# Vulnerabilities published in 2013


- [CVE-2013-10062](https://insights.sbomify.com/CVE-2013-10062/): Linksys Routers apply.cgi Path Traversal (medium 6.9)
- [CVE-2013-10061](https://insights.sbomify.com/CVE-2013-10061/): Netgear Routers setup.cgi RCE (high 8.6)
- [CVE-2013-10060](https://insights.sbomify.com/CVE-2013-10060/): Netgear Routers pppoe.cgi RCE (critical 9.4)
- [CVE-2013-1006](https://insights.sbomify.com/CVE-2013-1006/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-10059](https://insights.sbomify.com/CVE-2013-10059/): D-Link Routers tools_vct.htm OS Command Injection (high 8.6)
- [CVE-2013-10058](https://insights.sbomify.com/CVE-2013-10058/): Linksys Routers apply.cgi Remote Command Injection (high 8.6)
- [CVE-2013-10057](https://insights.sbomify.com/CVE-2013-10057/): Synactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow (high 7.5)
- [CVE-2013-10055](https://insights.sbomify.com/CVE-2013-10055/): Havalite CMS Arbitary File Upload RCE (critical 9.3)
- [CVE-2013-10054](https://insights.sbomify.com/CVE-2013-10054/): LibrettoCMS File Manager Arbitrary File Upload (critical 9.3)
- [CVE-2013-10053](https://insights.sbomify.com/CVE-2013-10053/): ZPanel <= 10.0.0.2 htpasswd Module Username Command Execution (high 8.7)
- [CVE-2013-10052](https://insights.sbomify.com/CVE-2013-10052/): ZPanel zsudo Local Privilege Escalation (high 8.5)
- [CVE-2013-10051](https://insights.sbomify.com/CVE-2013-10051/): InstantCMS <= 1.6 Remote PHP Code Execution (critical 9.3)
- [CVE-2013-10050](https://insights.sbomify.com/CVE-2013-10050/): D-Link Devices tools_vct.xgi Authenticated RCE (high 8.7)
- [CVE-2013-1005](https://insights.sbomify.com/CVE-2013-1005/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-10049](https://insights.sbomify.com/CVE-2013-10049/): Raidsonic NAS Devices Unauthenticated Remote Command Execution (critical 9.3)
- [CVE-2013-10048](https://insights.sbomify.com/CVE-2013-10048/): D-Link Devices command.php Unauthenticated RCE (critical 9.3)
- [CVE-2013-10047](https://insights.sbomify.com/CVE-2013-10047/): MiniWeb <= Build 300 Arbitrary File Upload (critical 9.3)
- [CVE-2013-10046](https://insights.sbomify.com/CVE-2013-10046/): Agnitum Outpost Internet Security Local Privilege Escalation (high 8.5)
- [CVE-2013-10044](https://insights.sbomify.com/CVE-2013-10044/): OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE (high 8.7)
- [CVE-2013-10043](https://insights.sbomify.com/CVE-2013-10043/): Astium VOIP PBX <= 2.1 SQL Injection File Upload RCE (critical 9.5)
- [CVE-2013-10042](https://insights.sbomify.com/CVE-2013-10042/): freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow (critical 9.3)
- [CVE-2013-10040](https://insights.sbomify.com/CVE-2013-10040/): ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE (critical 10.0)
- [CVE-2013-1004](https://insights.sbomify.com/CVE-2013-1004/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-10039](https://insights.sbomify.com/CVE-2013-10039/): GestioIP 3.0 ip_checkhost.cgi RCE (high 8.7)
- [CVE-2013-10038](https://insights.sbomify.com/CVE-2013-10038/): FlashChat Arbitrary File Upload RCE (critical 9.3)
- [CVE-2013-10037](https://insights.sbomify.com/CVE-2013-10037/): WebTester 5.x install2.php Unauthenticated Command Execution (critical 9.3)
- [CVE-2013-10036](https://insights.sbomify.com/CVE-2013-10036/): Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow (high 8.4)
- [CVE-2013-10035](https://insights.sbomify.com/CVE-2013-10035/): ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution (high 8.7)
- [CVE-2013-10034](https://insights.sbomify.com/CVE-2013-10034/): Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE (critical 9.3)
- [CVE-2013-10033](https://insights.sbomify.com/CVE-2013-10033/): Kimai 0.9.2 db_restore.php SQL Injection (critical 9.3)
- [CVE-2013-10032](https://insights.sbomify.com/CVE-2013-10032/): GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload (high 8.7)
- [CVE-2013-10031](https://insights.sbomify.com/CVE-2013-10031/): Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks (high 7.5)
