVE-2013-4790/): Information disclosure in n/a (low 3.5)
- [CVE-2013-4789](https://insights.sbomify.com/CVE-2013-4789/): SQL injection in n/a (high 7.5)
- [CVE-2013-4788](https://insights.sbomify.com/CVE-2013-4788/): Memory corruption in n/a (medium 5.1)
- [CVE-2013-4787](https://insights.sbomify.com/CVE-2013-4787/): Security feature bypass in n/a (critical 9.3)
- [CVE-2013-4786](https://insights.sbomify.com/CVE-2013-4786/): Information disclosure in n/a (high 7.5)
- [CVE-2013-4785](https://insights.sbomify.com/CVE-2013-4785/): Missing authorization in n/a (critical 10.0)
- [CVE-2013-4784](https://insights.sbomify.com/CVE-2013-4784/): Auth bypass in n/a (critical 10.0)
- [CVE-2013-4783](https://insights.sbomify.com/CVE-2013-4783/): Auth bypass in n/a (critical 10.0)
- [CVE-2013-4782](https://insights.sbomify.com/CVE-2013-4782/): Auth bypass in n/a (critical 10.0)
- [CVE-2013-4781](https://insights.sbomify.com/CVE-2013-4781/): Command injection in n/a (critical 10.0)
- [CVE-2013-4780](https://insights.sbomify.com/CVE-2013-4780/): Information disclosure in n/a (high 7.8)
- [CVE-2013-4779](https://insights.sbomify.com/CVE-2013-4779/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4778](https://insights.sbomify.com/CVE-2013-4778/): Information disclosure in n/a (high 7.8)
- [CVE-2013-4777](https://insights.sbomify.com/CVE-2013-4777/): Privilege escalation in n/a (medium 6.9)
- [CVE-2013-4776](https://insights.sbomify.com/CVE-2013-4776/): Denial of service in n/a (high 7.8)
- [CVE-2013-4775](https://insights.sbomify.com/CVE-2013-4775/): Information disclosure in n/a (high 7.8)
- [CVE-2013-4772](https://insights.sbomify.com/CVE-2013-4772/): Auth bypass in n/a (critical 9.3)
- [CVE-2013-4770](https://insights.sbomify.com/CVE-2013-4770/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2013-4769](https://insights.sbomify.com/CVE-2013-4769/): Denial of service in n/a (medium 4.3)
- [CVE-2013-4768](https://insights.sbomify.com/CVE-2013-4768/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4767](https://insights.sbomify.com/CVE-2013-4767/): Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors. (critical 10.0)
- [CVE-2013-4766](https://insights.sbomify.com/CVE-2013-4766/): Eucalyptus Unauthorized Access to CC/NC Log Files (medium 4.3)
- [CVE-2013-4764](https://insights.sbomify.com/CVE-2013-4764/): Missing authorization in n/a (medium 4.3)
- [CVE-2013-4763](https://insights.sbomify.com/CVE-2013-4763/): Missing authorization in n/a (medium 4.6)
- [CVE-2013-4762](https://insights.sbomify.com/CVE-2013-4762/): Auth bypass in n/a (medium 5.8)
- [CVE-2013-4761](https://insights.sbomify.com/CVE-2013-4761/): Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service (medium 5.1)
- [CVE-2013-4759](https://insights.sbomify.com/CVE-2013-4759/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4758](https://insights.sbomify.com/CVE-2013-4758/): Use after free in n/a (medium 6.8)
- [CVE-2013-4754](https://insights.sbomify.com/CVE-2013-4754/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4753](https://insights.sbomify.com/CVE-2013-4753/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4752](https://insights.sbomify.com/CVE-2013-4752/): Symfony Host Header Injection vulnerability in the HttpFoundation component (medium 6.1)
- [CVE-2013-4751](https://insights.sbomify.com/CVE-2013-4751/): Symfony collectionCascaded and collectionCascadedDeeply fields security bypass (high 8.1)
- [CVE-2013-4749](https://insights.sbomify.com/CVE-2013-4749/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4748](https://insights.sbomify.com/CVE-2013-4748/): News system (news) extension for TYPO3 vulnerable to SQL Injection (high 7.5)
- [CVE-2013-4747](https://insights.sbomify.com/CVE-2013-4747/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4746](https://insights.sbomify.com/CVE-2013-4746/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4745](https://insights.sbomify.com/CVE-2013-4745/): SQL injection in n/a (high 7.5)
- [CVE-2013-4744](https://insights.sbomify.com/CVE-2013-4744/): PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting (medium 4.3)
- [CVE-2013-4743](https://insights.sbomify.com/CVE-2013-4743/): Static HTTP Server 1.0 has a Local Overflow (critical 9.8)
- [CVE-2013-4742](https://insights.sbomify.com/CVE-2013-4742/): Memory corruption in n/a (high 7.5)
- [CVE-2013-4740](https://insights.sbomify.com/CVE-2013-4740/): Race condition in n/a (medium 6.9)
- [CVE-2013-4739](https://insights.sbomify.com/CVE-2013-4739/): Information disclosure in n/a (medium 4.9)
- [CVE-2013-4738](https://insights.sbomify.com/CVE-2013-4738/): Memory corruption in n/a (high 7.2)
- [CVE-2013-4737](https://insights.sbomify.com/CVE-2013-4737/): Security feature bypass in n/a (critical 9.3)
- [CVE-2013-4736](https://insights.sbomify.com/CVE-2013-4736/): Integer overflow in n/a (high 7.8)
- [CVE-2013-4735](https://insights.sbomify.com/CVE-2013-4735/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2013-4734](https://insights.sbomify.com/CVE-2013-4734/): Weak cryptography in n/a (high 7.3)
- [CVE-2013-4733](https://insights.sbomify.com/CVE-2013-4733/): Information disclosure in n/a (high 7.5)
- [CVE-2013-4732](https://insights.sbomify.com/CVE-2013-4732/): Other in n/a (critical 10.0)
- [CVE-2013-4731](https://insights.sbomify.com/CVE-2013-4731/): Command injection in n/a (critical 9.3)
- [CVE-2013-4730](https://insights.sbomify.com/CVE-2013-4730/): Memory corruption in n/a (critical 10.0)
- [CVE-2013-4729](https://insights.sbomify.com/CVE-2013-4729/): phpMyAdmin Global variables scope injection vulnerability (medium 5.5)
- [CVE-2013-4728](https://insights.sbomify.com/CVE-2013-4728/): Path traversal in n/a (medium 5.0)
- [CVE-2013-4727](https://insights.sbomify.com/CVE-2013-4727/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4726](https://insights.sbomify.com/CVE-2013-4726/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-4725](https://insights.sbomify.com/CVE-2013-4725/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4724](https://insights.sbomify.com/CVE-2013-4724/): Information disclosure in n/a (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/20/