# Vulnerabilities published in 2013


- [CVE-2013-2682](https://insights.sbomify.com/CVE-2013-2682/): Other in cisco:linksys e4200 firmware (medium 4.3)
- [CVE-2013-2681](https://insights.sbomify.com/CVE-2013-2681/): Auth bypass in cisco:linksys e4200 firmware (critical 9.8)
- [CVE-2013-2680](https://insights.sbomify.com/CVE-2013-2680/): Information disclosure in cisco:linksys e4200 firmware (high 7.5)
- [CVE-2013-2679](https://insights.sbomify.com/CVE-2013-2679/): Cross-site scripting in belkin:linksys e4200 firmware (medium 6.1)
- [CVE-2013-2678](https://insights.sbomify.com/CVE-2013-2678/): Path traversal in cisco:linksys e4200 firmware (high 8.1)
- [CVE-2013-2676](https://insights.sbomify.com/CVE-2013-2676/): Information disclosure in brother:mfc-9970cdw firmware (high 7.5)
- [CVE-2013-2675](https://insights.sbomify.com/CVE-2013-2675/): Other in brother:mfc-9970cdw firmware (medium 6.5)
- [CVE-2013-2674](https://insights.sbomify.com/CVE-2013-2674/): Information disclosure in brother:mfc-9970cdw firmware (high 7.5)
- [CVE-2013-2673](https://insights.sbomify.com/CVE-2013-2673/): Auth bypass in brother:mfc-9970cdw firmware (medium 6.8)
- [CVE-2013-2672](https://insights.sbomify.com/CVE-2013-2672/): Information disclosure in brother:mfc-9970cdw firmware (high 7.5)
- [CVE-2013-2671](https://insights.sbomify.com/CVE-2013-2671/): Cross-site scripting in brother:mfc-9970cdw (medium 4.3)
- [CVE-2013-2670](https://insights.sbomify.com/CVE-2013-2670/): Cross-site scripting in brother:mfc-9970cdw (medium 4.3)
- [CVE-2013-2653](https://insights.sbomify.com/CVE-2013-2653/): Other in silverstripe:silverstripe (medium 5.8)
- [CVE-2013-2652](https://insights.sbomify.com/CVE-2013-2652/): Other in andrew simpson:webcollab (medium 4.3)
- [CVE-2013-2651](https://insights.sbomify.com/CVE-2013-2651/): Cross-site scripting in boltwire:boltwire (medium 4.3)
- [CVE-2013-2646](https://insights.sbomify.com/CVE-2013-2646/): Denial of service in tp-link:tl-wr1043nd firmware (high 7.5)
- [CVE-2013-2645](https://insights.sbomify.com/CVE-2013-2645/): Cross-site request forgery in tp-link:firmware (critical 9.3)
- [CVE-2013-2643](https://insights.sbomify.com/CVE-2013-2643/): Cross-site scripting in sophos:web appliance (medium 4.3)
- [CVE-2013-2642](https://insights.sbomify.com/CVE-2013-2642/): Command injection in sophos:web appliance (critical 9.3)
- [CVE-2013-2641](https://insights.sbomify.com/CVE-2013-2641/): Path traversal in sophos:web appliance (medium 5.0)
- [CVE-2013-2640](https://insights.sbomify.com/CVE-2013-2640/): Missing authorization in mailup:wp-mailup (medium 5.0)
- [CVE-2013-2639](https://insights.sbomify.com/CVE-2013-2639/): Cross-site scripting in ctera:cloud storage os (medium 4.3)
- [CVE-2013-2637](https://insights.sbomify.com/CVE-2013-2637/): Cross-site scripting in opensuse:opensuse (medium 6.1)
- [CVE-2013-2636](https://insights.sbomify.com/CVE-2013-2636/): Information disclosure in linux:linux kernel (low 1.9)
- [CVE-2013-2635](https://insights.sbomify.com/CVE-2013-2635/): Information disclosure in linux:linux kernel (low 1.9)
- [CVE-2013-2634](https://insights.sbomify.com/CVE-2013-2634/): Information disclosure in linux:linux kernel (low 1.9)
- [CVE-2013-2633](https://insights.sbomify.com/CVE-2013-2633/): Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests (medium 5.0)
- [CVE-2013-2632](https://insights.sbomify.com/CVE-2013-2632/): Memory corruption in google:chrome (medium 6.8)
- [CVE-2013-2631](https://insights.sbomify.com/CVE-2013-2631/): Information disclosure in tinywebgallery:tinywebgallery (medium 5.3)
- [CVE-2013-2630](https://insights.sbomify.com/CVE-2013-2630/): Cross-site scripting in broadcom:service desk manager (medium 4.3)
- [CVE-2013-2629](https://insights.sbomify.com/CVE-2013-2629/): Missing authorization in idleman:leed (medium 5.0)
- [CVE-2013-2628](https://insights.sbomify.com/CVE-2013-2628/): Cross-site request forgery in idleman:leed (medium 6.8)
- [CVE-2013-2627](https://insights.sbomify.com/CVE-2013-2627/): SQL injection in idleman:leed (high 7.5)
