# Vulnerabilities published in 2013


- [CVE-2013-2177](https://insights.sbomify.com/CVE-2013-2177/): Cross-site scripting in kristof de jaeger:display suite (medium 4.3)
- [CVE-2013-2176](https://insights.sbomify.com/CVE-2013-2176/): Privilege escalation in redhat:enterprise virtualization (high 7.2)
- [CVE-2013-2175](https://insights.sbomify.com/CVE-2013-2175/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2013-2174](https://insights.sbomify.com/CVE-2013-2174/): Memory corruption in canonical:ubuntu linux (medium 6.8)
- [CVE-2013-2173](https://insights.sbomify.com/CVE-2013-2173/): Denial of service in wordpress:wordpress (medium 4.3)
- [CVE-2013-2172](https://insights.sbomify.com/CVE-2013-2172/): Inefficient Algorithmic Complexity in Apache Santuario XML Security (medium 4.3)
- [CVE-2013-2171](https://insights.sbomify.com/CVE-2013-2171/): Privilege escalation in freebsd:freebsd (medium 6.9)
- [CVE-2013-2168](https://insights.sbomify.com/CVE-2013-2168/): Denial of service in freedesktop:dbus (low 1.9)
- [CVE-2013-2167](https://insights.sbomify.com/CVE-2013-2167/): Insufficient Verification of Data Authenticity in python-keystoneclient (critical 9.8)
- [CVE-2013-2166](https://insights.sbomify.com/CVE-2013-2166/): Inadequate Encryption Strength in python-keystoneclient (critical 9.8)
- [CVE-2013-2165](https://insights.sbomify.com/CVE-2013-2165/): Remote code execution due to insecure deserialization (high 7.5)
- [CVE-2013-2164](https://insights.sbomify.com/CVE-2013-2164/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-2163](https://insights.sbomify.com/CVE-2013-2163/): Denial of service in monkey-project:monkey (medium 5.0)
- [CVE-2013-2162](https://insights.sbomify.com/CVE-2013-2162/): Race condition in canonical:ubuntu linux (low 1.9)
- [CVE-2013-2161](https://insights.sbomify.com/CVE-2013-2161/): OpenStack Swift Unchecked user input in XML responses (high 7.5)
- [CVE-2013-2160](https://insights.sbomify.com/CVE-2013-2160/): Missing XML Validation in Apache CXF (medium 5.0)
- [CVE-2013-2159](https://insights.sbomify.com/CVE-2013-2159/): Auth bypass in monkey (critical 9.8)
- [CVE-2013-2158](https://insights.sbomify.com/CVE-2013-2158/): Cross-site request forgery in services project:services (medium 6.8)
- [CVE-2013-2157](https://insights.sbomify.com/CVE-2013-2157/): Auth bypass in openstack:keystone (medium 4.3)
- [CVE-2013-2156](https://insights.sbomify.com/CVE-2013-2156/): Memory corruption in apache:xml security for c\+\+ (high 7.5)
- [CVE-2013-2155](https://insights.sbomify.com/CVE-2013-2155/): Security feature bypass in apache:xml security for c\+\+ (medium 5.8)
- [CVE-2013-2154](https://insights.sbomify.com/CVE-2013-2154/): Memory corruption in apache:xml security for c\+\+ (high 7.5)
- [CVE-2013-2153](https://insights.sbomify.com/CVE-2013-2153/): Security feature bypass in apache:xml security for c\+\+ (medium 4.3)
- [CVE-2013-2152](https://insights.sbomify.com/CVE-2013-2152/): Privilege escalation in redhat:enterprise virtualization (high 7.2)
- [CVE-2013-2151](https://insights.sbomify.com/CVE-2013-2151/): Privilege escalation in redhat:enterprise virtualization (high 7.2)
- [CVE-2013-2150](https://insights.sbomify.com/CVE-2013-2150/): Cross-site scripting in owncloud:owncloud (low 3.5)
- [CVE-2013-2149](https://insights.sbomify.com/CVE-2013-2149/): Cross-site scripting in owncloud:owncloud (low 3.5)
- [CVE-2013-2148](https://insights.sbomify.com/CVE-2013-2148/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-2147](https://insights.sbomify.com/CVE-2013-2147/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-2146](https://insights.sbomify.com/CVE-2013-2146/): Denial of service in linux:linux kernel (medium 4.7)
- [CVE-2013-2145](https://insights.sbomify.com/CVE-2013-2145/): Security feature bypass in canonical:ubuntu linux (medium 4.4)
- [CVE-2013-2144](https://insights.sbomify.com/CVE-2013-2144/): Missing authorization in redhat:enterprise virtualization manager (medium 5.0)
- [CVE-2013-2143](https://insights.sbomify.com/CVE-2013-2143/): Missing authorization in redhat:network satellite (medium 6.5)
