# Vulnerabilities published in 2013


- [CVE-2013-1871](https://insights.sbomify.com/CVE-2013-1871/): Cross-site scripting in redhat:satellite (low 3.5)
- [CVE-2013-1869](https://insights.sbomify.com/CVE-2013-1869/): Cross-site scripting in redhat:satellite (medium 4.3)
- [CVE-2013-1868](https://insights.sbomify.com/CVE-2013-1868/): Memory corruption in videolan:vlc media player (critical 9.3)
- [CVE-2013-1867](https://insights.sbomify.com/CVE-2013-1867/): Path traversal in Gemalto Tokend (medium 6.1)
- [CVE-2013-1866](https://insights.sbomify.com/CVE-2013-1866/): Path traversal in OpenSC.tokend (medium 6.1)
- [CVE-2013-1865](https://insights.sbomify.com/CVE-2013-1865/): OpenStack Keystone Improper Authentication vulnerability (medium 6.8)
- [CVE-2013-1864](https://insights.sbomify.com/CVE-2013-1864/): Denial of service in ekiga:ekiga (medium 4.3)
- [CVE-2013-1863](https://insights.sbomify.com/CVE-2013-1863/): Misconfiguration in samba:samba (medium 6.0)
- [CVE-2013-1862](https://insights.sbomify.com/CVE-2013-1862/): Command injection in apache:http server (medium 5.1)
- [CVE-2013-1861](https://insights.sbomify.com/CVE-2013-1861/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2013-1860](https://insights.sbomify.com/CVE-2013-1860/): Memory corruption in canonical:ubuntu linux (medium 6.9)
- [CVE-2013-1859](https://insights.sbomify.com/CVE-2013-1859/): Missing authorization in chris desautels:node parameter control (medium 6.4)
- [CVE-2013-1858](https://insights.sbomify.com/CVE-2013-1858/): Privilege escalation in linux:linux kernel (high 7.2)
- [CVE-2013-1857](https://insights.sbomify.com/CVE-2013-1857/): actionpack Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2013-1856](https://insights.sbomify.com/CVE-2013-1856/): activesupport Improper Input Validation vulnerability (medium 5.8)
- [CVE-2013-1855](https://insights.sbomify.com/CVE-2013-1855/): actionpack Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2013-1854](https://insights.sbomify.com/CVE-2013-1854/): Active Record Improper Input Validation (medium 5.0)
- [CVE-2013-1853](https://insights.sbomify.com/CVE-2013-1853/): Information disclosure in almanah project:almanah (low 2.1)
- [CVE-2013-1852](https://insights.sbomify.com/CVE-2013-1852/): SQL injection in kolja schleich:leaguemanager (high 7.5)
- [CVE-2013-1851](https://insights.sbomify.com/CVE-2013-1851/): File upload in owncloud:owncloud (low 3.5)
- [CVE-2013-1850](https://insights.sbomify.com/CVE-2013-1850/): File upload in owncloud:owncloud (medium 6.5)
- [CVE-2013-1849](https://insights.sbomify.com/CVE-2013-1849/): Null dereference in apache:subversion (medium 4.3)
- [CVE-2013-1848](https://insights.sbomify.com/CVE-2013-1848/): Memory corruption in linux:linux kernel (medium 6.2)
- [CVE-2013-1847](https://insights.sbomify.com/CVE-2013-1847/): Null dereference in apache:subversion (medium 5.0)
- [CVE-2013-1846](https://insights.sbomify.com/CVE-2013-1846/): Null dereference in apache:subversion (medium 4.0)
- [CVE-2013-1845](https://insights.sbomify.com/CVE-2013-1845/): Denial of service in apache:subversion (low 2.1)
- [CVE-2013-1844](https://insights.sbomify.com/CVE-2013-1844/): Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS) (medium 4.3)
- [CVE-2013-1843](https://insights.sbomify.com/CVE-2013-1843/): TYPO3 Open redirect vulnerability in the Access tracking mechanism (medium 6.4)
- [CVE-2013-1842](https://insights.sbomify.com/CVE-2013-1842/): TYPO3 SQL injection vulnerability in the Extbase Framework (high 7.5)
- [CVE-2013-1841](https://insights.sbomify.com/CVE-2013-1841/): Security feature bypass in seamons:net-server (medium 4.3)
- [CVE-2013-1840](https://insights.sbomify.com/CVE-2013-1840/): OpenStack Glance is vulnerable to Exposure of Sensitive Information (low 3.5)
- [CVE-2013-1839](https://insights.sbomify.com/CVE-2013-1839/): Denial of service in squid-cache:squid (high 7.8)
- [CVE-2013-1838](https://insights.sbomify.com/CVE-2013-1838/): OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function (medium 4.0)
