# Vulnerabilities published in 2013


- [CVE-2013-4278](https://insights.sbomify.com/CVE-2013-4278/): OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors (low 3.5)
- [CVE-2013-4277](https://insights.sbomify.com/CVE-2013-4277/): Path traversal in n/a (low 3.3)
- [CVE-2013-4276](https://insights.sbomify.com/CVE-2013-4276/): Memory corruption in n/a (medium 4.3)
- [CVE-2013-4275](https://insights.sbomify.com/CVE-2013-4275/): Cross-site scripting in Zen theme (medium 5.4)
- [CVE-2013-4274](https://insights.sbomify.com/CVE-2013-4274/): Cross-site scripting in n/a (low 2.1)
- [CVE-2013-4273](https://insights.sbomify.com/CVE-2013-4273/): Missing authorization in n/a (medium 4.0)
- [CVE-2013-4272](https://insights.sbomify.com/CVE-2013-4272/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-4271](https://insights.sbomify.com/CVE-2013-4271/): Restlet Arbitrary Java Code Execution via a serialized object (high 7.5)
- [CVE-2013-4270](https://insights.sbomify.com/CVE-2013-4270/): Security feature bypass in n/a (low 3.6)
- [CVE-2013-4267](https://insights.sbomify.com/CVE-2013-4267/): Command injection in Ajaxeplorer (critical 9.8)
- [CVE-2013-4265](https://insights.sbomify.com/CVE-2013-4265/): Null dereference in n/a (critical 10.0)
- [CVE-2013-4264](https://insights.sbomify.com/CVE-2013-4264/): Memory corruption in n/a (medium 4.3)
- [CVE-2013-4263](https://insights.sbomify.com/CVE-2013-4263/): Memory corruption in n/a (high 7.5)
- [CVE-2013-4262](https://insights.sbomify.com/CVE-2013-4262/): Path traversal in n/a (low 2.4)
- [CVE-2013-4261](https://insights.sbomify.com/CVE-2013-4261/): Denial of service in n/a (low 3.5)
- [CVE-2013-4260](https://insights.sbomify.com/CVE-2013-4260/): Ansible Arbitrary File Overwrite Vulnerability (low 3.3)
- [CVE-2013-4259](https://insights.sbomify.com/CVE-2013-4259/): Ansible uses a socket with predictable filename in /tmp (low 1.9)
- [CVE-2013-4258](https://insights.sbomify.com/CVE-2013-4258/): Other in n/a (high 7.5)
- [CVE-2013-4256](https://insights.sbomify.com/CVE-2013-4256/): Memory corruption in n/a (medium 4.6)
- [CVE-2013-4255](https://insights.sbomify.com/CVE-2013-4255/): Denial of service in n/a (low 3.5)
- [CVE-2013-4254](https://insights.sbomify.com/CVE-2013-4254/): Null dereference in n/a (medium 6.9)
- [CVE-2013-4253](https://insights.sbomify.com/CVE-2013-4253/): Hardcoded credentials in Red Hat Openshift (high 7.5)
- [CVE-2013-4251](https://insights.sbomify.com/CVE-2013-4251/): SciPy creates insecure temporary directories (high 7.8)
- [CVE-2013-4250](https://insights.sbomify.com/CVE-2013-4250/): TYPO3 doesn't properly check file extensions (medium 6.5)
- [CVE-2013-4249](https://insights.sbomify.com/CVE-2013-4249/): Django cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget (medium 4.3)
- [CVE-2013-4248](https://insights.sbomify.com/CVE-2013-4248/): Security feature bypass in n/a (medium 4.3)
- [CVE-2013-4247](https://insights.sbomify.com/CVE-2013-4247/): Memory corruption in n/a (high 7.8)
- [CVE-2013-4246](https://insights.sbomify.com/CVE-2013-4246/): Denial of service in n/a (high 8.8)
- [CVE-2013-4245](https://insights.sbomify.com/CVE-2013-4245/): Code injection in Orca (high 7.3)
- [CVE-2013-4244](https://insights.sbomify.com/CVE-2013-4244/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4243](https://insights.sbomify.com/CVE-2013-4243/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4242](https://insights.sbomify.com/CVE-2013-4242/): Information disclosure in n/a (low 1.9)
- [CVE-2013-4241](https://insights.sbomify.com/CVE-2013-4241/): Cross-site scripting in HMS Testimonials (medium 6.1)
- [CVE-2013-4240](https://insights.sbomify.com/CVE-2013-4240/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-4239](https://insights.sbomify.com/CVE-2013-4239/): Memory corruption in n/a (medium 4.0)
