# Vulnerabilities published in 2013 - [CVE-2013-3599](https://insights.sbomify.com/CVE-2013-3599/): Privilege escalation in n/a (critical 9.3) - [CVE-2013-3598](https://insights.sbomify.com/CVE-2013-3598/): Path traversal in n/a (medium 5.0) - [CVE-2013-3597](https://insights.sbomify.com/CVE-2013-3597/): Information disclosure in n/a (medium 5.0) - [CVE-2013-3596](https://insights.sbomify.com/CVE-2013-3596/): Information disclosure in n/a (medium 4.0) - [CVE-2013-3595](https://insights.sbomify.com/CVE-2013-3595/): Denial of service in n/a (medium 6.8) - [CVE-2013-3594](https://insights.sbomify.com/CVE-2013-3594/): Denial of service in n/a (critical 10.0) - [CVE-2013-3593](https://insights.sbomify.com/CVE-2013-3593/): Weak cryptography in n/a (high 7.8) - [CVE-2013-3591](https://insights.sbomify.com/CVE-2013-3591/): File upload in vTiger CRM (high 8.8) - [CVE-2013-3590](https://insights.sbomify.com/CVE-2013-3590/): File upload in n/a (medium 6.8) - [CVE-2013-3589](https://insights.sbomify.com/CVE-2013-3589/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3588](https://insights.sbomify.com/CVE-2013-3588/): Denial of service in n/a (high 7.8) - [CVE-2013-3587](https://insights.sbomify.com/CVE-2013-3587/): Information disclosure in HTTPS protocol (medium 5.9) - [CVE-2013-3586](https://insights.sbomify.com/CVE-2013-3586/): Auth bypass in n/a (high 7.6) - [CVE-2013-3585](https://insights.sbomify.com/CVE-2013-3585/): Hardcoded credentials in n/a (medium 5.0) - [CVE-2013-3584](https://insights.sbomify.com/CVE-2013-3584/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3583](https://insights.sbomify.com/CVE-2013-3583/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-3582](https://insights.sbomify.com/CVE-2013-3582/): Memory corruption in n/a (high 7.6) - [CVE-2013-3581](https://insights.sbomify.com/CVE-2013-3581/): Information disclosure in n/a (high 7.1) - [CVE-2013-3580](https://insights.sbomify.com/CVE-2013-3580/): Denial of service in n/a (medium 4.3) - [CVE-2013-3579](https://insights.sbomify.com/CVE-2013-3579/): Denial of service in n/a (medium 4.3) - [CVE-2013-3578](https://insights.sbomify.com/CVE-2013-3578/): SQL injection in n/a (critical 9.0) - [CVE-2013-3577](https://insights.sbomify.com/CVE-2013-3577/): SQL injection in n/a (high 7.5) - [CVE-2013-3576](https://insights.sbomify.com/CVE-2013-3576/): Command injection in n/a (critical 9.0) - [CVE-2013-3575](https://insights.sbomify.com/CVE-2013-3575/): Path traversal in n/a (medium 5.0) - [CVE-2013-3574](https://insights.sbomify.com/CVE-2013-3574/): Path traversal in n/a (high 7.8) - [CVE-2013-3573](https://insights.sbomify.com/CVE-2013-3573/): Other in n/a (critical 10.0) - [CVE-2013-3572](https://insights.sbomify.com/CVE-2013-3572/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-3571](https://insights.sbomify.com/CVE-2013-3571/): Denial of service in n/a (low 2.6) - [CVE-2013-3568](https://insights.sbomify.com/CVE-2013-3568/): Cross-site request forgery in n/a (high 8.8) - [CVE-2013-3567](https://insights.sbomify.com/CVE-2013-3567/): Puppet Improper Input Validation vulnerability (high 7.5) - [CVE-2013-3565](https://insights.sbomify.com/CVE-2013-3565/): Cross-site scripting in n/a (medium 6.1) - [CVE-2013-3564](https://insights.sbomify.com/CVE-2013-3564/): Missing authorization in n/a (medium 5.3) - [CVE-2013-3563](https://insights.sbomify.com/CVE-2013-3563/): Memory corruption in n/a (high 7.5) - [CVE-2013-3562](https://insights.sbomify.com/CVE-2013-3562/): Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshar (medium 5.0) - [CVE-2013-3561](https://insights.sbomify.com/CVE-2013-3561/): Integer overflow in n/a (high 7.8) - [CVE-2013-3560](https://insights.sbomify.com/CVE-2013-3560/): Denial of service in n/a (medium 5.0) - [CVE-2013-3559](https://insights.sbomify.com/CVE-2013-3559/): Integer overflow in n/a (medium 5.0) - [CVE-2013-3558](https://insights.sbomify.com/CVE-2013-3558/): Denial of service in n/a (medium 5.0) - [CVE-2013-3557](https://insights.sbomify.com/CVE-2013-3557/): Denial of service in n/a (medium 5.0) - [CVE-2013-3556](https://insights.sbomify.com/CVE-2013-3556/): Null dereference in n/a (medium 5.0) - [CVE-2013-3555](https://insights.sbomify.com/CVE-2013-3555/): epan/dissectors/packet-gtpv2.c in the GTPv2 dissector in Wireshark 1.8.x before 1.8.7 calls incorrect functions in certain contexts related (medium 5.0) - [CVE-2013-3553](https://insights.sbomify.com/CVE-2013-3553/): Memory corruption in n/a (high 7.8) - [CVE-2013-3552](https://insights.sbomify.com/CVE-2013-3552/): Memory corruption in n/a (high 7.8) - [CVE-2013-3551](https://insights.sbomify.com/CVE-2013-3551/): Information disclosure in n/a (medium 6.5) - [CVE-2013-3543](https://insights.sbomify.com/CVE-2013-3543/): Path traversal in n/a (high 8.8) - [CVE-2013-3542](https://insights.sbomify.com/CVE-2013-3542/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2013-3541](https://insights.sbomify.com/CVE-2013-3541/): Path traversal in n/a (high 7.8) - [CVE-2013-3540](https://insights.sbomify.com/CVE-2013-3540/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-3539](https://insights.sbomify.com/CVE-2013-3539/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-3538](https://insights.sbomify.com/CVE-2013-3538/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3537](https://insights.sbomify.com/CVE-2013-3537/): SQL injection in n/a (high 7.5) - [CVE-2013-3536](https://insights.sbomify.com/CVE-2013-3536/): SQL injection in n/a (high 7.5) - [CVE-2013-3535](https://insights.sbomify.com/CVE-2013-3535/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3534](https://insights.sbomify.com/CVE-2013-3534/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3533](https://insights.sbomify.com/CVE-2013-3533/): SQL injection in n/a (high 7.5) - [CVE-2013-3532](https://insights.sbomify.com/CVE-2013-3532/): SQL injection in n/a (high 7.5) - [CVE-2013-3531](https://insights.sbomify.com/CVE-2013-3531/): SQL injection in n/a (high 7.5) - [CVE-2013-3530](https://insights.sbomify.com/CVE-2013-3530/): SQL injection in n/a (high 7.5) - [CVE-2013-3529](https://insights.sbomify.com/CVE-2013-3529/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3528](https://insights.sbomify.com/CVE-2013-3528/): Deserialization in n/a (high 7.5) - [CVE-2013-3527](https://insights.sbomify.com/CVE-2013-3527/): SQL injection in n/a (high 7.5) - [CVE-2013-3526](https://insights.sbomify.com/CVE-2013-3526/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3525](https://insights.sbomify.com/CVE-2013-3525/): SQL injection in n/a (high 7.5) - [CVE-2013-3524](https://insights.sbomify.com/CVE-2013-3524/): SQL injection in n/a (high 7.5) - [CVE-2013-3523](https://insights.sbomify.com/CVE-2013-3523/): SQL injection in n/a (high 7.5) - [CVE-2013-3522](https://insights.sbomify.com/CVE-2013-3522/): SQL injection in n/a (medium 6.5) - [CVE-2013-3520](https://insights.sbomify.com/CVE-2013-3520/): Code injection in n/a (high 7.5) - [CVE-2013-3519](https://insights.sbomify.com/CVE-2013-3519/): Privilege