# Vulnerabilities published in 2013 - [CVE-2013-4387](https://insights.sbomify.com/CVE-2013-4387/): Memory corruption in n/a (medium 6.1) - [CVE-2013-4386](https://insights.sbomify.com/CVE-2013-4386/): SQL injection in n/a (high 7.5) - [CVE-2013-4385](https://insights.sbomify.com/CVE-2013-4385/): Memory corruption in n/a (high 7.5) - [CVE-2013-4384](https://insights.sbomify.com/CVE-2013-4384/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4383](https://insights.sbomify.com/CVE-2013-4383/): Cross-site scripting in n/a (low 2.1) - [CVE-2013-4380](https://insights.sbomify.com/CVE-2013-4380/): Cross-site scripting in n/a (low 2.1) - [CVE-2013-4379](https://insights.sbomify.com/CVE-2013-4379/): Missing authorization in n/a (medium 6.4) - [CVE-2013-4378](https://insights.sbomify.com/CVE-2013-4378/): Improper Neutralization of Input During Web Page Generation in JavaMelody (medium 4.3) - [CVE-2013-4377](https://insights.sbomify.com/CVE-2013-4377/): Use after free in n/a (low 2.3) - [CVE-2013-4376](https://insights.sbomify.com/CVE-2013-4376/): Code injection in n/a (high 7.5) - [CVE-2013-4375](https://insights.sbomify.com/CVE-2013-4375/): Denial of service in n/a (low 2.7) - [CVE-2013-4374](https://insights.sbomify.com/CVE-2013-4374/): Path traversal in RHQ Mongo DB Drift Server (high 7.1) - [CVE-2013-4373](https://insights.sbomify.com/CVE-2013-4373/): Path traversal in n/a (low 3.2) - [CVE-2013-4372](https://insights.sbomify.com/CVE-2013-4372/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4371](https://insights.sbomify.com/CVE-2013-4371/): Use after free in n/a (medium 4.4) - [CVE-2013-4370](https://insights.sbomify.com/CVE-2013-4370/): Use after free in n/a (medium 4.6) - [CVE-2013-4369](https://insights.sbomify.com/CVE-2013-4369/): Null dereference in n/a (low 1.9) - [CVE-2013-4368](https://insights.sbomify.com/CVE-2013-4368/): Information disclosure in n/a (low 1.9) - [CVE-2013-4367](https://insights.sbomify.com/CVE-2013-4367/): Misconfiguration in ovirt-engine (high 7.8) - [CVE-2013-4366](https://insights.sbomify.com/CVE-2013-4366/): Hostname verification in Apache HttpClient 4.3 was disabled by default (critical 9.8) - [CVE-2013-4365](https://insights.sbomify.com/CVE-2013-4365/): Memory corruption in n/a (high 7.5) - [CVE-2013-4364](https://insights.sbomify.com/CVE-2013-4364/): Path traversal in n/a (high 7.8) - [CVE-2013-4363](https://insights.sbomify.com/CVE-2013-4363/): RubyGems Regular Expression Denial of Service (medium 4.3) - [CVE-2013-4362](https://insights.sbomify.com/CVE-2013-4362/): Privilege escalation in n/a (high 7.2) - [CVE-2013-4361](https://insights.sbomify.com/CVE-2013-4361/): Information disclosure in n/a (low 2.1) - [CVE-2013-4359](https://insights.sbomify.com/CVE-2013-4359/): Integer overflow in n/a (medium 5.0) - [CVE-2013-4358](https://insights.sbomify.com/CVE-2013-4358/): Denial of service in n/a (medium 5.0) - [CVE-2013-4357](https://insights.sbomify.com/CVE-2013-4357/): Denial of service in eglibc (high 7.5) - [CVE-2013-4356](https://insights.sbomify.com/CVE-2013-4356/): Memory corruption in n/a (medium 5.4) - [CVE-2013-4355](https://insights.sbomify.com/CVE-2013-4355/): Information disclosure in n/a (low 1.5) - [CVE-2013-4354](https://insights.sbomify.com/CVE-2013-4354/): Missing authorization in n/a (low 2.1) - [CVE-2013-4353](https://insights.sbomify.com/CVE-2013-4353/): Null dereference in n/a (medium 4.3) - [CVE-2013-4352](https://insights.sbomify.com/CVE-2013-4352/): Null dereference in n/a (medium 4.3) - [CVE-2013-4351](https://insights.sbomify.com/CVE-2013-4351/): Security feature bypass in n/a (medium 