# Vulnerabilities published in 2013


- [CVE-2013-4496](https://insights.sbomify.com/CVE-2013-4496/): Security feature bypass in n/a (medium 5.0)
- [CVE-2013-4495](https://insights.sbomify.com/CVE-2013-4495/): Command injection in n/a (critical 10.0)
- [CVE-2013-4494](https://insights.sbomify.com/CVE-2013-4494/): Denial of service in n/a (medium 5.2)
- [CVE-2013-4492](https://insights.sbomify.com/CVE-2013-4492/): i18n gem Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2013-4491](https://insights.sbomify.com/CVE-2013-4491/): actionpack vulnerable to Cross-site Scripting (medium 4.3)
- [CVE-2013-4490](https://insights.sbomify.com/CVE-2013-4490/): Command injection in n/a (medium 6.5)
- [CVE-2013-4489](https://insights.sbomify.com/CVE-2013-4489/): GitLab Grit Gem for Ruby contains a flaw allowing arbitrary commands to be executed (medium 6.5)
- [CVE-2013-4488](https://insights.sbomify.com/CVE-2013-4488/): Security feature bypass in n/a (medium 4.3)
- [CVE-2013-4487](https://insights.sbomify.com/CVE-2013-4487/): Integer overflow in n/a (medium 5.0)
- [CVE-2013-4486](https://insights.sbomify.com/CVE-2013-4486/): Code injection in Zanata (critical 9.8)
- [CVE-2013-4485](https://insights.sbomify.com/CVE-2013-4485/): Denial of service in n/a (medium 4.0)
- [CVE-2013-4484](https://insights.sbomify.com/CVE-2013-4484/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4483](https://insights.sbomify.com/CVE-2013-4483/): Denial of service in n/a (medium 4.9)
- [CVE-2013-4482](https://insights.sbomify.com/CVE-2013-4482/): Path traversal in n/a (medium 6.2)
- [CVE-2013-4481](https://insights.sbomify.com/CVE-2013-4481/): Race condition in n/a (low 1.9)
- [CVE-2013-4480](https://insights.sbomify.com/CVE-2013-4480/): Missing authorization in n/a (high 7.5)
- [CVE-2013-4479](https://insights.sbomify.com/CVE-2013-4479/): Sup Code Injection vulnerability (medium 6.8)
- [CVE-2013-4478](https://insights.sbomify.com/CVE-2013-4478/): Sup Code Injection vulnerability (medium 6.8)
- [CVE-2013-4477](https://insights.sbomify.com/CVE-2013-4477/): OpenStack Identity Keystone Privilege Escalation vulnerability (low 3.3)
- [CVE-2013-4476](https://insights.sbomify.com/CVE-2013-4476/): Information disclosure in n/a (low 1.2)
- [CVE-2013-4475](https://insights.sbomify.com/CVE-2013-4475/): Security feature bypass in n/a (medium 4.0)
- [CVE-2013-4474](https://insights.sbomify.com/CVE-2013-4474/): Other in n/a (medium 5.0)
- [CVE-2013-4473](https://insights.sbomify.com/CVE-2013-4473/): Memory corruption in n/a (high 7.5)
- [CVE-2013-4472](https://insights.sbomify.com/CVE-2013-4472/): Path traversal in n/a (low 3.3)
- [CVE-2013-4471](https://insights.sbomify.com/CVE-2013-4471/): Auth bypass in n/a (medium 5.5)
- [CVE-2013-4470](https://insights.sbomify.com/CVE-2013-4470/): Memory corruption in n/a (medium 6.9)
- [CVE-2013-4469](https://insights.sbomify.com/CVE-2013-4469/): OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image (low 1.9)
- [CVE-2013-4468](https://insights.sbomify.com/CVE-2013-4468/): Command injection in n/a (medium 6.5)
- [CVE-2013-4467](https://insights.sbomify.com/CVE-2013-4467/): SQL injection in n/a (medium 6.5)
- [CVE-2013-4466](https://insights.sbomify.com/CVE-2013-4466/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-4465](https://insights.sbomify.com/CVE-2013-4465/): File upload in n/a (medium 4.6)
- [CVE-2013-4463](https://insights.sbomify.com/CVE-2013-4463/): OpenStack Nova denial of service through compressed disk images (low 2.1)
- [CVE-2013-4462](https://insights.sbomify.com/CVE-2013-4462/): Auth bypass in Portable phpMyAdmin Plugin (critical 9.1)
