# Vulnerabilities published in 2013


- [CVE-2013-2798](https://insights.sbomify.com/CVE-2013-2798/): Denial of service in selinc:sel-2241 (medium 4.7)
- [CVE-2013-2796](https://insights.sbomify.com/CVE-2013-2796/): XML external entity in schneider-electric:citectscada (medium 6.9)
- [CVE-2013-2794](https://insights.sbomify.com/CVE-2013-2794/): Denial of service in trianglemicroworks:.net communication protocol components (medium 4.9)
- [CVE-2013-2793](https://insights.sbomify.com/CVE-2013-2793/): Denial of service in trianglemicroworks:.net communication protocol components (high 7.8)
- [CVE-2013-2792](https://insights.sbomify.com/CVE-2013-2792/): Denial of service in selinc:sel-2241 (high 7.1)
- [CVE-2013-2791](https://insights.sbomify.com/CVE-2013-2791/): Memory corruption in matrikonopc:scada dnp3 opc server (high 7.1)
- [CVE-2013-2790](https://insights.sbomify.com/CVE-2013-2790/): Denial of service in ioserver:ioserver (high 7.8)
- [CVE-2013-2789](https://insights.sbomify.com/CVE-2013-2789/): Denial of service in kepware:kepserverex (high 7.8)
- [CVE-2013-2788](https://insights.sbomify.com/CVE-2013-2788/): Denial of service in subnet:substation server (medium 4.3)
- [CVE-2013-2787](https://insights.sbomify.com/CVE-2013-2787/): Denial of service in alstom:e-terracontrol (high 7.8)
- [CVE-2013-2786](https://insights.sbomify.com/CVE-2013-2786/): Misconfiguration in alstom:micom s1 agile (medium 6.6)
- [CVE-2013-2785](https://insights.sbomify.com/CVE-2013-2785/): Memory corruption in ge:intelligent platforms proficy hmi\/scada cimplicity (critical 9.3)
- [CVE-2013-2784](https://insights.sbomify.com/CVE-2013-2784/): Denial of service in triplc:nano-10 plc (high 7.8)
- [CVE-2013-2783](https://insights.sbomify.com/CVE-2013-2783/): Denial of service in ioserver:ioserver (high 7.1)
- [CVE-2013-2782](https://insights.sbomify.com/CVE-2013-2782/): Hardcoded credentials in schneider-electric:tburjr900 (critical 9.3)
- [CVE-2013-2781](https://insights.sbomify.com/CVE-2013-2781/): Use after free in 3s-software:codesys gateway-server (critical 10.0)
- [CVE-2013-2780](https://insights.sbomify.com/CVE-2013-2780/): Denial of service in siemens:simatic s7-1200 cpu 1211c firmware (high 7.8)
- [CVE-2013-2779](https://insights.sbomify.com/CVE-2013-2779/): Denial of service in cisco:asr 1001 (high 7.8)
- [CVE-2013-2778](https://insights.sbomify.com/CVE-2013-2778/): Cross-site request forgery in chatelao:php address book (high 7.5)
- [CVE-2013-2777](https://insights.sbomify.com/CVE-2013-2777/): Privilege escalation in apple:mac os x (medium 4.4)
- [CVE-2013-2776](https://insights.sbomify.com/CVE-2013-2776/): Privilege escalation in apple:mac os x (medium 4.4)
- [CVE-2013-2773](https://insights.sbomify.com/CVE-2013-2773/): Code injection in gonitro:nitropdf (high 7.8)
- [CVE-2013-2770](https://insights.sbomify.com/CVE-2013-2770/): Security feature bypass in novell:kanaka (medium 5.8)
- [CVE-2013-2767](https://insights.sbomify.com/CVE-2013-2767/): Security feature bypass in citrix:netscaler access gateway (medium 5.4)
- [CVE-2013-2766](https://insights.sbomify.com/CVE-2013-2766/): Cross-site scripting in splunk:splunk (medium 4.3)
- [CVE-2013-2765](https://insights.sbomify.com/CVE-2013-2765/): Null dereference in opensuse:opensuse (medium 5.0)
- [CVE-2013-2764](https://insights.sbomify.com/CVE-2013-2764/): Open redirect in united-security-providers:secure entry server (medium 6.1)
- [CVE-2013-2763](https://insights.sbomify.com/CVE-2013-2763/): Denial of service in schneider-electric:modicon m340 bmx noc 0401 firmware (medium 5.0)
- [CVE-2013-2762](https://insights.sbomify.com/CVE-2013-2762/): Hardcoded credentials in schneider-electric:magelis xbt hmi (critical 10.0)
- [CVE-2013-2761](https://insights.sbomify.com/CVE-2013-2761/): Memory corruption in schneider-electric:modicon m340 (medium 4.0)
- [CVE-2013-2760](https://insights.sbomify.com/CVE-2013-2760/): Memory corruption in bestwebsharing:groovy media player (medium 6.8)
- [CVE-2013-2758](https://insights.sbomify.com/CVE-2013-2758/): Weak cryptography in apache:cloudstack (medium 5.0)
