# Vulnerabilities published in 2013 - [CVE-2013-2294](https://insights.sbomify.com/CVE-2013-2294/): Cross-site scripting in viewgit project:viewgit (medium 6.1) - [CVE-2013-2293](https://insights.sbomify.com/CVE-2013-2293/): Denial of service in bitcoin:bitcoin-qt (medium 5.0) - [CVE-2013-2292](https://insights.sbomify.com/CVE-2013-2292/): Denial of service in bitcoin:bitcoin-qt (high 7.8) - [CVE-2013-2290](https://insights.sbomify.com/CVE-2013-2290/): Cross-site scripting in arubanetworks:arubaos (medium 4.3) - [CVE-2013-2289](https://insights.sbomify.com/CVE-2013-2289/): Cross-site scripting in batavi:batavi (medium 4.3) - [CVE-2013-2287](https://insights.sbomify.com/CVE-2013-2287/): Cross-site scripting in roberta bramski:uploader (medium 4.3) - [CVE-2013-2279](https://insights.sbomify.com/CVE-2013-2279/): Auth bypass in siteminder agent for sharepoint:2010 (high 7.5) - [CVE-2013-2278](https://insights.sbomify.com/CVE-2013-2278/): Memory corruption in jgaa:warftpd (critical 10.0) - [CVE-2013-2277](https://insights.sbomify.com/CVE-2013-2277/): Memory corruption in ffmpeg:ffmpeg (high 7.5) - [CVE-2013-2276](https://insights.sbomify.com/CVE-2013-2276/): Memory corruption in ffmpeg:ffmpeg (high 7.5) - [CVE-2013-2275](https://insights.sbomify.com/CVE-2013-2275/): Missing authorization in canonical:ubuntu linux (medium 4.0) - [CVE-2013-2274](https://insights.sbomify.com/CVE-2013-2274/): Code injection in puppet:puppet (medium 6.5) - [CVE-2013-2273](https://insights.sbomify.com/CVE-2013-2273/): Weak cryptography in bitcoin:bitcoin-qt (medium 5.0) - [CVE-2013-2272](https://insights.sbomify.com/CVE-2013-2272/): Information disclosure in bitcoin:bitcoin-qt (medium 5.0) - [CVE-2013-2271](https://insights.sbomify.com/CVE-2013-2271/): Auth bypass in dlink:dsl-2740b (high 7.6) - [CVE-2013-2270](https://insights.sbomify.com/CVE-2013-2270/): Cross-site scripting in airvana:hubbub c1-600-rt (medium 4.3) - [CVE-2013-2269](https://insights.sbomify.com/CVE-2013-2269/): Auth bypass in arubanetworks:clearpass (medium 5.0) - [CVE-2013-2268](https://insights.sbomify.com/CVE-2013-2268/): Other in google:chrome (high 7.5) - [CVE-2013-2267](https://insights.sbomify.com/CVE-2013-2267/): Code injection in fudforum:fudforum (high 7.2) - [CVE-2013-2266](https://insights.sbomify.com/CVE-2013-2266/): Denial of service in isc:bind (high 7.8) - [CVE-2013-2264](https://insights.sbomify.com/CVE-2013-2264/): Information disclosure in asterisk:business edition (medium 5.0) - [CVE-2013-2263](https://insights.sbomify.com/CVE-2013-2263/): Other in citrix:access gateway (medium 5.0) - [CVE-2013-2262](https://insights.sbomify.com/CVE-2013-2262/): Information disclosure in Cryptocat (high 7.5) - [CVE-2013-2261](https://insights.sbomify.com/CVE-2013-2261/): Information disclosure in cryptocat project:cryptocat (high 7.5) - [CVE-2013-2260](https://insights.sbomify.com/CVE-2013-2260/): Weak cryptography in Cryptocat (critical 9.8) - [CVE-2013-2259](https://insights.sbomify.com/CVE-2013-2259/): Code injection in Cryptocat (critical 9.8) - [CVE-2013-2258](https://insights.sbomify.com/CVE-2013-2258/): Auth bypass in Cryptocat (medium 5.3) - [CVE-2013-2257](https://insights.sbomify.com/CVE-2013-2257/): Weak cryptography in Cryptocat (high 7.5) - [CVE-2013-2256](https://insights.sbomify.com/CVE-2013-2256/): OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information (medium 6.0) - [CVE-2013-2255](https://insights.sbomify.com/CVE-2013-2255/): OpenStack Keystone and other components vulnerable to Improper Certificate Validation (medium 5.9) - [CVE-2013-2254](https://insights.sbomify.com/CVE-2013-2254/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling (medium 5.0) - [CVE-2013-2251](https://insights.sbomify.com/CVE-2013-2251/): Apache Struts Improper Input Validation (critical 9.8, exploited in the wild) - [CVE-2013-2250](https://insights.sbomify.com/CVE-2013-2250/): Code injection in apache:ofbiz (critical 10.0) - [CVE-2013-2249](https://insights.sbomify.com/CVE-2013-2249/): Other