# Vulnerabilities published in 2013


- [CVE-2013-1981](https://insights.sbomify.com/CVE-2013-1981/): Integer overflow in canonical:ubuntu linux (medium 6.8)
- [CVE-2013-1980](https://insights.sbomify.com/CVE-2013-1980/): Memory corruption in extended module player project:extended module player (medium 6.8)
- [CVE-2013-1979](https://insights.sbomify.com/CVE-2013-1979/): Privilege escalation in linux:linux kernel (medium 6.9)
- [CVE-2013-1978](https://insights.sbomify.com/CVE-2013-1978/): Memory corruption in gimp:gimp (medium 6.8)
- [CVE-2013-1977](https://insights.sbomify.com/CVE-2013-1977/): Misconfiguration in openstack:devstack (low 2.1)
- [CVE-2013-1976](https://insights.sbomify.com/CVE-2013-1976/): Other in redhat:enterprise linux (medium 6.9)
- [CVE-2013-1973](https://insights.sbomify.com/CVE-2013-1973/): Missing authorization in autocomplete widgets project:autocomplete widgets (medium 4.0)
- [CVE-2013-1972](https://insights.sbomify.com/CVE-2013-1972/): Cross-site request forgery in alexey sukhotin:elfinder (medium 4.3)
- [CVE-2013-1971](https://insights.sbomify.com/CVE-2013-1971/): Cross-site scripting in jordan de laune:mp3 player (low 2.1)
- [CVE-2013-1969](https://insights.sbomify.com/CVE-2013-1969/): Use after free in xmlsoft:libxml2 (high 7.5)
- [CVE-2013-1968](https://insights.sbomify.com/CVE-2013-1968/): Denial of service in apache:subversion (medium 5.5)
- [CVE-2013-1967](https://insights.sbomify.com/CVE-2013-1967/): Cross-site scripting in mediaelementjs:mediaelement.js (medium 4.3)
- [CVE-2013-1966](https://insights.sbomify.com/CVE-2013-1966/): Arbitrary code execution in Apache Struts (critical 9.3)
- [CVE-2013-1965](https://insights.sbomify.com/CVE-2013-1965/): Improper Control of Generation of Code in Apache Struts (critical 9.3)
- [CVE-2013-1964](https://insights.sbomify.com/CVE-2013-1964/): Other in xen:xen (medium 6.9)
- [CVE-2013-1963](https://insights.sbomify.com/CVE-2013-1963/): Missing authorization in owncloud:owncloud (medium 4.0)
- [CVE-2013-1962](https://insights.sbomify.com/CVE-2013-1962/): Denial of service in redhat:libvirt (medium 5.0)
- [CVE-2013-1961](https://insights.sbomify.com/CVE-2013-1961/): Memory corruption in remotesensing:libtiff (critical 9.3)
- [CVE-2013-1960](https://insights.sbomify.com/CVE-2013-1960/): Memory corruption in remotesensing:libtiff (critical 9.3)
- [CVE-2013-1959](https://insights.sbomify.com/CVE-2013-1959/): Privilege escalation in linux:linux kernel (low 3.7)
- [CVE-2013-1958](https://insights.sbomify.com/CVE-2013-1958/): Security feature bypass in linux:linux kernel (low 1.9)
- [CVE-2013-1957](https://insights.sbomify.com/CVE-2013-1957/): Security feature bypass in linux:linux kernel (medium 4.7)
- [CVE-2013-1956](https://insights.sbomify.com/CVE-2013-1956/): Security feature bypass in linux:linux kernel (low 2.1)
- [CVE-2013-1955](https://insights.sbomify.com/CVE-2013-1955/): Cross-site scripting in nashtech:easy php calendar (medium 4.3)
- [CVE-2013-1954](https://insights.sbomify.com/CVE-2013-1954/): Memory corruption in videolan:vlc media player (medium 6.8)
- [CVE-2013-1953](https://insights.sbomify.com/CVE-2013-1953/): Integer overflow in autotrace project:autotrace (medium 6.8)
- [CVE-2013-1952](https://insights.sbomify.com/CVE-2013-1952/): Other in xen:xen (low 1.9)
- [CVE-2013-1951](https://insights.sbomify.com/CVE-2013-1951/): Cross-site scripting in MediaWiki (medium 6.1)
- [CVE-2013-1950](https://insights.sbomify.com/CVE-2013-1950/): Memory corruption in libtirpc project:libtirpc (medium 4.3)
- [CVE-2013-1949](https://insights.sbomify.com/CVE-2013-1949/): Supply chain in blinkwebeffects:social-media-widget (medium 5.0)
- [CVE-2013-1948](https://insights.sbomify.com/CVE-2013-1948/): md2pdf allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename (critical 10.0)
- [CVE-2013-1947](https://insights.sbomify.com/CVE-2013-1947/): Shell Metacharacter Injection in kelredd-pruview (critical 9.3)