- [CVE-2013-2142](https://insights.sbomify.com/CVE-2013-2142/): Race condition in libimobiledevice:libimobiledevice (low 3.3)
- [CVE-2013-2141](https://insights.sbomify.com/CVE-2013-2141/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-2140](https://insights.sbomify.com/CVE-2013-2140/): Denial of service in linux:linux kernel (low 3.8)
- [CVE-2013-2139](https://insights.sbomify.com/CVE-2013-2139/): Memory corruption in cisco:libsrtp (low 2.6)
- [CVE-2013-2138](https://insights.sbomify.com/CVE-2013-2138/): Other in menalto:gallery (high 7.5)
- [CVE-2013-2137](https://insights.sbomify.com/CVE-2013-2137/): Cross-site scripting in apache:ofbiz (medium 4.3)
- [CVE-2013-2136](https://insights.sbomify.com/CVE-2013-2136/): Cross-site scripting in apache:cloudstack (medium 4.3)
- [CVE-2013-2135](https://insights.sbomify.com/CVE-2013-2135/): Arbitrary code execution in Apache Struts 2 (critical 9.3)
- [CVE-2013-2134](https://insights.sbomify.com/CVE-2013-2134/): Arbitrary code execution in Apache Struts 2 (critical 9.3)
- [CVE-2013-2133](https://insights.sbomify.com/CVE-2013-2133/): Missing authorization in redhat:enterprise linux (medium 5.5)
- [CVE-2013-2132](https://insights.sbomify.com/CVE-2013-2132/): Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo (medium 4.3)
- [CVE-2013-2131](https://insights.sbomify.com/CVE-2013-2131/): Memory corruption in rrdtool project:rrdtool (medium 5.0)
- [CVE-2013-2130](https://insights.sbomify.com/CVE-2013-2130/): Null dereference in znc:znc (medium 4.0)
- [CVE-2013-2129](https://insights.sbomify.com/CVE-2013-2129/): Cross-site scripting in nathan haug:webform (medium 4.3)
- [CVE-2013-2128](https://insights.sbomify.com/CVE-2013-2128/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2013-2127](https://insights.sbomify.com/CVE-2013-2127/): Memory corruption in libraw:libraw (high 7.5)
- [CVE-2013-2126](https://insights.sbomify.com/CVE-2013-2126/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2013-2125](https://insights.sbomify.com/CVE-2013-2125/): Denial of service in openbsd:opensmtpd (medium 5.0)
- [CVE-2013-2124](https://insights.sbomify.com/CVE-2013-2124/): Memory corruption in libguestfs:libguestfs (medium 4.3)
- [CVE-2013-2123](https://insights.sbomify.com/CVE-2013-2123/): Missing authorization in node access user reference project:nodeaccess userreference module (medium 5.8)
- [CVE-2013-2122](https://insights.sbomify.com/CVE-2013-2122/): Missing authorization in quade:edit limit (medium 5.0)
- [CVE-2013-2121](https://insights.sbomify.com/CVE-2013-2121/): Code injection in redhat:openstack (medium 6.0)
- [CVE-2013-2120](https://insights.sbomify.com/CVE-2013-2120/): Auth bypass in KDE Paste Applet (high 8.4)
- [CVE-2013-2119](https://insights.sbomify.com/CVE-2013-2119/): Phusion Passenger Denial of Service (medium 4.6)
- [CVE-2013-2118](https://insights.sbomify.com/CVE-2013-2118/): Privilege escalation in spip:spip (high 7.5)
- [CVE-2013-2117](https://insights.sbomify.com/CVE-2013-2117/): Path traversal in jason a donenfeld:cgit (medium 4.3)
- [CVE-2013-2116](https://insights.sbomify.com/CVE-2013-2116/): Memory corruption in gnu:gnutls (medium 5.0)
- [CVE-2013-2115](https://insights.sbomify.com/CVE-2013-2115/): Code injection in Apache Struts (high 8.1)
- [CVE-2013-2114](https://insights.sbomify.com/CVE-2013-2114/): File upload in mediawiki:mediawiki (medium 6.8)
- [CVE-2013-2113](https://insights.sbomify.com/CVE-2013-2113/): Privilege escalation in redhat:openstack (medium 6.0)
- [CVE-2013-2112](https://insights.sbomify.com/CVE-2013-2112/): Denial of service in apache:subversion (high 7.8)
- [CVE-2013-2111](https://insights.sbomify.com/CVE-2013-2111/): Denial of service in dovecot:dovecot (medium 5.0)
- [CVE-2013-2110](https://insights.sbomify.com/CVE-2013-2110/): Memory corruption in php:php (medium 5.0)
- [CVE-2013-2109](https://insights.sbomify.com/CVE-2013-2109/): Cross-site request forgery in wp-cleanfix (high 8.8)