- [CVE-2013-2757](https://insights.sbomify.com/CVE-2013-2757/): Misconfiguration in citrix:cloudplatform (high 7.5)
- [CVE-2013-2756](https://insights.sbomify.com/CVE-2013-2756/): Auth bypass in apache:cloudstack (medium 5.0)
- [CVE-2013-2754](https://insights.sbomify.com/CVE-2013-2754/): Cross-site request forgery in umi-cms:umi.cms (medium 6.8)
- [CVE-2013-2752](https://insights.sbomify.com/CVE-2013-2752/): Cross-site request forgery in netgear:raidiator (medium 6.8)
- [CVE-2013-2751](https://insights.sbomify.com/CVE-2013-2751/): Code injection in netgear:raidiator (critical 10.0)
- [CVE-2013-2750](https://insights.sbomify.com/CVE-2013-2750/): Cross-site scripting in e107:e107 (medium 4.3)
- [CVE-2013-2748](https://insights.sbomify.com/CVE-2013-2748/): File upload in belkin:wemo switch firmware (critical 9.8)
- [CVE-2013-2747](https://insights.sbomify.com/CVE-2013-2747/): Security feature bypass in courion:access risk management suite (medium 6.5)
- [CVE-2013-2745](https://insights.sbomify.com/CVE-2013-2745/): SQL injection in debian:debian linux (critical 9.8)
- [CVE-2013-2744](https://insights.sbomify.com/CVE-2013-2744/): Information disclosure in ithemes:backupbuddy (medium 5.0)
- [CVE-2013-2743](https://insights.sbomify.com/CVE-2013-2743/): Auth bypass in ithemes:backupbuddy (high 7.5)
- [CVE-2013-2742](https://insights.sbomify.com/CVE-2013-2742/): Auth bypass in ithemes:backupbuddy (high 7.5)
- [CVE-2013-2741](https://insights.sbomify.com/CVE-2013-2741/): Missing authorization in ithemes:backupbuddy (high 7.5)
- [CVE-2013-2739](https://insights.sbomify.com/CVE-2013-2739/): MiniDLNA has heap-based buffer overflow (critical 9.8)
- [CVE-2013-2738](https://insights.sbomify.com/CVE-2013-2738/): SQL injection in readymedia project:readymedia (critical 9.8)
- [CVE-2013-2737](https://insights.sbomify.com/CVE-2013-2737/): Information disclosure in adobe:acrobat (medium 5.0)
- [CVE-2013-2736](https://insights.sbomify.com/CVE-2013-2736/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2735](https://insights.sbomify.com/CVE-2013-2735/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2734](https://insights.sbomify.com/CVE-2013-2734/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2733](https://insights.sbomify.com/CVE-2013-2733/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2732](https://insights.sbomify.com/CVE-2013-2732/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2731](https://insights.sbomify.com/CVE-2013-2731/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2730](https://insights.sbomify.com/CVE-2013-2730/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2729](https://insights.sbomify.com/CVE-2013-2729/): Adobe Reader and Acrobat Arbitrary Integer Overflow (high 8.8, exploited in the wild)
- [CVE-2013-2728](https://insights.sbomify.com/CVE-2013-2728/): Memory corruption in adobe:adobe air (critical 10.0)
- [CVE-2013-2727](https://insights.sbomify.com/CVE-2013-2727/): Integer overflow in adobe:acrobat (critical 10.0)
- [CVE-2013-2726](https://insights.sbomify.com/CVE-2013-2726/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2725](https://insights.sbomify.com/CVE-2013-2725/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2724](https://insights.sbomify.com/CVE-2013-2724/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2723](https://insights.sbomify.com/CVE-2013-2723/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2722](https://insights.sbomify.com/CVE-2013-2722/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2721](https://insights.sbomify.com/CVE-2013-2721/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2720](https://insights.sbomify.com/CVE-2013-2720/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2719](https://insights.sbomify.com/CVE-2013-2719/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2718](https://insights.sbomify.com/CVE-2013-2718/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2013-2717](https://insights.sbomify.com/CVE-2013-2717/): Other in emc:smarts network configuration manager (critical 9.3)
- [CVE-2013-2716](https://insights.sbomify.com/CVE-2013-2716/): Weak cryptography in puppet:puppet enterprise (medium 5.0)