- [CVE-2013-1946](https://insights.sbomify.com/CVE-2013-1946/): Denial of service in restful web services project:restful web services (medium 4.3)
- [CVE-2013-1945](https://insights.sbomify.com/CVE-2013-1945/): Other in ruby193 (low 3.3)
- [CVE-2013-1944](https://insights.sbomify.com/CVE-2013-1944/): Information disclosure in canonical:ubuntu linux (medium 5.0)
- [CVE-2013-1943](https://insights.sbomify.com/CVE-2013-1943/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2013-1942](https://insights.sbomify.com/CVE-2013-1942/): Cross-site scripting in happyworm:jplayer (medium 4.3)
- [CVE-2013-1941](https://insights.sbomify.com/CVE-2013-1941/): Weak cryptography in owncloud:owncloud (medium 5.0)
- [CVE-2013-1940](https://insights.sbomify.com/CVE-2013-1940/): Information disclosure in canonical:ubuntu linux (low 2.1)
- [CVE-2013-1939](https://insights.sbomify.com/CVE-2013-1939/): SabreDAV Directory Traversal vulnerability (medium 5.0)
- [CVE-2013-1938](https://insights.sbomify.com/CVE-2013-1938/): Zimbra 2013 has XSS in aspell.php (medium 6.1)
- [CVE-2013-1937](https://insights.sbomify.com/CVE-2013-1937/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 6.1)
- [CVE-2013-1935](https://insights.sbomify.com/CVE-2013-1935/): Race condition in redhat:enterprise linux (medium 5.7)
- [CVE-2013-1934](https://insights.sbomify.com/CVE-2013-1934/): Cross-site scripting in mantisBT (medium 5.4)
- [CVE-2013-1933](https://insights.sbomify.com/CVE-2013-1933/): Karteek Docsplit vulnerable to OS Command Injection (critical 9.3)
- [CVE-2013-1932](https://insights.sbomify.com/CVE-2013-1932/): Cross-site scripting in mantisBT (medium 5.4)
- [CVE-2013-1931](https://insights.sbomify.com/CVE-2013-1931/): Cross-site scripting in mantisBT (medium 6.1)
- [CVE-2013-1930](https://insights.sbomify.com/CVE-2013-1930/): Missing authorization in mantisBT (medium 4.3)
- [CVE-2013-1929](https://insights.sbomify.com/CVE-2013-1929/): Memory corruption in linux:linux kernel (medium 4.4)
- [CVE-2013-1928](https://insights.sbomify.com/CVE-2013-1928/): Information disclosure in linux:linux kernel (medium 4.7)
- [CVE-2013-1927](https://insights.sbomify.com/CVE-2013-1927/): Security feature bypass in canonical:ubuntu linux (medium 6.8)
- [CVE-2013-1926](https://insights.sbomify.com/CVE-2013-1926/): Security feature bypass in canonical:ubuntu linux (medium 5.8)
- [CVE-2013-1925](https://insights.sbomify.com/CVE-2013-1925/): Missing authorization in chaos tool suite project:ctools (low 3.5)
- [CVE-2013-1924](https://insights.sbomify.com/CVE-2013-1924/): Auth bypass in Commerce Skrill (high 7.5)
- [CVE-2013-1923](https://insights.sbomify.com/CVE-2013-1923/): Information disclosure in linux-nfs:nfs-utils (low 3.2)
- [CVE-2013-1922](https://insights.sbomify.com/CVE-2013-1922/): Information disclosure in xen:xen (low 3.3)
- [CVE-2013-1921](https://insights.sbomify.com/CVE-2013-1921/): Information disclosure in redhat:jboss enterprise application platform (low 1.9)
- [CVE-2013-1920](https://insights.sbomify.com/CVE-2013-1920/): Use after free in xen:xen (medium 4.4)
- [CVE-2013-1919](https://insights.sbomify.com/CVE-2013-1919/): Missing authorization in xen:xen (medium 4.7)
- [CVE-2013-1918](https://insights.sbomify.com/CVE-2013-1918/): Denial of service in xen:xen (medium 4.7)
- [CVE-2013-1917](https://insights.sbomify.com/CVE-2013-1917/): Denial of service in xen:xen (low 1.9)
- [CVE-2013-1916](https://insights.sbomify.com/CVE-2013-1916/): File upload in WordPress Plugin User Photo (high 8.8)
- [CVE-2013-1915](https://insights.sbomify.com/CVE-2013-1915/): XML external entity in debian:debian linux (high 7.5)
- [CVE-2013-1914](https://insights.sbomify.com/CVE-2013-1914/): Memory corruption in gnu:glibc (medium 5.0)
- [CVE-2013-1913](https://insights.sbomify.com/CVE-2013-1913/): Integer overflow in gimp:gimp (medium 6.8)
- [CVE-2013-1912](https://insights.sbomify.com/CVE-2013-1912/): Memory corruption in haproxy:haproxy (medium 5.1)
- [CVE-2013-1911](https://insights.sbomify.com/CVE-2013-1911/): ldoce Gem Arbitrary Command Execution (medium 6.8)
