# Vulnerabilities published in 2013


- [CVE-2013-3724](https://insights.sbomify.com/CVE-2013-3724/): Denial of service in n/a (medium 5.0)
- [CVE-2013-3722](https://insights.sbomify.com/CVE-2013-3722/): Denial of service in n/a (high 7.5)
- [CVE-2013-3721](https://insights.sbomify.com/CVE-2013-3721/): SQL injection in n/a (high 7.5)
- [CVE-2013-3720](https://insights.sbomify.com/CVE-2013-3720/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-3719](https://insights.sbomify.com/CVE-2013-3719/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3718](https://insights.sbomify.com/CVE-2013-3718/): Null dereference in n/a (medium 5.5)
- [CVE-2013-3713](https://insights.sbomify.com/CVE-2013-3713/): The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing fr (medium 4.4)
- [CVE-2013-3712](https://insights.sbomify.com/CVE-2013-3712/): Weak cryptography in n/a (critical 10.0)
- [CVE-2013-3710](https://insights.sbomify.com/CVE-2013-3710/): Weak cryptography in n/a (medium 4.3)
- [CVE-2013-3709](https://insights.sbomify.com/CVE-2013-3709/): Information disclosure in n/a (high 7.2)
- [CVE-2013-3708](https://insights.sbomify.com/CVE-2013-3708/): Denial of service in n/a (medium 5.0)
- [CVE-2013-3707](https://insights.sbomify.com/CVE-2013-3707/): Denial of service in n/a (medium 4.3)
- [CVE-2013-3706](https://insights.sbomify.com/CVE-2013-3706/): Path traversal in n/a (medium 5.0)
- [CVE-2013-3705](https://insights.sbomify.com/CVE-2013-3705/): Denial of service in n/a (medium 4.9)
- [CVE-2013-3704](https://insights.sbomify.com/CVE-2013-3704/): Security feature bypass in n/a (medium 4.3)
- [CVE-2013-3703](https://insights.sbomify.com/CVE-2013-3703/): No write permission check in change_role command (high 8.8)
- [CVE-2013-3697](https://insights.sbomify.com/CVE-2013-3697/): Integer overflow in n/a (high 7.2)
- [CVE-2013-3694](https://insights.sbomify.com/CVE-2013-3694/): Missing authorization in n/a (medium 6.8)
- [CVE-2013-3693](https://insights.sbomify.com/CVE-2013-3693/): Missing authorization in n/a (high 7.9)
- [CVE-2013-3692](https://insights.sbomify.com/CVE-2013-3692/): Security feature bypass in n/a (medium 6.2)
- [CVE-2013-3691](https://insights.sbomify.com/CVE-2013-3691/): Denial of service in n/a (high 7.5)
- [CVE-2013-3690](https://insights.sbomify.com/CVE-2013-3690/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-3689](https://insights.sbomify.com/CVE-2013-3689/): Information disclosure in n/a (high 7.8)
- [CVE-2013-3688](https://insights.sbomify.com/CVE-2013-3688/): Missing authorization in n/a (high 7.1)
- [CVE-2013-3687](https://insights.sbomify.com/CVE-2013-3687/): Information disclosure in n/a (high 7.8)
- [CVE-2013-3686](https://insights.sbomify.com/CVE-2013-3686/): Information disclosure in n/a (critical 10.0)
- [CVE-2013-3685](https://insights.sbomify.com/CVE-2013-3685/): Race condition in n/a (high 7.0)
- [CVE-2013-3684](https://insights.sbomify.com/CVE-2013-3684/): File upload in n/a (critical 9.8)
- [CVE-2013-3678](https://insights.sbomify.com/CVE-2013-3678/): Privilege escalation in n/a (critical 9.0)
- [CVE-2013-3675](https://insights.sbomify.com/CVE-2013-3675/): Integer overflow in n/a (medium 4.3)
- [CVE-2013-3674](https://insights.sbomify.com/CVE-2013-3674/): Denial of service in n/a (medium 4.3)
- [CVE-2013-3673](https://insights.sbomify.com/CVE-2013-3673/): Memory corruption in n/a (medium 4.3)
- [CVE-2013-3672](https://insights.sbomify.com/CVE-2013-3672/): Denial of service in n/a (medium 4.3)