- [CVE-2013-2625](https://insights.sbomify.com/CVE-2013-2625/): Missing authorization in debian:debian linux (medium 6.5)
- [CVE-2013-2624](https://insights.sbomify.com/CVE-2013-2624/): Information disclosure in telaen project:telaen (medium 5.3)
- [CVE-2013-2623](https://insights.sbomify.com/CVE-2013-2623/): Cross-site scripting in telaen project:telaen (medium 6.1)
- [CVE-2013-2622](https://insights.sbomify.com/CVE-2013-2622/): Cross-site scripting in uebimiau:uebimiau (medium 6.1)
- [CVE-2013-2621](https://insights.sbomify.com/CVE-2013-2621/): Open redirect in telaen project:telaen (medium 6.1)
- [CVE-2013-2619](https://insights.sbomify.com/CVE-2013-2619/): Path traversal in aspen:aspen (medium 5.0)
- [CVE-2013-2618](https://insights.sbomify.com/CVE-2013-2618/): Cross-site scripting in network-weathermap:.network weathermap (medium 4.3)
- [CVE-2013-2617](https://insights.sbomify.com/CVE-2013-2617/): Curl Gem insufficient URL escaping command injection (high 7.5)
- [CVE-2013-2616](https://insights.sbomify.com/CVE-2013-2616/): MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection (high 7.5)
- [CVE-2013-2615](https://insights.sbomify.com/CVE-2013-2615/): fastreader Gem for Ruby URI Handling Arbitrary Command Injection (high 7.5)
- [CVE-2013-2612](https://insights.sbomify.com/CVE-2013-2612/): Command injection in huawei:e587 firmware (critical 9.8)
- [CVE-2013-2604](https://insights.sbomify.com/CVE-2013-2604/): Misconfiguration in realnetworks:realarcade installer (high 7.2)
- [CVE-2013-2603](https://insights.sbomify.com/CVE-2013-2603/): Use after free in realnetworks:realarcade installer (critical 10.0)
- [CVE-2013-2602](https://insights.sbomify.com/CVE-2013-2602/): Memory corruption in myheritage:sequeryobject activex control (critical 9.3)
- [CVE-2013-2601](https://insights.sbomify.com/CVE-2013-2601/): Command injection in citrix:xenclient xt (high 7.5)
- [CVE-2013-2600](https://insights.sbomify.com/CVE-2013-2600/): Information disclosure in debian:debian linux (high 7.5)
- [CVE-2013-2599](https://insights.sbomify.com/CVE-2013-2599/): Information disclosure in codeaurora:android-msm (medium 5.0)
- [CVE-2013-2598](https://insights.sbomify.com/CVE-2013-2598/): Security feature bypass in codeaurora:android-msm (medium 6.6)
- [CVE-2013-2597](https://insights.sbomify.com/CVE-2013-2597/): Code Aurora ACDB Audio Driver Stack-based Buffer Overflow (high 8.4, exploited in the wild)
- [CVE-2013-2596](https://insights.sbomify.com/CVE-2013-2596/): Linux Kernel Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2013-2595](https://insights.sbomify.com/CVE-2013-2595/): Privilege escalation in codeaurora:android-msm (high 7.2)
- [CVE-2013-2594](https://insights.sbomify.com/CVE-2013-2594/): SQL injection in hornbill:supportworks itsm (high 7.5)
- [CVE-2013-2586](https://insights.sbomify.com/CVE-2013-2586/): Missing authorization in apachefriends:xampp (medium 4.3)
- [CVE-2013-2585](https://insights.sbomify.com/CVE-2013-2585/): Cross-site scripting in atmail:atmail (medium 4.3)
- [CVE-2013-2583](https://insights.sbomify.com/CVE-2013-2583/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 4.3)
- [CVE-2013-2582](https://insights.sbomify.com/CVE-2013-2582/): Open redirect in open-xchange:open-xchange appsuite (medium 5.0)
- [CVE-2013-2581](https://insights.sbomify.com/CVE-2013-2581/): Missing authorization in tp-link:lm firmware (high 7.8)
- [CVE-2013-2580](https://insights.sbomify.com/CVE-2013-2580/): File upload in tp-link:lm firmware (high 7.1)
- [CVE-2013-2579](https://insights.sbomify.com/CVE-2013-2579/): Hardcoded credentials in tp-link:lm firmware (critical 10.0)
- [CVE-2013-2578](https://insights.sbomify.com/CVE-2013-2578/): Command injection in tp-link:lm firmware (critical 10.0)
- [CVE-2013-2577](https://insights.sbomify.com/CVE-2013-2577/): Memory corruption in xnview:xnview (critical 9.3)
- [CVE-2013-2576](https://insights.sbomify.com/CVE-2013-2576/): Memory corruption in b-e-soft:artweaver (medium 6.8)
- [CVE-2013-2574](https://insights.sbomify.com/CVE-2013-2574/): Information disclosure in foscam:fi8620 firmware (high 7.5)