in apache:http server (high 7.5) - [CVE-2013-2248](https://insights.sbomify.com/CVE-2013-2248/): Open redirect in Apache Struts (medium 5.8) - [CVE-2013-2247](https://insights.sbomify.com/CVE-2013-2247/): Missing authorization in fast permissions administration project:fast permission administration (high 7.5) - [CVE-2013-2246](https://insights.sbomify.com/CVE-2013-2246/): Missing authorization in moodle:moodle (medium 4.0) - [CVE-2013-2245](https://insights.sbomify.com/CVE-2013-2245/): Information disclosure in moodle:moodle (medium 4.0) - [CVE-2013-2244](https://insights.sbomify.com/CVE-2013-2244/): Cross-site scripting in moodle:moodle (medium 4.3) - [CVE-2013-2243](https://insights.sbomify.com/CVE-2013-2243/): Information disclosure in moodle:moodle (medium 4.0) - [CVE-2013-2242](https://insights.sbomify.com/CVE-2013-2242/): Missing authorization in moodle:moodle (medium 4.0) - [CVE-2013-2241](https://insights.sbomify.com/CVE-2013-2241/): Missing authorization in menalto:gallery (medium 5.0) - [CVE-2013-2240](https://insights.sbomify.com/CVE-2013-2240/): Other in menalto:gallery (high 7.5) - [CVE-2013-2239](https://insights.sbomify.com/CVE-2013-2239/): Information disclosure in openvz:vzkernel (medium 4.7) - [CVE-2013-2238](https://insights.sbomify.com/CVE-2013-2238/): Memory corruption in freeswitch:freeswitch (medium 6.8) - [CVE-2013-2237](https://insights.sbomify.com/CVE-2013-2237/): Information disclosure in linux:linux kernel (low 2.1) - [CVE-2013-2236](https://insights.sbomify.com/CVE-2013-2236/): Memory corruption in quagga:quagga (low 2.6) - [CVE-2013-2234](https://insights.sbomify.com/CVE-2013-2234/): Information disclosure in linux:linux kernel (low 2.1) - [CVE-2013-2233](https://insights.sbomify.com/CVE-2013-2233/): Ansible fails to cache SSH host keys (high 7.4) - [CVE-2013-2232](https://insights.sbomify.com/CVE-2013-2232/): Denial of service in linux:linux kernel (medium 4.9) - [CVE-2013-2231](https://insights.sbomify.com/CVE-2013-2231/): Privilege escalation in redhat:enterprise linux (high 7.2) - [CVE-2013-2230](https://insights.sbomify.com/CVE-2013-2230/): Denial of service in redhat:libvirt (medium 4.0) - [CVE-2013-2228](https://insights.sbomify.com/CVE-2013-2228/): SaltStack RSA Key Generation allows remote users to decrypt communications (high 8.1) - [CVE-2013-2227](https://insights.sbomify.com/CVE-2013-2227/): Path traversal in GLPI (high 7.5) - [CVE-2013-2226](https://insights.sbomify.com/CVE-2013-2226/): SQL injection in glpi-project:glpi (high 7.5) - [CVE-2013-2225](https://insights.sbomify.com/CVE-2013-2225/): Deserialization in glpi-project:glpi (medium 6.4) - [CVE-2013-2224](https://insights.sbomify.com/CVE-2013-2224/): Memory corruption in redhat:enterprise linux (medium 6.9) - [CVE-2013-2223](https://insights.sbomify.com/CVE-2013-2223/): Memory corruption in wernerd:zrtpcpp (medium 5.8) - [CVE-2013-2222](https://insights.sbomify.com/CVE-2013-2222/): Memory corruption in wernerd:zrtpcpp (medium 6.8) - [CVE-2013-2221](https://insights.sbomify.com/CVE-2013-2221/): Memory corruption in wernerd:zrtpcpp (high 7.5) - [CVE-2013-2220](https://insights.sbomify.com/CVE-2013-2220/): Memory corruption in radius extension project:radius (high 7.5) - [CVE-2013-2219](https://insights.sbomify.com/CVE-2013-2219/): Missing authorization in fedoraproject:389 directory server (medium 4.0) - [CVE-2013-2218](https://insights.sbomify.com/CVE-2013-2218/): Memory corruption in redhat:libvirt (medium 5.0) - [CVE-2013-2217](https://insights.sbomify.com/CVE-2013-2217/): Improper Link Resolution Before File Access in Suds (low 1.2) - [CVE-2013-2214](https://insights.sbomify.com/CVE-2013-2214/): Missing authorization in nagios:nagios (medium 4.0) - [CVE-2013-2213](https://insights.sbomify.com/CVE-2013-2213/): Weak cryptography in KDE Paste Applet (medium 5.5) - [CVE-2013-2212](https://insights.sbomify.com/CVE-2013-2212/): Denial of service in xen:xen (medium 