- [CVE-2013-3671](https://insights.sbomify.com/CVE-2013-3671/): Null dereference in n/a (medium 4.3)
- [CVE-2013-3670](https://insights.sbomify.com/CVE-2013-3670/): Memory corruption in n/a (medium 4.3)
- [CVE-2013-3667](https://insights.sbomify.com/CVE-2013-3667/): Supply chain in n/a (medium 6.4)
- [CVE-2013-3666](https://insights.sbomify.com/CVE-2013-3666/): Command injection in n/a (high 7.2)
- [CVE-2013-3665](https://insights.sbomify.com/CVE-2013-3665/): Code injection in n/a (medium 6.8)
- [CVE-2013-3664](https://insights.sbomify.com/CVE-2013-3664/): Memory corruption in n/a (critical 9.3)
- [CVE-2013-3663](https://insights.sbomify.com/CVE-2013-3663/): Memory corruption in n/a (critical 9.3)
- [CVE-2013-3662](https://insights.sbomify.com/CVE-2013-3662/): Memory corruption in n/a (critical 9.3)
- [CVE-2013-3661](https://insights.sbomify.com/CVE-2013-3661/): Denial of service in n/a (medium 4.9)
- [CVE-2013-3660](https://insights.sbomify.com/CVE-2013-3660/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2013-3659](https://insights.sbomify.com/CVE-2013-3659/): Information disclosure in n/a (low 3.3)
- [CVE-2013-3658](https://insights.sbomify.com/CVE-2013-3658/): Path traversal in n/a (critical 9.4)
- [CVE-2013-3657](https://insights.sbomify.com/CVE-2013-3657/): Memory corruption in n/a (high 7.5)
- [CVE-2013-3656](https://insights.sbomify.com/CVE-2013-3656/): Auth bypass in n/a (medium 5.8)
- [CVE-2013-3655](https://insights.sbomify.com/CVE-2013-3655/): Denial of service in n/a (medium 5.0)
- [CVE-2013-3654](https://insights.sbomify.com/CVE-2013-3654/): Path traversal in n/a (medium 5.0)
- [CVE-2013-3653](https://insights.sbomify.com/CVE-2013-3653/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3652](https://insights.sbomify.com/CVE-2013-3652/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3651](https://insights.sbomify.com/CVE-2013-3651/): Code injection in n/a (high 7.5)
- [CVE-2013-3650](https://insights.sbomify.com/CVE-2013-3650/): Path traversal in n/a (medium 5.0)
- [CVE-2013-3649](https://insights.sbomify.com/CVE-2013-3649/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3648](https://insights.sbomify.com/CVE-2013-3648/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3647](https://insights.sbomify.com/CVE-2013-3647/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2013-3646](https://insights.sbomify.com/CVE-2013-3646/): Code injection in n/a (medium 6.8)
- [CVE-2013-3645](https://insights.sbomify.com/CVE-2013-3645/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3644](https://insights.sbomify.com/CVE-2013-3644/): Code injection in n/a (critical 10.0)
- [CVE-2013-3643](https://insights.sbomify.com/CVE-2013-3643/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-3642](https://insights.sbomify.com/CVE-2013-3642/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-3641](https://insights.sbomify.com/CVE-2013-3641/): Weak cryptography in n/a (medium 5.8)
- [CVE-2013-3640](https://insights.sbomify.com/CVE-2013-3640/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3639](https://insights.sbomify.com/CVE-2013-3639/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3638](https://insights.sbomify.com/CVE-2013-3638/): SQL injection in n/a (high 8.8)
- [CVE-2013-3637](https://insights.sbomify.com/CVE-2013-3637/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2013-3636](https://insights.sbomify.com/CVE-2013-3636/): Information disclosure in n/a (medium 5.4)