- [CVE-2013-4238](https://insights.sbomify.com/CVE-2013-4238/): Security feature bypass in n/a (medium 4.3)
- [CVE-2013-4237](https://insights.sbomify.com/CVE-2013-4237/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4236](https://insights.sbomify.com/CVE-2013-4236/): Denial of service in n/a (low 2.7)
- [CVE-2013-4235](https://insights.sbomify.com/CVE-2013-4235/): Race condition in shadow (medium 4.7)
- [CVE-2013-4234](https://insights.sbomify.com/CVE-2013-4234/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4233](https://insights.sbomify.com/CVE-2013-4233/): Integer overflow in n/a (medium 6.8)
- [CVE-2013-4232](https://insights.sbomify.com/CVE-2013-4232/): Use after free in n/a (medium 6.8)
- [CVE-2013-4231](https://insights.sbomify.com/CVE-2013-4231/): Memory corruption in n/a (medium 4.3)
- [CVE-2013-4230](https://insights.sbomify.com/CVE-2013-4230/): Missing authorization in n/a (medium 6.0)
- [CVE-2013-4229](https://insights.sbomify.com/CVE-2013-4229/): Cross-site scripting in n/a (low 2.1)
- [CVE-2013-4228](https://insights.sbomify.com/CVE-2013-4228/): Missing authorization in Organic Groups (OG) module (medium 4.3)
- [CVE-2013-4227](https://insights.sbomify.com/CVE-2013-4227/): Cross-site request forgery in Persona (high 8.8)
- [CVE-2013-4226](https://insights.sbomify.com/CVE-2013-4226/): Missing authorization in Authenticated User Page Caching (Authcache) module (medium 6.5)
- [CVE-2013-4225](https://insights.sbomify.com/CVE-2013-4225/): Code injection in RESTful Web Services (high 8.8)
- [CVE-2013-4223](https://insights.sbomify.com/CVE-2013-4223/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4222](https://insights.sbomify.com/CVE-2013-4222/): Auth bypass in n/a (medium 6.5)
- [CVE-2013-4221](https://insights.sbomify.com/CVE-2013-4221/): Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML (high 7.5)
- [CVE-2013-4220](https://insights.sbomify.com/CVE-2013-4220/): Denial of service in n/a (medium 4.9)
- [CVE-2013-4219](https://insights.sbomify.com/CVE-2013-4219/): Integer overflow in n/a (high 7.5)
- [CVE-2013-4218](https://insights.sbomify.com/CVE-2013-4218/): The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Serv (low 2.1)
- [CVE-2013-4217](https://insights.sbomify.com/CVE-2013-4217/): Information disclosure in n/a (low 2.1)
- [CVE-2013-4216](https://insights.sbomify.com/CVE-2013-4216/): Misconfiguration in n/a (low 2.1)
- [CVE-2013-4215](https://insights.sbomify.com/CVE-2013-4215/): Path traversal in n/a (medium 4.4)
- [CVE-2013-4214](https://insights.sbomify.com/CVE-2013-4214/): Path traversal in n/a (medium 6.3)
- [CVE-2013-4213](https://insights.sbomify.com/CVE-2013-4213/): Auth bypass in n/a (medium 6.4)
- [CVE-2013-4212](https://insights.sbomify.com/CVE-2013-4212/): Code injection in n/a (medium 6.8)
- [CVE-2013-4211](https://insights.sbomify.com/CVE-2013-4211/): Code injection in Ad Server (critical 9.8)
- [CVE-2013-4210](https://insights.sbomify.com/CVE-2013-4210/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4209](https://insights.sbomify.com/CVE-2013-4209/): Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums. (low 3.3)
- [CVE-2013-4208](https://insights.sbomify.com/CVE-2013-4208/): Information disclosure in n/a (low 2.1)
- [CVE-2013-4207](https://insights.sbomify.com/CVE-2013-4207/): Memory corruption in n/a (medium 4.3)
- [CVE-2013-4206](https://insights.sbomify.com/CVE-2013-4206/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-4205](https://insights.sbomify.com/CVE-2013-4205/): Denial of service in n/a (medium 4.7)
- [CVE-2013-4204](https://insights.sbomify.com/CVE-2013-4204/): Improper Neutralization of Input During Web Page Generation in Google Web Toolkit (medium 4.3)