- [CVE-2013-2715](https://insights.sbomify.com/CVE-2013-2715/): Cross-site scripting in thomas seidl:search api (low 2.1)
- [CVE-2013-2714](https://insights.sbomify.com/CVE-2013-2714/): Cross-site scripting in podpress project:podpress (medium 6.1)
- [CVE-2013-2713](https://insights.sbomify.com/CVE-2013-2713/): Cross-site request forgery in krisonav:krisonav (medium 6.8)
- [CVE-2013-2712](https://insights.sbomify.com/CVE-2013-2712/): Cross-site scripting in krisonav:krisonav (medium 4.3)
- [CVE-2013-2710](https://insights.sbomify.com/CVE-2013-2710/): Cross-site request forgery in ajaydsouza:contextual related posts (medium 6.8)
- [CVE-2013-2709](https://insights.sbomify.com/CVE-2013-2709/): Cross-site request forgery in crunchify:foursquare-checkins (medium 6.8)
- [CVE-2013-2708](https://insights.sbomify.com/CVE-2013-2708/): Cross-site request forgery in snilesh:content slide (medium 6.8)
- [CVE-2013-2707](https://insights.sbomify.com/CVE-2013-2707/): Cross-site request forgery in netweblogic:login with ajax (medium 6.8)
- [CVE-2013-2706](https://insights.sbomify.com/CVE-2013-2706/): Cross-site request forgery in rodrigo polo:stream video player (medium 6.8)
- [CVE-2013-2705](https://insights.sbomify.com/CVE-2013-2705/): Cross-site request forgery in tipsandtricks-hq:wordpress simple paypal shopping cart (medium 6.8)
- [CVE-2013-2704](https://insights.sbomify.com/CVE-2013-2704/): Cross-site request forgery in metin saylan:dropdown menu widget (medium 6.8)
- [CVE-2013-2703](https://insights.sbomify.com/CVE-2013-2703/): Cross-site request forgery in crunchify:facebook members (medium 6.8)
- [CVE-2013-2702](https://insights.sbomify.com/CVE-2013-2702/): Cross-site request forgery in thulasidas:easy-adsense-lite (medium 6.8)
- [CVE-2013-2701](https://insights.sbomify.com/CVE-2013-2701/): Cross-site request forgery in linksalpha:social sharing toolkit plugin (medium 6.8)
- [CVE-2013-2700](https://insights.sbomify.com/CVE-2013-2700/): Cross-site request forgery in webmaster-source:wp125 (medium 6.8)
- [CVE-2013-2699](https://insights.sbomify.com/CVE-2013-2699/): Cross-site request forgery in underconstruction project:underconstruction (medium 6.8)
- [CVE-2013-2698](https://insights.sbomify.com/CVE-2013-2698/): Cross-site request forgery in kieranoshea:calendar (medium 6.8)
- [CVE-2013-2697](https://insights.sbomify.com/CVE-2013-2697/): Cross-site request forgery in lesterchan:wp-downloadmanager (medium 6.8)
- [CVE-2013-2696](https://insights.sbomify.com/CVE-2013-2696/): Cross-site request forgery in crunchify:all-in-on-webmaster (medium 6.8)
- [CVE-2013-2695](https://insights.sbomify.com/CVE-2013-2695/): Cross-site scripting in wpsymposiumpro:wp symposium (medium 4.3)
- [CVE-2013-2694](https://insights.sbomify.com/CVE-2013-2694/): Open redirect in wpsymposiumpro:wp symposium (medium 5.8)
- [CVE-2013-2693](https://insights.sbomify.com/CVE-2013-2693/): Cross-site request forgery in wp-plugins:wp-print (medium 6.8)
- [CVE-2013-2692](https://insights.sbomify.com/CVE-2013-2692/): Cross-site request forgery in openvpn:openvpn access server (medium 6.8)
- [CVE-2013-2691](https://insights.sbomify.com/CVE-2013-2691/): Memory corruption in jetaudio:jetaudio (critical 9.3)
- [CVE-2013-2690](https://insights.sbomify.com/CVE-2013-2690/): SQL injection in synchroweb:synconnect (high 7.5)
- [CVE-2013-2688](https://insights.sbomify.com/CVE-2013-2688/): Memory corruption in blackberry:qnx neutrino rtos (medium 5.4)
- [CVE-2013-2687](https://insights.sbomify.com/CVE-2013-2687/): Memory corruption in blackberry:qnx momentics tool suite (high 7.8)
- [CVE-2013-2686](https://insights.sbomify.com/CVE-2013-2686/): Denial of service in asterisk:certified asterisk (medium 5.0)
- [CVE-2013-2685](https://insights.sbomify.com/CVE-2013-2685/): Memory corruption in asterisk:open source (high 7.5)
- [CVE-2013-2684](https://insights.sbomify.com/CVE-2013-2684/): Cross-site scripting in cisco:linksys e4200 firmware (medium 6.1)
- [CVE-2013-2683](https://insights.sbomify.com/CVE-2013-2683/): Information disclosure in cisco:linksys e4200 firmware (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/38/