- [CVE-2013-2573](https://insights.sbomify.com/CVE-2013-2573/): Command injection in tp-link:tl-sc 3130g firmware (critical 9.8)
- [CVE-2013-2572](https://insights.sbomify.com/CVE-2013-2572/): Hardcoded credentials in tp-link:tl-sc 3130 firmware (high 7.5)
- [CVE-2013-2571](https://insights.sbomify.com/CVE-2013-2571/): Command injection in hcomm:xpient iris (critical 9.8)
- [CVE-2013-2570](https://insights.sbomify.com/CVE-2013-2570/): Command injection in zavio:f3105 firmware (critical 9.8)
- [CVE-2013-2569](https://insights.sbomify.com/CVE-2013-2569/): Auth bypass in zavio:f3105 firmware (high 7.5)
- [CVE-2013-2568](https://insights.sbomify.com/CVE-2013-2568/): Command injection in zavio:f3105 firmware (critical 9.8)
- [CVE-2013-2567](https://insights.sbomify.com/CVE-2013-2567/): Hardcoded credentials in zavio:f3105 firmware (high 7.5)
- [CVE-2013-2566](https://insights.sbomify.com/CVE-2013-2566/): Weak cryptography in canonical:ubuntu linux (medium 5.9)
- [CVE-2013-2565](https://insights.sbomify.com/CVE-2013-2565/): Information disclosure in Mambo CMS (medium 5.3)
- [CVE-2013-2564](https://insights.sbomify.com/CVE-2013-2564/): Denial of service in mambo-foundation:mambo cms (medium 5.0)
- [CVE-2013-2563](https://insights.sbomify.com/CVE-2013-2563/): Misconfiguration in mambo-foundation:mambo cms (low 2.1)
- [CVE-2013-2562](https://insights.sbomify.com/CVE-2013-2562/): Information disclosure in mambo-foundation:mambo cms (low 2.1)
- [CVE-2013-2561](https://insights.sbomify.com/CVE-2013-2561/): Other in openfabrics:ibutils (medium 6.3)
- [CVE-2013-2560](https://insights.sbomify.com/CVE-2013-2560/): Path traversal in foscam:fi8919w (high 7.8)
- [CVE-2013-2559](https://insights.sbomify.com/CVE-2013-2559/): SQL injection in getsymphony:symphony (medium 6.5)
- [CVE-2013-2558](https://insights.sbomify.com/CVE-2013-2558/): Denial of service in microsoft:windows 8 (critical 10.0)
- [CVE-2013-2557](https://insights.sbomify.com/CVE-2013-2557/): Memory corruption in microsoft:internet explorer (high 7.5)
- [CVE-2013-2556](https://insights.sbomify.com/CVE-2013-2556/): Security feature bypass in microsoft:windows 7 (high 7.5)
- [CVE-2013-2555](https://insights.sbomify.com/CVE-2013-2555/): Integer overflow in adobe:air (critical 10.0)
- [CVE-2013-2554](https://insights.sbomify.com/CVE-2013-2554/): Security feature bypass in microsoft:windows 7 (high 7.5)
- [CVE-2013-2553](https://insights.sbomify.com/CVE-2013-2553/): Privilege escalation in microsoft:windows 7 (high 7.2)
- [CVE-2013-2552](https://insights.sbomify.com/CVE-2013-2552/): Security feature bypass in microsoft:internet explorer (high 7.5)
- [CVE-2013-2551](https://insights.sbomify.com/CVE-2013-2551/): Microsoft Internet Explorer Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2013-2550](https://insights.sbomify.com/CVE-2013-2550/): Security feature bypass in adobe:acrobat reader (high 7.5)
- [CVE-2013-2549](https://insights.sbomify.com/CVE-2013-2549/): Code injection in adobe:acrobat reader (high 7.5)
- [CVE-2013-2548](https://insights.sbomify.com/CVE-2013-2548/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-2547](https://insights.sbomify.com/CVE-2013-2547/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-2546](https://insights.sbomify.com/CVE-2013-2546/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-2516](https://insights.sbomify.com/CVE-2013-2516/): Fileutils Command Injection vulnerability (high 8.8)
- [CVE-2013-2513](https://insights.sbomify.com/CVE-2013-2513/): flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution (critical 9.8)
- [CVE-2013-2512](https://insights.sbomify.com/CVE-2013-2512/): OS Command Injection in ftpd (critical 9.8)
- [CVE-2013-2507](https://insights.sbomify.com/CVE-2013-2507/): Cross-site scripting in brother:mfc-9970cdw (medium 4.3)
- [CVE-2013-2506](https://insights.sbomify.com/CVE-2013-2506/): spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles (medium 4.0)
- [CVE-2013-2504](https://insights.sbomify.com/CVE-2013-2504/): Cross-site scripting in matrix42:service store (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/39/