- [CVE-2013-1910](https://insights.sbomify.com/CVE-2013-1910/): Other in yum (critical 9.8)
- [CVE-2013-1909](https://insights.sbomify.com/CVE-2013-1909/): Apache Qpid Python client Improper certificate validation (medium 5.8)
- [CVE-2013-1908](https://insights.sbomify.com/CVE-2013-1908/): Missing authorization in acquia:commons (medium 5.0)
- [CVE-2013-1907](https://insights.sbomify.com/CVE-2013-1907/): Missing authorization in acquia:commons (medium 5.0)
- [CVE-2013-1906](https://insights.sbomify.com/CVE-2013-1906/): Cross-site scripting in wolfgang ziegler:rules (medium 4.3)
- [CVE-2013-1905](https://insights.sbomify.com/CVE-2013-1905/): Cross-site scripting in catalin florian radut:zeropoint (medium 4.3)
- [CVE-2013-1904](https://insights.sbomify.com/CVE-2013-1904/): Path traversal in roundcube:webmail (medium 5.0)
- [CVE-2013-1903](https://insights.sbomify.com/CVE-2013-1903/): Information disclosure in postgresql:postgresql (critical 10.0)
- [CVE-2013-1902](https://insights.sbomify.com/CVE-2013-1902/): Race condition in postgresql:postgresql (critical 10.0)
- [CVE-2013-1901](https://insights.sbomify.com/CVE-2013-1901/): Missing authorization in canonical:ubuntu linux (medium 4.0)
- [CVE-2013-1900](https://insights.sbomify.com/CVE-2013-1900/): Weak cryptography in canonical:ubuntu linux (high 8.5)
- [CVE-2013-1899](https://insights.sbomify.com/CVE-2013-1899/): Command injection in canonical:ubuntu linux (medium 6.5)
- [CVE-2013-1898](https://insights.sbomify.com/CVE-2013-1898/): Thumbshooter vulnerable to Code Injection (high 7.5)
- [CVE-2013-1897](https://insights.sbomify.com/CVE-2013-1897/): Information disclosure in fedoraproject:389 directory server (low 2.6)
- [CVE-2013-1896](https://insights.sbomify.com/CVE-2013-1896/): Denial of service in apache:http server (medium 4.3)
- [CVE-2013-1895](https://insights.sbomify.com/CVE-2013-1895/): Improper Restriction of Excessive Authentication Attempts in py-bcrypt (high 7.5)
- [CVE-2013-1893](https://insights.sbomify.com/CVE-2013-1893/): SQL injection in owncloud:owncloud (medium 6.5)
- [CVE-2013-1892](https://insights.sbomify.com/CVE-2013-1892/): Memory corruption in mongodb:mongodb (medium 6.0)
- [CVE-2013-1891](https://insights.sbomify.com/CVE-2013-1891/): Path traversal in opencart (medium 6.5)
- [CVE-2013-1890](https://insights.sbomify.com/CVE-2013-1890/): Cross-site scripting in owncloud:owncloud (medium 4.3)
- [CVE-2013-1889](https://insights.sbomify.com/CVE-2013-1889/): Security feature bypass in libapache2-mod-ruid2 (high 7.5)
- [CVE-2013-1888](https://insights.sbomify.com/CVE-2013-1888/): Improper Link Resolution Before File Access in pip (low 2.1)
- [CVE-2013-1887](https://insights.sbomify.com/CVE-2013-1887/): Cross-site scripting in views project:views (low 2.1)
- [CVE-2013-1886](https://insights.sbomify.com/CVE-2013-1886/): Memory corruption in redhat:certificate system (high 7.5)
- [CVE-2013-1885](https://insights.sbomify.com/CVE-2013-1885/): Cross-site scripting in redhat:certificate system (medium 4.3)
- [CVE-2013-1884](https://insights.sbomify.com/CVE-2013-1884/): Memory corruption in apache:subversion (medium 5.0)
- [CVE-2013-1883](https://insights.sbomify.com/CVE-2013-1883/): Denial of service in mantisbt:mantisbt (medium 5.0)
- [CVE-2013-1881](https://insights.sbomify.com/CVE-2013-1881/): XML external entity in gnome:librsvg (medium 4.3)
- [CVE-2013-1880](https://insights.sbomify.com/CVE-2013-1880/): Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet (medium 4.3)
- [CVE-2013-1879](https://insights.sbomify.com/CVE-2013-1879/): Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ (medium 4.3)
- [CVE-2013-1875](https://insights.sbomify.com/CVE-2013-1875/): Shell command injection in command_wrap (high 7.5)
- [CVE-2013-1874](https://insights.sbomify.com/CVE-2013-1874/): Code injection in call-cc:chicken (medium 4.4)
- [CVE-2013-1872](https://insights.sbomify.com/CVE-2013-1872/): Memory corruption in canonical:ubuntu linux (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/45/