- [CVE-2013-2108](https://insights.sbomify.com/CVE-2013-2108/): Cross-site request forgery in WP Cleanfix Plugin (medium 5.4)
- [CVE-2013-2107](https://insights.sbomify.com/CVE-2013-2107/): Cross-site request forgery in mail on update project:mail on update (medium 6.8)
- [CVE-2013-2106](https://insights.sbomify.com/CVE-2013-2106/): Information disclosure in webauth (high 7.5)
- [CVE-2013-2105](https://insights.sbomify.com/CVE-2013-2105/): Script Injection in Show In Browser gem (low 3.3)
- [CVE-2013-2104](https://insights.sbomify.com/CVE-2013-2104/): python-keystoneclient missing expiration check in PKI token validation (medium 5.5)
- [CVE-2013-2103](https://insights.sbomify.com/CVE-2013-2103/): Server-side request forgery in OpenShift cartridge (high 8.1)
- [CVE-2013-2102](https://insights.sbomify.com/CVE-2013-2102/): Misconfiguration in redhat:jboss enterprise portal platform (low 3.3)
- [CVE-2013-2101](https://insights.sbomify.com/CVE-2013-2101/): Cross-site scripting in Katello (medium 5.4)
- [CVE-2013-2100](https://insights.sbomify.com/CVE-2013-2100/): Gentoo Portage does not verify X.509 certificates from SSL servers (critical 9.3)
- [CVE-2013-2099](https://insights.sbomify.com/CVE-2013-2099/): Denial of service in canonical:ubuntu linux (medium 4.3)
- [CVE-2013-2097](https://insights.sbomify.com/CVE-2013-2097/): Command injection in ZPanel (high 7.8)
- [CVE-2013-2096](https://insights.sbomify.com/CVE-2013-2096/): OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image (low 2.1)
- [CVE-2013-2095](https://insights.sbomify.com/CVE-2013-2095/): RubyGem openshift-origin-controller is vulnerable to command injection (critical 9.8)
- [CVE-2013-2094](https://insights.sbomify.com/CVE-2013-2094/): Linux Kernel Privilege Escalation (high 8.4, exploited in the wild)
- [CVE-2013-2093](https://insights.sbomify.com/CVE-2013-2093/): Command injection in dolibarr (critical 9.8)
- [CVE-2013-2092](https://insights.sbomify.com/CVE-2013-2092/): Cross-site scripting in dolibarr (medium 6.1)
- [CVE-2013-2091](https://insights.sbomify.com/CVE-2013-2091/): SQL injection in dolibarr (critical 9.8)
- [CVE-2013-2090](https://insights.sbomify.com/CVE-2013-2090/): Creme Fraiche contains OS Command Injection (critical 9.3)
- [CVE-2013-2089](https://insights.sbomify.com/CVE-2013-2089/): File upload in owncloud:owncloud (medium 4.6)
- [CVE-2013-2088](https://insights.sbomify.com/CVE-2013-2088/): Command injection in apache:subversion (high 7.1)
- [CVE-2013-2087](https://insights.sbomify.com/CVE-2013-2087/): Cross-site scripting in galleryproject:gallery (medium 4.3)
- [CVE-2013-2086](https://insights.sbomify.com/CVE-2013-2086/): Information disclosure in owncloud:owncloud server (medium 5.0)
- [CVE-2013-2085](https://insights.sbomify.com/CVE-2013-2085/): Path traversal in owncloud:owncloud (medium 4.0)
- [CVE-2013-2083](https://insights.sbomify.com/CVE-2013-2083/): Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class (medium 5.0)
- [CVE-2013-2082](https://insights.sbomify.com/CVE-2013-2082/): Moodle does not enforce capability requirements for reading blog comments (medium 5.0)
- [CVE-2013-2081](https://insights.sbomify.com/CVE-2013-2081/): Moodle does not consider "don't send" attributes during hub registration (medium 4.3)
- [CVE-2013-2080](https://insights.sbomify.com/CVE-2013-2080/): Moodle is vulnerable to Sensitive Information Disclosure (medium 4.0)
- [CVE-2013-2079](https://insights.sbomify.com/CVE-2013-2079/): Missing authorization in moodle:moodle (medium 4.0)
- [CVE-2013-2078](https://insights.sbomify.com/CVE-2013-2078/): Denial of service in xen:xen (medium 4.7)
- [CVE-2013-2077](https://insights.sbomify.com/CVE-2013-2077/): Denial of service in xen:xen (medium 5.2)
- [CVE-2013-2076](https://insights.sbomify.com/CVE-2013-2076/): Information disclosure in xen:xen (medium 4.3)
- [CVE-2013-2075](https://insights.sbomify.com/CVE-2013-2075/): Memory corruption in chicken (high 8.8)
- [CVE-2013-2074](https://insights.sbomify.com/CVE-2013-2074/): Information disclosure in kde:kdelibs (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/43/