- [CVE-2013-1836](https://insights.sbomify.com/CVE-2013-1836/): Moodle does not properly manage privileges for WebDAV repositories (medium 6.5)
- [CVE-2013-1835](https://insights.sbomify.com/CVE-2013-1835/): Moodle's login_as feature leaks information from external repositories (low 3.5)
- [CVE-2013-1834](https://insights.sbomify.com/CVE-2013-1834/): Moodle allows remote authenticated users to reassign notes (medium 4.0)
- [CVE-2013-1833](https://insights.sbomify.com/CVE-2013-1833/): Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module (low 3.5)
- [CVE-2013-1832](https://insights.sbomify.com/CVE-2013-1832/): Moodle includes the WebDAV password in the configuration form (medium 4.0)
- [CVE-2013-1831](https://insights.sbomify.com/CVE-2013-1831/): Moodle reveals absolute path in exception message (medium 5.0)
- [CVE-2013-1830](https://insights.sbomify.com/CVE-2013-1830/): Moodle does not enforce the forceloginforprofiles setting (medium 5.0)
- [CVE-2013-1829](https://insights.sbomify.com/CVE-2013-1829/): Missing authorization in moodle:moodle (medium 4.0)
- [CVE-2013-1828](https://insights.sbomify.com/CVE-2013-1828/): Memory corruption in linux:linux kernel (medium 6.9)
- [CVE-2013-1827](https://insights.sbomify.com/CVE-2013-1827/): Null dereference in linux:linux kernel (medium 6.2)
- [CVE-2013-1826](https://insights.sbomify.com/CVE-2013-1826/): Null dereference in linux:linux kernel (medium 6.2)
- [CVE-2013-1824](https://insights.sbomify.com/CVE-2013-1824/): XML external entity in apple:mac os x (medium 4.3)
- [CVE-2013-1823](https://insights.sbomify.com/CVE-2013-1823/): Cross-site scripting in redhat:subscription asset manager (medium 4.3)
- [CVE-2013-1822](https://insights.sbomify.com/CVE-2013-1822/): Cross-site scripting in owncloud:owncloud server (low 2.1)
- [CVE-2013-1821](https://insights.sbomify.com/CVE-2013-1821/): Ruby vulnerable to denial of service (medium 5.0)
- [CVE-2013-1820](https://insights.sbomify.com/CVE-2013-1820/): Misconfiguration in tuned (medium 5.5)
- [CVE-2013-1819](https://insights.sbomify.com/CVE-2013-1819/): Null dereference in linux:linux kernel (medium 4.6)
- [CVE-2013-1818](https://insights.sbomify.com/CVE-2013-1818/): Path traversal in mediawiki:mediawiki (medium 5.0)
- [CVE-2013-1817](https://insights.sbomify.com/CVE-2013-1817/): Information disclosure in mediawiki (high 7.5)
- [CVE-2013-1816](https://insights.sbomify.com/CVE-2013-1816/): Denial of service in mediawiki (high 7.5)
- [CVE-2013-1815](https://insights.sbomify.com/CVE-2013-1815/): Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation (medium 6.1)
- [CVE-2013-1814](https://insights.sbomify.com/CVE-2013-1814/): Apache Rave information disclosure vulnerability (medium 4.0)
- [CVE-2013-1813](https://insights.sbomify.com/CVE-2013-1813/): Misconfiguration in busybox:busybox (high 7.2)
- [CVE-2013-1812](https://insights.sbomify.com/CVE-2013-1812/): Denial of service in ruby-openid (medium 4.3)
- [CVE-2013-1811](https://insights.sbomify.com/CVE-2013-1811/): Missing authorization in mantis (medium 4.3)
- [CVE-2013-1810](https://insights.sbomify.com/CVE-2013-1810/): Cross-site scripting in mantisbt:mantisbt (low 2.1)
- [CVE-2013-1809](https://insights.sbomify.com/CVE-2013-1809/): Other in gambas3 (high 7.5)
- [CVE-2013-1808](https://insights.sbomify.com/CVE-2013-1808/): Cross-site scripting in zeroclipboard project:zeroclipboard (medium 4.3)
- [CVE-2013-1807](https://insights.sbomify.com/CVE-2013-1807/): Information disclosure in php-fusion:php-fusion (medium 5.0)
- [CVE-2013-1806](https://insights.sbomify.com/CVE-2013-1806/): Path traversal in php-fusion:php-fusion (medium 6.5)
- [CVE-2013-1804](https://insights.sbomify.com/CVE-2013-1804/): Cross-site scripting in php-fusion:php-fusion (medium 4.3)
- [CVE-2013-1803](https://insights.sbomify.com/CVE-2013-1803/): SQL injection in php-fusion:php-fusion (high 7.5)
- [CVE-2013-1802](https://insights.sbomify.com/CVE-2013-1802/): extlib does not properly restrict casts of string values (high 7.5)