5.8) - [CVE-2013-4350](https://insights.sbomify.com/CVE-2013-4350/): Information disclosure in n/a (medium 5.0) - [CVE-2013-4348](https://insights.sbomify.com/CVE-2013-4348/): Denial of service in n/a (high 7.1) - [CVE-2013-4347](https://insights.sbomify.com/CVE-2013-4347/): SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces (medium 5.8) - [CVE-2013-4346](https://insights.sbomify.com/CVE-2013-4346/): SimpleGeo python-oauth2 does not check the nonce allowing replay attacks (medium 4.3) - [CVE-2013-4345](https://insights.sbomify.com/CVE-2013-4345/): Weak cryptography in n/a (medium 5.8) - [CVE-2013-4344](https://insights.sbomify.com/CVE-2013-4344/): Memory corruption in n/a (high 7.2) - [CVE-2013-4343](https://insights.sbomify.com/CVE-2013-4343/): Use after free in n/a (medium 6.9) - [CVE-2013-4342](https://insights.sbomify.com/CVE-2013-4342/): Privilege escalation in n/a (high 7.6) - [CVE-2013-4341](https://insights.sbomify.com/CVE-2013-4341/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4340](https://insights.sbomify.com/CVE-2013-4340/): Privilege escalation in n/a (low 3.5) - [CVE-2013-4339](https://insights.sbomify.com/CVE-2013-4339/): Open redirect in n/a (high 7.5) - [CVE-2013-4338](https://insights.sbomify.com/CVE-2013-4338/): Deserialization in n/a (high 7.5) - [CVE-2013-4335](https://insights.sbomify.com/CVE-2013-4335/): XML external entity in opOpenSocialPlugin (critical 9.8) - [CVE-2013-4334](https://insights.sbomify.com/CVE-2013-4334/): XML external entity in opWebAPIPlugin (critical 9.8) - [CVE-2013-4333](https://insights.sbomify.com/CVE-2013-4333/): XML external entity in OpenPNE (critical 9.1) - [CVE-2013-4332](https://insights.sbomify.com/CVE-2013-4332/): Integer overflow in n/a (medium 4.3) - [CVE-2013-4331](https://insights.sbomify.com/CVE-2013-4331/): Information disclosure in n/a (low 2.1) - [CVE-2013-4330](https://insights.sbomify.com/CVE-2013-4330/): Improper Control of Generation of Code in Apache Camel (medium 6.8) - [CVE-2013-4329](https://insights.sbomify.com/CVE-2013-4329/): Privilege escalation in n/a (medium 6.5) - [CVE-2013-4327](https://insights.sbomify.com/CVE-2013-4327/): Race condition in n/a (medium 6.9) - [CVE-2013-4326](https://insights.sbomify.com/CVE-2013-4326/): Race condition in n/a (medium 4.6) - [CVE-2013-4325](https://insights.sbomify.com/CVE-2013-4325/): Race condition in n/a (medium 6.9) - [CVE-2013-4324](https://insights.sbomify.com/CVE-2013-4324/): Race condition in n/a (medium 4.6) - [CVE-2013-4322](https://insights.sbomify.com/CVE-2013-4322/): Apache Tomcat Denial of Service vulnerability (medium 4.3) - [CVE-2013-4321](https://insights.sbomify.com/CVE-2013-4321/): TYPO3 vulnerable to remote authenticated arbitrary code execution (medium 6.5) - [CVE-2013-4320](https://insights.sbomify.com/CVE-2013-4320/): TYPO3 Improper Access Management in the File Abstraction Layer (medium 5.5) - [CVE-2013-4319](https://insights.sbomify.com/CVE-2013-4319/): Missing authorization in n/a (critical 9.0) - [CVE-2013-4318](https://insights.sbomify.com/CVE-2013-4318/): Features file injection vulnerability (medium 5.4) - [CVE-2013-4317](https://insights.sbomify.com/CVE-2013-4317/): Information disclosure in Apache CloudStack (medium 4.3) - [CVE-2013-4316](https://insights.sbomify.com/CVE-2013-4316/): Code injection in Apache Struts (critical 10.0) - [CVE-2013-4315](https://insights.sbomify.com/CVE-2013-4315/): Django Directory Traversal via ssi template tag (medium 5.0) - [CVE-2013-4314](https://insights.sbomify.com/CVE-2013-4314/): PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name (medium 4.3) - [CVE-2013-4313](https://insights.sbomify.com/CVE-2013-4313/): SQL injection