- [CVE-2013-3635](https://insights.sbomify.com/CVE-2013-3635/): ProjectPier 0.8.8 has stored XSS (medium 5.4)
- [CVE-2013-3634](https://insights.sbomify.com/CVE-2013-3634/): Auth bypass in n/a (high 7.5)
- [CVE-2013-3633](https://insights.sbomify.com/CVE-2013-3633/): Missing authorization in n/a (high 8.0)
- [CVE-2013-3632](https://insights.sbomify.com/CVE-2013-3632/): Command injection in n/a (high 8.8)
- [CVE-2013-3631](https://insights.sbomify.com/CVE-2013-3631/): Code injection in n/a (medium 6.0)
- [CVE-2013-3630](https://insights.sbomify.com/CVE-2013-3630/): Moodle Authenticated Spelling Binary Remote Code Execution (medium 4.6)
- [CVE-2013-3629](https://insights.sbomify.com/CVE-2013-3629/): Code injection in ISPConfig (high 8.8)
- [CVE-2013-3628](https://insights.sbomify.com/CVE-2013-3628/): Command injection in Zabbix (high 8.8)
- [CVE-2013-3627](https://insights.sbomify.com/CVE-2013-3627/): Denial of service in n/a (medium 5.0)
- [CVE-2013-3626](https://insights.sbomify.com/CVE-2013-3626/): Path traversal in n/a (critical 9.3)
- [CVE-2013-3625](https://insights.sbomify.com/CVE-2013-3625/): Hardcoded credentials in n/a (high 7.8)
- [CVE-2013-3624](https://insights.sbomify.com/CVE-2013-3624/): Hardcoded credentials in n/a (high 7.8)
- [CVE-2013-3623](https://insights.sbomify.com/CVE-2013-3623/): Memory corruption in n/a (critical 10.0)
- [CVE-2013-3622](https://insights.sbomify.com/CVE-2013-3622/): Memory corruption in n/a (critical 9.0)
- [CVE-2013-3620](https://insights.sbomify.com/CVE-2013-3620/): Hardcoded credentials in IPMI (high 7.5)
- [CVE-2013-3619](https://insights.sbomify.com/CVE-2013-3619/): Hardcoded credentials in IPMI (high 8.1)
- [CVE-2013-3617](https://insights.sbomify.com/CVE-2013-3617/): XML external entity in n/a (low 3.5)
- [CVE-2013-3616](https://insights.sbomify.com/CVE-2013-3616/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3615](https://insights.sbomify.com/CVE-2013-3615/): Weak cryptography in n/a (high 7.8)
- [CVE-2013-3614](https://insights.sbomify.com/CVE-2013-3614/): Weak cryptography in n/a (critical 9.3)
- [CVE-2013-3613](https://insights.sbomify.com/CVE-2013-3613/): Auth bypass in n/a (high 7.8)
- [CVE-2013-3612](https://insights.sbomify.com/CVE-2013-3612/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2013-3610](https://insights.sbomify.com/CVE-2013-3610/): Auth bypass in n/a (medium 6.1)
- [CVE-2013-3609](https://insights.sbomify.com/CVE-2013-3609/): Missing authorization in n/a (critical 10.0)
- [CVE-2013-3608](https://insights.sbomify.com/CVE-2013-3608/): Command injection in n/a (critical 10.0)
- [CVE-2013-3607](https://insights.sbomify.com/CVE-2013-3607/): Memory corruption in n/a (critical 10.0)
- [CVE-2013-3606](https://insights.sbomify.com/CVE-2013-3606/): Denial of service in n/a (high 7.8)
- [CVE-2013-3605](https://insights.sbomify.com/CVE-2013-3605/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-3604](https://insights.sbomify.com/CVE-2013-3604/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3603](https://insights.sbomify.com/CVE-2013-3603/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3602](https://insights.sbomify.com/CVE-2013-3602/): SQL injection in n/a (high 7.5)
- [CVE-2013-3601](https://insights.sbomify.com/CVE-2013-3601/): Code injection in n/a (medium 6.0)
- [CVE-2013-3600](https://insights.sbomify.com/CVE-2013-3600/): Privilege escalation in n/a (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/30/