# Vulnerabilities published in 2013 - [CVE-2013-1435](https://insights.sbomify.com/CVE-2013-1435/): Command injection in cacti:cacti (high 7.5) - [CVE-2013-1434](https://insights.sbomify.com/CVE-2013-1434/): SQL injection in cacti:cacti (high 7.5) - [CVE-2013-1432](https://insights.sbomify.com/CVE-2013-1432/): Use after free in xen:xen (high 7.4) - [CVE-2013-1431](https://insights.sbomify.com/CVE-2013-1431/): Security feature bypass in simon mcvittie:telepathy gabble (medium 6.8) - [CVE-2013-1430](https://insights.sbomify.com/CVE-2013-1430/): Weak cryptography in xrdp before 0.9.1 (critical 9.8) - [CVE-2013-1429](https://insights.sbomify.com/CVE-2013-1429/): Information disclosure in lintian (medium 6.3) - [CVE-2013-1428](https://insights.sbomify.com/CVE-2013-1428/): Memory corruption in tinc-vpn:tinc (medium 6.5) - [CVE-2013-1427](https://insights.sbomify.com/CVE-2013-1427/): Race condition in lighttpd:lighttpd (low 1.9) - [CVE-2013-1426](https://insights.sbomify.com/CVE-2013-1426/): Cross-site scripting in mahara (medium 6.1) - [CVE-2013-1425](https://insights.sbomify.com/CVE-2013-1425/): Information disclosure in ldap-git-backup (medium 5.5) - [CVE-2013-1424](https://insights.sbomify.com/CVE-2013-1424/): Memory corruption in matplotlib (medium 5.6) - [CVE-2013-1423](https://insights.sbomify.com/CVE-2013-1423/): Other in fusionforge:fusionforge (medium 6.9) - [CVE-2013-1422](https://insights.sbomify.com/CVE-2013-1422/): Information disclosure in webcalendar project:webcalendar (medium 5.3) - [CVE-2013-1421](https://insights.sbomify.com/CVE-2013-1421/): Cross-site scripting in webcalendar project:webcalendar (medium 4.3) - [CVE-2013-1420](https://insights.sbomify.com/CVE-2013-1420/): Cross-site scripting in get-simple:getsimple cms (medium 6.1) - [CVE-2013-1418](https://insights.sbomify.com/CVE-2013-1418/): Null dereference in debian:debian linux (medium 4.3) - [CVE-2013-1417](https://insights.sbomify.com/CVE-2013-1417/): Denial of service in mit:kerberos 5 (low 3.5) - [CVE-2013-1416](https://insights.sbomify.com/CVE-2013-1416/): Null dereference in fedoraproject:fedora (medium 4.0) - [CVE-2013-1415](https://insights.sbomify.com/CVE-2013-1415/): Null dereference in mit:kerberos 5 (medium 5.0) - [CVE-2013-1414](https://insights.sbomify.com/CVE-2013-1414/): Cross-site request forgery in fortinet:fortigate-1000c (medium 5.1) - [CVE-2013-1413](https://insights.sbomify.com/CVE-2013-1413/): Cross-site scripting in i-doit:i-doit (medium 4.3) - [CVE-2013-1412](https://insights.sbomify.com/CVE-2013-1412/): Code injection in dleviet:datalife engine (high 7.5) - [CVE-2013-1410](https://insights.sbomify.com/CVE-2013-1410/): Cross-site scripting in perforce:p4web (medium 6.1) - [CVE-2013-1409](https://insights.sbomify.com/CVE-2013-1409/): Cross-site scripting in commentluv:commentluv (medium 4.3) - [CVE-2013-1408](https://insights.sbomify.com/CVE-2013-1408/): SQL injection in wysija newsletters project:wysija newsletters (medium 6.5) - [CVE-2013-1407](https://insights.sbomify.com/CVE-2013-1407/): Cross-site scripting in netweblogic:events manager (medium 4.3) - [CVE-2013-1406](https://insights.sbomify.com/CVE-2013-1406/): Privilege escalation in vmware:esx (high 7.2) - [CVE-2013-1405](https://insights.sbomify.com/CVE-2013-1405/): Auth bypass in vmware:esx (critical 10.0) - [CVE-2013-1402](https://insights.sbomify.com/CVE-2013-1402/): Information disclosure in digitiliti:digilibe (medium 5.0) - [CVE-2013-1401](https://insights.sbomify.com/CVE-2013-1401/): SQL injection in cardozatechnologies:wordpress poll (critical 9.8) - [CVE-2013-1400](https://insights.sbomify.com/CVE-2013-1400/): SQL injection in cardozatechnologies:wordpress poll (critical 9.8) - [CVE-2013-1399](https://insights.sbomify.com/CVE-2013-1399/): Cross-site request forgery in puppet:puppet enterprise (medium 6.8) - [CVE-2013-1398](https://insights.sbomify.com/CVE-2013-1398/): Missing authorization in puppet:puppet enterprise (high 8.5) - [CVE-2013-1397](https://insights.sbomify.com/CVE-2013-1397/): Symfony