escalation in n/a (high 7.9) - [CVE-2013-3517](https://insights.sbomify.com/CVE-2013-3517/): Cross-site scripting in n/a (medium 5.4) - [CVE-2013-3516](https://insights.sbomify.com/CVE-2013-3516/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2013-3515](https://insights.sbomify.com/CVE-2013-3515/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3514](https://insights.sbomify.com/CVE-2013-3514/): Path traversal in n/a (medium 4.3) - [CVE-2013-3513](https://insights.sbomify.com/CVE-2013-3513/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-3512](https://insights.sbomify.com/CVE-2013-3512/): Missing authorization in n/a (medium 6.5) - [CVE-2013-3511](https://insights.sbomify.com/CVE-2013-3511/): Open redirect in n/a (medium 5.8) - [CVE-2013-3510](https://insights.sbomify.com/CVE-2013-3510/): SQL injection in n/a (medium 6.5) - [CVE-2013-3509](https://insights.sbomify.com/CVE-2013-3509/): Command injection in n/a (medium 6.5) - [CVE-2013-3508](https://insights.sbomify.com/CVE-2013-3508/): Code injection in n/a (medium 6.5) - [CVE-2013-3507](https://insights.sbomify.com/CVE-2013-3507/): Information disclosure in n/a (medium 4.0) - [CVE-2013-3506](https://insights.sbomify.com/CVE-2013-3506/): Code injection in n/a (high 7.5) - [CVE-2013-3505](https://insights.sbomify.com/CVE-2013-3505/): Missing authorization in n/a (medium 4.0) - [CVE-2013-3504](https://insights.sbomify.com/CVE-2013-3504/): Path traversal in n/a (medium 5.5) - [CVE-2013-3503](https://insights.sbomify.com/CVE-2013-3503/): XML external entity in n/a (low 3.5) - [CVE-2013-3502](https://insights.sbomify.com/CVE-2013-3502/): Command injection in n/a (medium 6.5) - [CVE-2013-3501](https://insights.sbomify.com/CVE-2013-3501/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3500](https://insights.sbomify.com/CVE-2013-3500/): Privilege escalation in n/a (high 7.5) - [CVE-2013-3499](https://insights.sbomify.com/CVE-2013-3499/): Auth bypass in n/a (high 7.5) - [CVE-2013-3498](https://insights.sbomify.com/CVE-2013-3498/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3497](https://insights.sbomify.com/CVE-2013-3497/): Information disclosure in n/a (medium 4.7) - [CVE-2013-3496](https://insights.sbomify.com/CVE-2013-3496/): Privilege escalation in n/a (high 7.2) - [CVE-2013-3495](https://insights.sbomify.com/CVE-2013-3495/): Denial of service in n/a (medium 4.7) - [CVE-2013-3494](https://insights.sbomify.com/CVE-2013-3494/): Path traversal in UMPlayer (high 7.8) - [CVE-2013-3493](https://insights.sbomify.com/CVE-2013-3493/): Integer overflow in XnView (critical 9.8) - [CVE-2013-3492](https://insights.sbomify.com/CVE-2013-3492/): Memory corruption in XnView (critical 9.8) - [CVE-2013-3491](https://insights.sbomify.com/CVE-2013-3491/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2013-3489](https://insights.sbomify.com/CVE-2013-3489/): Memory corruption in Media Player Classic - Home Cinema (MPC-HC) (high 7.8) - [CVE-2013-3488](https://insights.sbomify.com/CVE-2013-3488/): Memory corruption in Media Player Classic - Home Cinema (MPC-HC) (high 7.8) - [CVE-2013-3487](https://insights.sbomify.com/CVE-2013-3487/): Cross-site scripting in n/a (medium 4.3) - [CVE-2013-3486](https://insights.sbomify.com/CVE-2013-3486/): Integer overflow in IrfanView FlashPix PlugIn (critical 9.6) - [CVE-2013-3485](https://insights.sbomify.com/CVE-2013-3485/): Path traversal in n/a (medium 6.9) --- From sbomify Insights: https://insights.sbomify.com/years/2013/page/31/