- [CVE-2013-4461](https://insights.sbomify.com/CVE-2013-4461/): SQL injection in n/a (high 7.5)
- [CVE-2013-4460](https://insights.sbomify.com/CVE-2013-4460/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4459](https://insights.sbomify.com/CVE-2013-4459/): Security feature bypass in n/a (low 3.3)
- [CVE-2013-4458](https://insights.sbomify.com/CVE-2013-4458/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-4457](https://insights.sbomify.com/CVE-2013-4457/): Cocaine Gem OS Command Injection vulnerability (medium 6.8)
- [CVE-2013-4455](https://insights.sbomify.com/CVE-2013-4455/): Information disclosure in n/a (low 2.1)
- [CVE-2013-4454](https://insights.sbomify.com/CVE-2013-4454/): Auth bypass in Portable phpMyAdmin Plugin (critical 9.1)
- [CVE-2013-4453](https://insights.sbomify.com/CVE-2013-4453/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4452](https://insights.sbomify.com/CVE-2013-4452/): Information disclosure in n/a (low 2.1)
- [CVE-2013-4451](https://insights.sbomify.com/CVE-2013-4451/): Misconfiguration in n/a (critical 9.8)
- [CVE-2013-4450](https://insights.sbomify.com/CVE-2013-4450/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4449](https://insights.sbomify.com/CVE-2013-4449/): Use after free in n/a (medium 4.3)
- [CVE-2013-4447](https://insights.sbomify.com/CVE-2013-4447/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4446](https://insights.sbomify.com/CVE-2013-4446/): Code injection in n/a (medium 6.8)
- [CVE-2013-4445](https://insights.sbomify.com/CVE-2013-4445/): Auth bypass in n/a (medium 4.9)
- [CVE-2013-4444](https://insights.sbomify.com/CVE-2013-4444/): Apache Tomcat Unrestricted file upload vulnerability (medium 6.8)
- [CVE-2013-4442](https://insights.sbomify.com/CVE-2013-4442/): Weak cryptography in n/a (medium 5.0)
- [CVE-2013-4441](https://insights.sbomify.com/CVE-2013-4441/): Weak cryptography in Pwgen (critical 9.8)
- [CVE-2013-4440](https://insights.sbomify.com/CVE-2013-4440/): Weak cryptography in n/a (medium 5.0)
- [CVE-2013-4439](https://insights.sbomify.com/CVE-2013-4439/): Minion identity not validated in saltstack (medium 4.9)
- [CVE-2013-4438](https://insights.sbomify.com/CVE-2013-4438/): Code injection in n/a (high 7.5)
- [CVE-2013-4437](https://insights.sbomify.com/CVE-2013-4437/): SaltStack insecurely uses /tmp (critical 10.0)
- [CVE-2013-4436](https://insights.sbomify.com/CVE-2013-4436/): SaltStack MITM SSH attack in salt-ssh (critical 9.3)
- [CVE-2013-4435](https://insights.sbomify.com/CVE-2013-4435/): Salt has insufficient argument validation in several modules (medium 6.0)
- [CVE-2013-4434](https://insights.sbomify.com/CVE-2013-4434/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4433](https://insights.sbomify.com/CVE-2013-4433/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4432](https://insights.sbomify.com/CVE-2013-4432/): Missing authorization in n/a (medium 4.0)
- [CVE-2013-4431](https://insights.sbomify.com/CVE-2013-4431/): Missing authorization in n/a (medium 5.5)
- [CVE-2013-4430](https://insights.sbomify.com/CVE-2013-4430/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4429](https://insights.sbomify.com/CVE-2013-4429/): Missing authorization in n/a (medium 4.0)
- [CVE-2013-4428](https://insights.sbomify.com/CVE-2013-4428/): Missing authorization in n/a (low 3.5)
- [CVE-2013-4427](https://insights.sbomify.com/CVE-2013-4427/): Security feature bypass in n/a (low 2.1)
- [CVE-2013-4426](https://insights.sbomify.com/CVE-2013-4426/): Auth bypass in n/a (low 3.6)
- [CVE-2013-4425](https://insights.sbomify.com/CVE-2013-4425/): Hardcoded credentials in n/a (low 1.9)