- [CVE-2013-1801](https://insights.sbomify.com/CVE-2013-1801/): HTTParty does not restrict casts of string values (high 7.5)
- [CVE-2013-1800](https://insights.sbomify.com/CVE-2013-1800/): crack does not properly restrict casts of string values (high 7.5)
- [CVE-2013-1799](https://insights.sbomify.com/CVE-2013-1799/): Weak cryptography in canonical:ubuntu linux (medium 4.3)
- [CVE-2013-1798](https://insights.sbomify.com/CVE-2013-1798/): Information disclosure in linux:linux kernel (medium 6.2)
- [CVE-2013-1797](https://insights.sbomify.com/CVE-2013-1797/): Use after free in linux:linux kernel (medium 6.8)
- [CVE-2013-1796](https://insights.sbomify.com/CVE-2013-1796/): Memory corruption in linux:linux kernel (medium 6.8)
- [CVE-2013-1795](https://insights.sbomify.com/CVE-2013-1795/): Integer overflow in openafs:openafs (medium 5.0)
- [CVE-2013-1794](https://insights.sbomify.com/CVE-2013-1794/): Memory corruption in openafs:openafs (medium 6.5)
- [CVE-2013-1793](https://insights.sbomify.com/CVE-2013-1793/): Weak cryptography in openstack-db program (high 7.5)
- [CVE-2013-1792](https://insights.sbomify.com/CVE-2013-1792/): Race condition in linux:linux kernel (medium 4.7)
- [CVE-2013-1790](https://insights.sbomify.com/CVE-2013-1790/): Memory corruption in freedesktop:poppler (medium 6.8)
- [CVE-2013-1789](https://insights.sbomify.com/CVE-2013-1789/): Null dereference in freedesktop:poppler (medium 4.3)
- [CVE-2013-1788](https://insights.sbomify.com/CVE-2013-1788/): Memory corruption in freedesktop:poppler (medium 6.8)
- [CVE-2013-1787](https://insights.sbomify.com/CVE-2013-1787/): Cross-site scripting in devsaran:corporate (low 2.1)
- [CVE-2013-1786](https://insights.sbomify.com/CVE-2013-1786/): Cross-site scripting in devsaran:company (low 2.1)
- [CVE-2013-1785](https://insights.sbomify.com/CVE-2013-1785/): Cross-site scripting in devsaran:responsive (low 2.1)
- [CVE-2013-1784](https://insights.sbomify.com/CVE-2013-1784/): Cross-site scripting in devsaran:clean theme (low 2.1)
- [CVE-2013-1783](https://insights.sbomify.com/CVE-2013-1783/): Cross-site scripting in devsaran:business (low 2.1)
- [CVE-2013-1782](https://insights.sbomify.com/CVE-2013-1782/): Cross-site scripting in devsaran:responsive blog (low 2.1)
- [CVE-2013-1781](https://insights.sbomify.com/CVE-2013-1781/): Cross-site scripting in devsaran:professional theme (low 2.1)
- [CVE-2013-1780](https://insights.sbomify.com/CVE-2013-1780/): Cross-site scripting in devsaran:best responsive (low 2.1)
- [CVE-2013-1779](https://insights.sbomify.com/CVE-2013-1779/): Cross-site scripting in devsaran:fresh (low 2.1)
- [CVE-2013-1778](https://insights.sbomify.com/CVE-2013-1778/): Cross-site scripting in devsaran:creative (low 2.1)
- [CVE-2013-1777](https://insights.sbomify.com/CVE-2013-1777/): Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1 (critical 10.0)
- [CVE-2013-1776](https://insights.sbomify.com/CVE-2013-1776/): Privilege escalation in apple:mac os x (medium 4.4)
- [CVE-2013-1775](https://insights.sbomify.com/CVE-2013-1775/): Security feature bypass in apple:mac os x (medium 6.9)
- [CVE-2013-1774](https://insights.sbomify.com/CVE-2013-1774/): Null dereference in linux:linux kernel (medium 4.0)
- [CVE-2013-1773](https://insights.sbomify.com/CVE-2013-1773/): Memory corruption in linux:linux kernel (medium 6.2)
- [CVE-2013-1772](https://insights.sbomify.com/CVE-2013-1772/): Memory corruption in linux:linux kernel (medium 4.0)
- [CVE-2013-1771](https://insights.sbomify.com/CVE-2013-1771/): Information disclosure in monkey (high 7.5)
- [CVE-2013-1770](https://insights.sbomify.com/CVE-2013-1770/): Cross-site scripting in ganglia:ganglia-web (medium 4.3)
- [CVE-2013-1769](https://insights.sbomify.com/CVE-2013-1769/): Null dereference in simon mcvittie:telepathy gabble (medium 5.0)
- [CVE-2013-1768](https://insights.sbomify.com/CVE-2013-1768/): Deserialization of Untrusted Data in Apache OpenJPA (high 7.5)
- [CVE-2013-1767](https://insights.sbomify.com/CVE-2013-1767/): Use after free in linux:linux kernel (medium 6.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/46/