- [CVE-2013-4203](https://insights.sbomify.com/CVE-2013-4203/): rgpg Code Injection vulnerability (high 7.5)
- [CVE-2013-4202](https://insights.sbomify.com/CVE-2013-4202/): OpenStack Cinder Denial of Service using XML entities (medium 4.3)
- [CVE-2013-4201](https://insights.sbomify.com/CVE-2013-4201/): Missing authorization in n/a (medium 4.3)
- [CVE-2013-4200](https://insights.sbomify.com/CVE-2013-4200/): Plone Open Redirection vulnerability via next parameter (medium 5.8)
- [CVE-2013-4199](https://insights.sbomify.com/CVE-2013-4199/): Plone Denial of Service vulnerability via decompressing large zip archives (low 3.5)
- [CVE-2013-4198](https://insights.sbomify.com/CVE-2013-4198/): Plone's authenticated users able to alter their password despite of policy definition (medium 4.0)
- [CVE-2013-4197](https://insights.sbomify.com/CVE-2013-4197/): Plone Improper Access Control Vulnerability (medium 5.5)
- [CVE-2013-4196](https://insights.sbomify.com/CVE-2013-4196/): Plone is vulnerable to information exposure via the object manager implementation (medium 5.0)
- [CVE-2013-4195](https://insights.sbomify.com/CVE-2013-4195/): Plone Multiple open redirect vulnerabilities (medium 5.8)
- [CVE-2013-4194](https://insights.sbomify.com/CVE-2013-4194/): Plone is vulnerable to File System Path Exposure (medium 4.3)
- [CVE-2013-4193](https://insights.sbomify.com/CVE-2013-4193/): Plone Unrestricted Filed Manipulation vulnerability via content edit forms (medium 4.3)
- [CVE-2013-4192](https://insights.sbomify.com/CVE-2013-4192/): Plone is vulnerable to email spoofing (medium 4.0)
- [CVE-2013-4191](https://insights.sbomify.com/CVE-2013-4191/): Plone is vulnerable to Information Exposure when generating zip archives (medium 5.8)
- [CVE-2013-4190](https://insights.sbomify.com/CVE-2013-4190/): Plone vulnerable to cross-site scripting (medium 4.3)
- [CVE-2013-4189](https://insights.sbomify.com/CVE-2013-4189/): Plone Privilege escalation due improper authorization (medium 6.5)
- [CVE-2013-4188](https://insights.sbomify.com/CVE-2013-4188/): Plone Authenticated Denial of Service vulnerability (medium 4.3)
- [CVE-2013-4187](https://insights.sbomify.com/CVE-2013-4187/): Information disclosure in Flippy (medium 6.5)
- [CVE-2013-4185](https://insights.sbomify.com/CVE-2013-4185/): OpenStack Nova Denial of Service in network source security groups (medium 4.0)
- [CVE-2013-4184](https://insights.sbomify.com/CVE-2013-4184/): Path traversal in libdata-uuid-perl (medium 5.5)
- [CVE-2013-4183](https://insights.sbomify.com/CVE-2013-4183/): OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots (low 2.1)
- [CVE-2013-4182](https://insights.sbomify.com/CVE-2013-4182/): Missing authorization in n/a (high 7.5)
- [CVE-2013-4181](https://insights.sbomify.com/CVE-2013-4181/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4180](https://insights.sbomify.com/CVE-2013-4180/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4179](https://insights.sbomify.com/CVE-2013-4179/): OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack (medium 4.3)
- [CVE-2013-4178](https://insights.sbomify.com/CVE-2013-4178/): Auth bypass in n/a (medium 5.0)
- [CVE-2013-4177](https://insights.sbomify.com/CVE-2013-4177/): Auth bypass in n/a (medium 5.0)
- [CVE-2013-4176](https://insights.sbomify.com/CVE-2013-4176/): Information disclosure in mysecureshell (medium 5.5)
- [CVE-2013-4175](https://insights.sbomify.com/CVE-2013-4175/): Denial of service in MySecureShell (medium 5.5)
- [CVE-2013-4174](https://insights.sbomify.com/CVE-2013-4174/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4173](https://insights.sbomify.com/CVE-2013-4173/): Path traversal in n/a (medium 5.0)
- [CVE-2013-4172](https://insights.sbomify.com/CVE-2013-4172/): Code injection in n/a (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/25/