Arbitrary PHP code Execution (high 7.5) - [CVE-2013-1393](https://insights.sbomify.com/CVE-2013-1393/): Cross-site scripting in curvycorners:curvycorners (low 2.1) - [CVE-2013-1391](https://insights.sbomify.com/CVE-2013-1391/): Auth bypass in capturecctv:cdr 0410ve firmware (high 7.5) - [CVE-2013-1389](https://insights.sbomify.com/CVE-2013-1389/): Other in adobe:coldfusion (critical 10.0) - [CVE-2013-1388](https://insights.sbomify.com/CVE-2013-1388/): Auth bypass in adobe:coldfusion (high 7.5) - [CVE-2013-1387](https://insights.sbomify.com/CVE-2013-1387/): Auth bypass in adobe:coldfusion (high 7.5) - [CVE-2013-1386](https://insights.sbomify.com/CVE-2013-1386/): Memory corruption in adobe:shockwave player (critical 10.0) - [CVE-2013-1385](https://insights.sbomify.com/CVE-2013-1385/): Security feature bypass in adobe:shockwave player (critical 10.0) - [CVE-2013-1384](https://insights.sbomify.com/CVE-2013-1384/): Memory corruption in adobe:shockwave player (critical 10.0) - [CVE-2013-1383](https://insights.sbomify.com/CVE-2013-1383/): Memory corruption in adobe:shockwave player (critical 10.0) - [CVE-2013-1380](https://insights.sbomify.com/CVE-2013-1380/): Memory corruption in adobe:adobe air (critical 10.0) - [CVE-2013-1379](https://insights.sbomify.com/CVE-2013-1379/): Memory corruption in adobe:adobe air (critical 10.0) - [CVE-2013-1378](https://insights.sbomify.com/CVE-2013-1378/): Memory corruption in adobe:adobe air (critical 10.0) - [CVE-2013-1377](https://insights.sbomify.com/CVE-2013-1377/): Memory corruption in adobe:digital editions (critical 10.0) - [CVE-2013-1376](https://insights.sbomify.com/CVE-2013-1376/): Memory corruption in adobe:acrobat (critical 10.0) - [CVE-2013-1375](https://insights.sbomify.com/CVE-2013-1375/): Memory corruption in adobe:adobe air (critical 10.0) - [CVE-2013-1374](https://insights.sbomify.com/CVE-2013-1374/): Use after free in adobe:air (critical 10.0) - [CVE-2013-1373](https://insights.sbomify.com/CVE-2013-1373/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1372](https://insights.sbomify.com/CVE-2013-1372/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1371](https://insights.sbomify.com/CVE-2013-1371/): Memory corruption in adobe:adobe air (critical 10.0) - [CVE-2013-1370](https://insights.sbomify.com/CVE-2013-1370/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1369](https://insights.sbomify.com/CVE-2013-1369/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1368](https://insights.sbomify.com/CVE-2013-1368/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1367](https://insights.sbomify.com/CVE-2013-1367/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1366](https://insights.sbomify.com/CVE-2013-1366/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1365](https://insights.sbomify.com/CVE-2013-1365/): Memory corruption in adobe:air (critical 10.0) - [CVE-2013-1364](https://insights.sbomify.com/CVE-2013-1364/): Auth bypass in zabbix:zabbix (medium 5.0) - [CVE-2013-1362](https://insights.sbomify.com/CVE-2013-1362/): Command injection in nagios:remote plug in executor (high 7.5) - [CVE-2013-1361](https://insights.sbomify.com/CVE-2013-1361/): Other in lenovo:thinkpad bluetooth with enhanced data rate software (critical 9.3) - [CVE-2013-1360](https://insights.sbomify.com/CVE-2013-1360/): Auth bypass in sonicwall:analyzer (critical 9.8) - [CVE-2013-1359](https://insights.sbomify.com/CVE-2013-1359/): Auth bypass in sonicwall:analyzer (critical 9.8) - [CVE-2013-1353](https://insights.sbomify.com/CVE-2013-1353/): Cross-site scripting in orangehrm:orangehrm (medium 5.4) - [CVE-2013-1352](https://insights.sbomify.com/CVE-2013-1352/): Hardcoded credentials in veraxsystems:network management system (high 7.5) - [CVE-2013-1351](https://insights.sbomify.com/CVE-2013-1351/): Auth bypass in veraxsystems:network management system (medium 5.9) - [CVE-2013-1350](https://insights.sbomify.com/CVE-2013-1350/): Security feature bypass in veraxsystems:network