5.7) - [CVE-2013-2211](https://insights.sbomify.com/CVE-2013-2211/): Misconfiguration in xen:xen (high 7.4) - [CVE-2013-2210](https://insights.sbomify.com/CVE-2013-2210/): Memory corruption in apache:xml security for c\+\+ (high 7.5) - [CVE-2013-2209](https://insights.sbomify.com/CVE-2013-2209/): Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown (medium 4.3) - [CVE-2013-2208](https://insights.sbomify.com/CVE-2013-2208/): Command injection in andreas krennmair:tpp (medium 6.8) - [CVE-2013-2207](https://insights.sbomify.com/CVE-2013-2207/): Missing authorization in fedoraproject:fedora (low 2.6) - [CVE-2013-2206](https://insights.sbomify.com/CVE-2013-2206/): Null dereference in linux:linux kernel (medium 5.4) - [CVE-2013-2205](https://insights.sbomify.com/CVE-2013-2205/): Misconfiguration in wordpress:wordpress (medium 4.3) - [CVE-2013-2204](https://insights.sbomify.com/CVE-2013-2204/): Other in tinymce:media (medium 4.3) - [CVE-2013-2203](https://insights.sbomify.com/CVE-2013-2203/): Information disclosure in wordpress:wordpress (medium 4.3) - [CVE-2013-2202](https://insights.sbomify.com/CVE-2013-2202/): XML external entity in wordpress:wordpress (medium 4.3) - [CVE-2013-2201](https://insights.sbomify.com/CVE-2013-2201/): Cross-site scripting in wordpress:wordpress (medium 4.3) - [CVE-2013-2200](https://insights.sbomify.com/CVE-2013-2200/): Missing authorization in wordpress:wordpress (medium 4.0) - [CVE-2013-2199](https://insights.sbomify.com/CVE-2013-2199/): Server-side request forgery in wordpress:wordpress (medium 4.3) - [CVE-2013-2198](https://insights.sbomify.com/CVE-2013-2198/): Auth bypass in Login Security (critical 9.8) - [CVE-2013-2197](https://insights.sbomify.com/CVE-2013-2197/): Denial of service in login security project:login security (medium 4.3) - [CVE-2013-2196](https://insights.sbomify.com/CVE-2013-2196/): Memory corruption in xen:xen (medium 6.9) - [CVE-2013-2195](https://insights.sbomify.com/CVE-2013-2195/): Memory corruption in xen:xen (medium 6.9) - [CVE-2013-2194](https://insights.sbomify.com/CVE-2013-2194/): Integer overflow in xen:xen (medium 6.9) - [CVE-2013-2193](https://insights.sbomify.com/CVE-2013-2193/): Auth bypass in apache:hbase (medium 4.3) - [CVE-2013-2192](https://insights.sbomify.com/CVE-2013-2192/): Improper Authentication in Apache Hadoop (low 3.2) - [CVE-2013-2191](https://insights.sbomify.com/CVE-2013-2191/): python-bugzilla has improper validation of X.509 certificates (medium 4.3) - [CVE-2013-2190](https://insights.sbomify.com/CVE-2013-2190/): Security feature bypass in clutter project:clutter (low 2.1) - [CVE-2013-2189](https://insights.sbomify.com/CVE-2013-2189/): Memory corruption in apache:openoffice (medium 6.8) - [CVE-2013-2188](https://insights.sbomify.com/CVE-2013-2188/): Denial of service in redhat:enterprise linux (medium 4.7) - [CVE-2013-2187](https://insights.sbomify.com/CVE-2013-2187/): Cross-site scripting in apache:archiva (medium 4.3) - [CVE-2013-2186](https://insights.sbomify.com/CVE-2013-2186/): Arbitrary file write in Apache Commons Fileupload (high 7.5) - [CVE-2013-2185](https://insights.sbomify.com/CVE-2013-2185/): Deserialization of Untrusted Data in Apache Tomcat (high 7.5) - [CVE-2013-2184](https://insights.sbomify.com/CVE-2013-2184/): Deserialization in sixapart:movable type (high 7.5) - [CVE-2013-2183](https://insights.sbomify.com/CVE-2013-2183/): Security feature bypass in monkey (high 7.1) - [CVE-2013-2182](https://insights.sbomify.com/CVE-2013-2182/): Security feature bypass in monkey-project:monkey (medium 5.8) - [CVE-2013-2181](https://insights.sbomify.com/CVE-2013-2181/): Cross-site scripting in monkey-project:monkey (medium 4.3) - [CVE-2013-2179](https://insights.sbomify.com/CVE-2013-2179/): Null dereference in x:x display manager (medium 4.3) - [CVE-2013-2178](https://insights.sbomify.com/CVE-2013-2178/): Denial of service in fail2ban:fail2ban (medium 5.0) --- From sbomify Insights: https://insights.sbomify.com/years/2013/page/42/