- [CVE-2013-10030](https://insights.sbomify.com/CVE-2013-10030/): Exit Box Lite Plugin wordpress-exit-box-lite.php information disclosure (medium 4.3)
- [CVE-2013-1003](https://insights.sbomify.com/CVE-2013-1003/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-10029](https://insights.sbomify.com/CVE-2013-10029/): Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgery (medium 4.3)
- [CVE-2013-10028](https://insights.sbomify.com/CVE-2013-10028/): EELV Newsletter Plugin lettreinfo.php style_newsletter cross site scripting (low 3.5)
- [CVE-2013-10027](https://insights.sbomify.com/CVE-2013-10027/): Blogger Importer Plugin blogger-importer.php restart cross-site request forgery (medium 4.3)
- [CVE-2013-10026](https://insights.sbomify.com/CVE-2013-10026/): Mail Subscribe List Plugin index.php cross site scripting (low 3.5)
- [CVE-2013-10025](https://insights.sbomify.com/CVE-2013-10025/): Exit Strategy Plugin exitpage.php exitpageadmin cross-site request forgery (medium 4.3)
- [CVE-2013-10024](https://insights.sbomify.com/CVE-2013-10024/): Exit Strategy Plugin exitpage.php information disclosure (low 3.5)
- [CVE-2013-10023](https://insights.sbomify.com/CVE-2013-10023/): Editorial Calendar Plugin edcal.php edcal_filter_where sql injection (medium 6.3)
- [CVE-2013-10022](https://insights.sbomify.com/CVE-2013-10022/): BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scripting (low 3.5)
- [CVE-2013-10021](https://insights.sbomify.com/CVE-2013-10021/): dd32 Debug Bar Plugin class-debug-bar-queries.php render cross site scripting (low 3.5)
- [CVE-2013-10020](https://insights.sbomify.com/CVE-2013-10020/): MMDeveloper A Forms Plugin a-forms.php cross site scripting (low 3.5)
- [CVE-2013-1002](https://insights.sbomify.com/CVE-2013-1002/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-10019](https://insights.sbomify.com/CVE-2013-10019/): OCLC-Research OAICat sql injection (medium 6.3)
- [CVE-2013-10018](https://insights.sbomify.com/CVE-2013-10018/): fanzila WebFinance save_contact.php sql injection (medium 5.5)
- [CVE-2013-10017](https://insights.sbomify.com/CVE-2013-10017/): fanzila WebFinance save_roles.php sql injection (medium 5.5)
- [CVE-2013-10016](https://insights.sbomify.com/CVE-2013-10016/): fanzila WebFinance save_taxes.php sql injection (medium 5.5)
- [CVE-2013-10015](https://insights.sbomify.com/CVE-2013-10015/): fanzila WebFinance save_Contract_Signer_Role.php sql injection (medium 5.5)
- [CVE-2013-10014](https://insights.sbomify.com/CVE-2013-10014/): oktora24 2moons sql injection (medium 5.5)
- [CVE-2013-10013](https://insights.sbomify.com/CVE-2013-10013/): Bricco Authenticator Plugin DBAuthenticator.java compare sql injection (medium 5.5)
- [CVE-2013-10012](https://insights.sbomify.com/CVE-2013-10012/): antonbolling clan7ups Login/Session sql injection (medium 5.5)
- [CVE-2013-10011](https://insights.sbomify.com/CVE-2013-10011/): aeharding classroom-engagement-system sql injection (medium 6.3)
- [CVE-2013-10010](https://insights.sbomify.com/CVE-2013-10010/): zerochplus thread.res.pl PrintResList cross site scripting (medium 4.3)
- [CVE-2013-1001](https://insights.sbomify.com/CVE-2013-1001/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-10009](https://insights.sbomify.com/CVE-2013-10009/): DrAzraelTod pyChao __init__.py lesen sql injection (medium 5.5)
- [CVE-2013-10008](https://insights.sbomify.com/CVE-2013-10008/): sheilazpy eShop sql injection (medium 5.5)
- [CVE-2013-10007](https://insights.sbomify.com/CVE-2013-10007/): ethitter WP-Print-Friendly wp-print-friendly.php information disclosure (medium 5.3)
- [CVE-2013-10006](https://insights.sbomify.com/CVE-2013-10006/): Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy (low 2.6)
- [CVE-2013-10005](https://insights.sbomify.com/CVE-2013-10005/): Infinite loop in github.com/btcsuite/go-socks (high 7.5)
- [CVE-2013-10004](https://insights.sbomify.com/CVE-2013-10004/): Weak cryptography in SAMwin Contact Center Suite (medium 6.5)
- [CVE-2013-10003](https://insights.sbomify.com/CVE-2013-10003/): Telecommunication Software SAMwin Contact Center Suite Database SAMwinLIBVB.dll getCurrentDBVersion sql injection (medium 6.5)