in n/a (high 7.5) - [CVE-2013-4312](https://insights.sbomify.com/CVE-2013-4312/): Denial of service in n/a (medium 6.2) - [CVE-2013-4311](https://insights.sbomify.com/CVE-2013-4311/): Race condition in n/a (medium 4.6) - [CVE-2013-4310](https://insights.sbomify.com/CVE-2013-4310/): Apache Struts2 Broken Access Control Vulnerability (medium 5.8) - [CVE-2013-4308](https://insights.sbomify.com/CVE-2013-4308/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4307](https://insights.sbomify.com/CVE-2013-4307/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4306](https://insights.sbomify.com/CVE-2013-4306/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-4305](https://insights.sbomify.com/CVE-2013-4305/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-4304](https://insights.sbomify.com/CVE-2013-4304/): Auth bypass in n/a (high 7.5) - [CVE-2013-4303](https://insights.sbomify.com/CVE-2013-4303/): Cross-site scripting in MediaWiki (medium 6.1) - [CVE-2013-4302](https://insights.sbomify.com/CVE-2013-4302/): Cross-site request forgery in n/a (medium 5.0) - [CVE-2013-4301](https://insights.sbomify.com/CVE-2013-4301/): Information disclosure in n/a (medium 5.0) - [CVE-2013-4300](https://insights.sbomify.com/CVE-2013-4300/): Privilege escalation in n/a (high 7.2) - [CVE-2013-4299](https://insights.sbomify.com/CVE-2013-4299/): Information disclosure in n/a (medium 6.0) - [CVE-2013-4298](https://insights.sbomify.com/CVE-2013-4298/): Memory corruption in n/a (medium 4.3) - [CVE-2013-4297](https://insights.sbomify.com/CVE-2013-4297/): Null dereference in n/a (medium 4.0) - [CVE-2013-4296](https://insights.sbomify.com/CVE-2013-4296/): Null dereference in n/a (medium 4.0) - [CVE-2013-4295](https://insights.sbomify.com/CVE-2013-4295/): Apache Shindig PHP Sensitive Information Disclosure (medium 5.0) - [CVE-2013-4294](https://insights.sbomify.com/CVE-2013-4294/): OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token (medium 5.0) - [CVE-2013-4293](https://insights.sbomify.com/CVE-2013-4293/): Information disclosure in n/a (low 2.1) - [CVE-2013-4292](https://insights.sbomify.com/CVE-2013-4292/): Denial of service in n/a (low 2.1) - [CVE-2013-4291](https://insights.sbomify.com/CVE-2013-4291/): Privilege escalation in n/a (medium 6.9) - [CVE-2013-4290](https://insights.sbomify.com/CVE-2013-4290/): Memory corruption in n/a (critical 10.0) - [CVE-2013-4289](https://insights.sbomify.com/CVE-2013-4289/): Integer overflow in n/a (critical 10.0) - [CVE-2013-4288](https://insights.sbomify.com/CVE-2013-4288/): Race condition in n/a (high 7.2) - [CVE-2013-4287](https://insights.sbomify.com/CVE-2013-4287/): RubyGems Regular Expression Denial of Service vulnerability (medium 4.3) - [CVE-2013-4286](https://insights.sbomify.com/CVE-2013-4286/): Apache Tomcat is vulnerable to HTTP request-smuggling (medium 5.8) - [CVE-2013-4285](https://insights.sbomify.com/CVE-2013-4285/): Information disclosure in n/a (low 2.1) - [CVE-2013-4284](https://insights.sbomify.com/CVE-2013-4284/): Denial of service in n/a (medium 5.0) - [CVE-2013-4283](https://insights.sbomify.com/CVE-2013-4283/): Denial of service in n/a (medium 5.0) - [CVE-2013-4282](https://insights.sbomify.com/CVE-2013-4282/): Memory corruption in n/a (medium 5.0) - [CVE-2013-4281](https://insights.sbomify.com/CVE-2013-4281/): Information disclosure in Red Hat Openshift (medium 5.5) - [CVE-2013-4280](https://insights.sbomify.com/CVE-2013-4280/): Other in vdsm (medium 5.5) - [CVE-2013-4279](https://insights.sbomify.com/CVE-2013-4279/): Information disclosure in n/a (medium 5.0) --- From sbomify Insights: https://insights.sbomify.com/years/2013/page/24/