- [CVE-2013-4424](https://insights.sbomify.com/CVE-2013-4424/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4423](https://insights.sbomify.com/CVE-2013-4423/): Information disclosure in CloudForms (medium 5.5)
- [CVE-2013-4422](https://insights.sbomify.com/CVE-2013-4422/): SQL injection in n/a (medium 6.8)
- [CVE-2013-4421](https://insights.sbomify.com/CVE-2013-4421/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4420](https://insights.sbomify.com/CVE-2013-4420/): Path traversal in n/a (medium 5.8)
- [CVE-2013-4419](https://insights.sbomify.com/CVE-2013-4419/): Race condition in n/a (medium 6.8)
- [CVE-2013-4416](https://insights.sbomify.com/CVE-2013-4416/): Denial of service in n/a (medium 5.2)
- [CVE-2013-4415](https://insights.sbomify.com/CVE-2013-4415/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4414](https://insights.sbomify.com/CVE-2013-4414/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4413](https://insights.sbomify.com/CVE-2013-4413/): Wicked gem contains Path traversal vulnerability (medium 5.0)
- [CVE-2013-4412](https://insights.sbomify.com/CVE-2013-4412/): Null dereference in slim (high 7.5)
- [CVE-2013-4411](https://insights.sbomify.com/CVE-2013-4411/): Missing authorization in Review Board (medium 4.3)
- [CVE-2013-4410](https://insights.sbomify.com/CVE-2013-4410/): Missing authorization in ReviewBoard (high 7.5)
- [CVE-2013-4409](https://insights.sbomify.com/CVE-2013-4409/): ReviewBoard and Djblets library are vulnerable to code execution (critical 9.8)
- [CVE-2013-4408](https://insights.sbomify.com/CVE-2013-4408/): Memory corruption in n/a (high 8.3)
- [CVE-2013-4407](https://insights.sbomify.com/CVE-2013-4407/): Path traversal in n/a (medium 6.8)
- [CVE-2013-4406](https://insights.sbomify.com/CVE-2013-4406/): Missing authorization in n/a (medium 5.0)
- [CVE-2013-4405](https://insights.sbomify.com/CVE-2013-4405/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-4404](https://insights.sbomify.com/CVE-2013-4404/): Missing authorization in n/a (medium 6.5)
- [CVE-2013-4402](https://insights.sbomify.com/CVE-2013-4402/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4401](https://insights.sbomify.com/CVE-2013-4401/): Missing authorization in n/a (high 8.5)
- [CVE-2013-4400](https://insights.sbomify.com/CVE-2013-4400/): Privilege escalation in n/a (high 7.2)
- [CVE-2013-4399](https://insights.sbomify.com/CVE-2013-4399/): Use after free in n/a (medium 4.3)
- [CVE-2013-4397](https://insights.sbomify.com/CVE-2013-4397/): Integer overflow in n/a (medium 6.8)
- [CVE-2013-4396](https://insights.sbomify.com/CVE-2013-4396/): Use after free in n/a (medium 6.5)
- [CVE-2013-4395](https://insights.sbomify.com/CVE-2013-4395/): Cross-site scripting in SMF (medium 6.1)
- [CVE-2013-4394](https://insights.sbomify.com/CVE-2013-4394/): Privilege escalation in n/a (medium 5.9)
- [CVE-2013-4393](https://insights.sbomify.com/CVE-2013-4393/): Denial of service in n/a (low 2.1)
- [CVE-2013-4392](https://insights.sbomify.com/CVE-2013-4392/): Path traversal in n/a (medium 5.0)
- [CVE-2013-4391](https://insights.sbomify.com/CVE-2013-4391/): Integer overflow in n/a (high 7.5)
- [CVE-2013-4390](https://insights.sbomify.com/CVE-2013-4390/): Apache Sling Auth Core bundle vulnerable to Open Redirection (medium 5.8)
- [CVE-2013-4389](https://insights.sbomify.com/CVE-2013-4389/): actionmailer email address processing causes Denial of service (medium 4.3)
- [CVE-2013-4388](https://insights.sbomify.com/CVE-2013-4388/): Memory corruption in n/a (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/23/