- [CVE-2013-10002](https://insights.sbomify.com/CVE-2013-10002/): Hardcoded credentials in SAMwin Contact Center Suite (medium 6.5)
- [CVE-2013-10001](https://insights.sbomify.com/CVE-2013-10001/): HTC One/Sense Mail Client certificate validation (medium 4.8)
- [CVE-2013-1000](https://insights.sbomify.com/CVE-2013-1000/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-0999](https://insights.sbomify.com/CVE-2013-0999/): Memory corruption in apple:iphone os (critical 9.3)
- [CVE-2013-0998](https://insights.sbomify.com/CVE-2013-0998/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0997](https://insights.sbomify.com/CVE-2013-0997/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0996](https://insights.sbomify.com/CVE-2013-0996/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0995](https://insights.sbomify.com/CVE-2013-0995/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0994](https://insights.sbomify.com/CVE-2013-0994/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0993](https://insights.sbomify.com/CVE-2013-0993/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0992](https://insights.sbomify.com/CVE-2013-0992/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0991](https://insights.sbomify.com/CVE-2013-0991/): Memory corruption in apple:itunes (medium 6.8)
- [CVE-2013-0990](https://insights.sbomify.com/CVE-2013-0990/): Path traversal in apple:mac os x (medium 4.9)
- [CVE-2013-0989](https://insights.sbomify.com/CVE-2013-0989/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2013-0988](https://insights.sbomify.com/CVE-2013-0988/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2013-0987](https://insights.sbomify.com/CVE-2013-0987/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2013-0986](https://insights.sbomify.com/CVE-2013-0986/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2013-0985](https://insights.sbomify.com/CVE-2013-0985/): Auth bypass in apple:mac os x (low 2.1)
- [CVE-2013-0984](https://insights.sbomify.com/CVE-2013-0984/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2013-0983](https://insights.sbomify.com/CVE-2013-0983/): Denial of service in apple:mac os x (medium 6.8)
- [CVE-2013-0982](https://insights.sbomify.com/CVE-2013-0982/): Information disclosure in apple:mac os x (low 1.7)
- [CVE-2013-0981](https://insights.sbomify.com/CVE-2013-0981/): Privilege escalation in apple:iphone os (high 7.2)
- [CVE-2013-0980](https://insights.sbomify.com/CVE-2013-0980/): Security feature bypass in apple:iphone os (low 2.1)
- [CVE-2013-0979](https://insights.sbomify.com/CVE-2013-0979/): Security feature bypass in apple:iphone os (low 1.9)
- [CVE-2013-0978](https://insights.sbomify.com/CVE-2013-0978/): Security feature bypass in apple:iphone os (low 2.1)
- [CVE-2013-0977](https://insights.sbomify.com/CVE-2013-0977/): Security feature bypass in apple:iphone os (medium 4.6)
- [CVE-2013-0976](https://insights.sbomify.com/CVE-2013-0976/): Memory corruption in apple:mac os x (medium 6.8)
- [CVE-2013-0975](https://insights.sbomify.com/CVE-2013-0975/): Memory corruption in apple:mac os x (medium 6.8)
- [CVE-2013-0974](https://insights.sbomify.com/CVE-2013-0974/): Security feature bypass in apple:iphone os (medium 5.1)
- [CVE-2013-0973](https://insights.sbomify.com/CVE-2013-0973/): Security feature bypass in apple:mac os x (medium 6.8)
- [CVE-2013-0971](https://insights.sbomify.com/CVE-2013-0971/): Use after free in apple:mac os x (medium 6.8)
- [CVE-2013-0970](https://insights.sbomify.com/CVE-2013-0970/): Security feature bypass in apple:mac os x (medium 4.3)
- [CVE-2013-0969](https://insights.sbomify.com/CVE-2013-0969/): Security feature bypass in apple:mac os x (medium 4.9)
- [CVE-2013-0968](https://insights.sbomify.com/CVE-2013-0968/): Memory corruption in apple:iphone os (medium 6.8)
- [CVE-2013-0967](https://insights.sbomify.com/CVE-2013-0967/): Security feature bypass in apple:mac os x (medium 4.3)
- [CVE-2013-0966](https://insights.sbomify.com/CVE-2013-0966/): Auth bypass in apple:mac os x (medium 6.4)
- [CVE-2013-0964](https://insights.sbomify.com/CVE-2013-0964/): Security feature bypass in apple:iphone os (low 3.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/54/