management system (critical 9.1) - [CVE-2013-1349](https://insights.sbomify.com/CVE-2013-1349/): Code injection in os4ed:opensis (high 7.5) - [CVE-2013-1348](https://insights.sbomify.com/CVE-2013-1348/): Symphony Vulnerable to PHP Code Injection via YAML Parsing (high 7.5) - [CVE-2013-1347](https://insights.sbomify.com/CVE-2013-1347/): Microsoft Internet Explorer Remote Code Execution (high 8.8, exploited in the wild) - [CVE-2013-1346](https://insights.sbomify.com/CVE-2013-1346/): Memory corruption in microsoft:malware protection engine (critical 9.3) - [CVE-2013-1345](https://insights.sbomify.com/CVE-2013-1345/): Privilege escalation in microsoft:windows 7 (high 7.2) - [CVE-2013-1344](https://insights.sbomify.com/CVE-2013-1344/): Race condition in microsoft:windows 2003 server (high 7.2) - [CVE-2013-1343](https://insights.sbomify.com/CVE-2013-1343/): Race condition in microsoft:windows 2003 server (high 7.2) - [CVE-2013-1342](https://insights.sbomify.com/CVE-2013-1342/): Memory corruption in microsoft:windows 2003 server (high 7.8) - [CVE-2013-1341](https://insights.sbomify.com/CVE-2013-1341/): Race condition in microsoft:windows 2003 server (high 7.2) - [CVE-2013-1340](https://insights.sbomify.com/CVE-2013-1340/): Use after free in microsoft:windows 7 (high 8.4) - [CVE-2013-1339](https://insights.sbomify.com/CVE-2013-1339/): Memory corruption in microsoft:windows 7 (critical 9.0) - [CVE-2013-1338](https://insights.sbomify.com/CVE-2013-1338/): Use after free in microsoft:internet explorer (critical 9.3) - [CVE-2013-1337](https://insights.sbomify.com/CVE-2013-1337/): Auth bypass in microsoft:.net framework (high 7.5) - [CVE-2013-1336](https://insights.sbomify.com/CVE-2013-1336/): Security feature bypass in microsoft:.net framework (medium 5.0) - [CVE-2013-1335](https://insights.sbomify.com/CVE-2013-1335/): Memory corruption in microsoft:word (critical 9.3) - [CVE-2013-1334](https://insights.sbomify.com/CVE-2013-1334/): Memory corruption in microsoft:windows 7 (high 7.2) - [CVE-2013-1333](https://insights.sbomify.com/CVE-2013-1333/): Memory corruption in microsoft:windows 7 (high 7.2) - [CVE-2013-1332](https://insights.sbomify.com/CVE-2013-1332/): Race condition in microsoft:windows 7 (high 7.2) - [CVE-2013-1331](https://insights.sbomify.com/CVE-2013-1331/): Microsoft Office Buffer Overflow (high 7.8, exploited in the wild) - [CVE-2013-1330](https://insights.sbomify.com/CVE-2013-1330/): Misconfiguration in microsoft:office web apps (critical 10.0) - [CVE-2013-1329](https://insights.sbomify.com/CVE-2013-1329/): Integer overflow in microsoft:publisher (critical 9.3) - [CVE-2013-1328](https://insights.sbomify.com/CVE-2013-1328/): Memory corruption in microsoft:publisher (critical 9.3) - [CVE-2013-1327](https://insights.sbomify.com/CVE-2013-1327/): Integer overflow in microsoft:publisher (critical 9.3) - [CVE-2013-1325](https://insights.sbomify.com/CVE-2013-1325/): Memory corruption in microsoft:office (critical 9.3) - [CVE-2013-1324](https://insights.sbomify.com/CVE-2013-1324/): Memory corruption in microsoft:office (critical 9.3) - [CVE-2013-1323](https://insights.sbomify.com/CVE-2013-1323/): Memory corruption in microsoft:publisher (critical 9.3) - [CVE-2013-1322](https://insights.sbomify.com/CVE-2013-1322/): Memory corruption in microsoft:publisher (critical 10.0) - [CVE-2013-1321](https://insights.sbomify.com/CVE-2013-1321/): Memory corruption in microsoft:publisher (critical 9.3) - [CVE-2013-1320](https://insights.sbomify.com/CVE-2013-1320/): Memory corruption in microsoft:publisher (critical 10.0) - [CVE-2013-1319](https://insights.sbomify.com/CVE-2013-1319/): Memory corruption in microsoft:publisher (critical 10.0) - [CVE-2013-1318](https://insights.sbomify.com/CVE-2013-1318/): Memory corruption in microsoft:publisher (critical 10.0) - [CVE-2013-1317](https://insights.sbomify.com/CVE-2013-1317/): Integer overflow in microsoft:publisher (critical 9.3) --- From sbomify Insights: https://insights.sbomify.com/years/2013/page/50/