# Vulnerabilities published in 2013


- [CVE-2013-0742](https://insights.sbomify.com/CVE-2013-0742/): Memory corruption in corel:pdf fusion (critical 9.3)
- [CVE-2013-0741](https://insights.sbomify.com/CVE-2013-0741/): Cross-site scripting in percipientstudios:imagen (medium 4.3)
- [CVE-2013-0740](https://insights.sbomify.com/CVE-2013-0740/): Open redirect in dell:openmanage server administrator (medium 5.8)
- [CVE-2013-0739](https://insights.sbomify.com/CVE-2013-0739/): Cross-site scripting in Chamilo (medium 6.1)
- [CVE-2013-0738](https://insights.sbomify.com/CVE-2013-0738/): Cross-site scripting in Chamilo (medium 6.1)
- [CVE-2013-0737](https://insights.sbomify.com/CVE-2013-0737/): Cross-site scripting in BoltWire (medium 6.1)
- [CVE-2013-0736](https://insights.sbomify.com/CVE-2013-0736/): Cross-site request forgery in cartpauj:mingle-forum (medium 6.8)
- [CVE-2013-0735](https://insights.sbomify.com/CVE-2013-0735/): SQL injection in cartpauj:mingle-forum (high 7.5)
- [CVE-2013-0734](https://insights.sbomify.com/CVE-2013-0734/): Cross-site scripting in cartpauj:mingle-forum (medium 4.3)
- [CVE-2013-0733](https://insights.sbomify.com/CVE-2013-0733/): Other in corel:paintshop pro x5 (critical 9.3)
- [CVE-2013-0732](https://insights.sbomify.com/CVE-2013-0732/): Memory corruption in nuance:pdf reader (critical 9.3)
- [CVE-2013-0731](https://insights.sbomify.com/CVE-2013-0731/): Missing authorization in mailup:wp-mailup (medium 5.0)
- [CVE-2013-0730](https://insights.sbomify.com/CVE-2013-0730/): Cross-site scripting in sourcefabric:newscoop (medium 4.3)
- [CVE-2013-0729](https://insights.sbomify.com/CVE-2013-0729/): Memory corruption in tracker-software:pdf-xchange viewer (critical 9.3)
- [CVE-2013-0728](https://insights.sbomify.com/CVE-2013-0728/): Memory corruption in hexagon:erdas apollo ecwp (critical 10.0)
- [CVE-2013-0727](https://insights.sbomify.com/CVE-2013-0727/): Other in bluemarblegeo:global mapper (medium 6.9)
- [CVE-2013-0726](https://insights.sbomify.com/CVE-2013-0726/): Memory corruption in hexagon:erdas er viewer (critical 9.3)
- [CVE-2013-0725](https://insights.sbomify.com/CVE-2013-0725/): Other in ER Viewer (high 7.8)
- [CVE-2013-0724](https://insights.sbomify.com/CVE-2013-0724/): Code injection in wpshopstyling:wp-ecommerce-shop-styling (high 7.5)
- [CVE-2013-0723](https://insights.sbomify.com/CVE-2013-0723/): Memory corruption in kingsoft:spreadsheets 2012 (critical 9.3)
- [CVE-2013-0722](https://insights.sbomify.com/CVE-2013-0722/): Memory corruption in ettercap-project:ettercap (medium 4.4)
- [CVE-2013-0721](https://insights.sbomify.com/CVE-2013-0721/): Information disclosure in wp php widget project:wp php widget (medium 5.0)
- [CVE-2013-0720](https://insights.sbomify.com/CVE-2013-0720/): Information disclosure in cob\'s products:cobime (medium 5.0)
- [CVE-2013-0719](https://insights.sbomify.com/CVE-2013-0719/): Information disclosure in codedesign:artime japanese input (medium 5.0)
- [CVE-2013-0718](https://insights.sbomify.com/CVE-2013-0718/): Information disclosure in simeji:simeji (medium 5.0)
- [CVE-2013-0717](https://insights.sbomify.com/CVE-2013-0717/): Cross-site request forgery in nec:atermwm3450rn (medium 6.8)
- [CVE-2013-0716](https://insights.sbomify.com/CVE-2013-0716/): Denial of service in windriver:vxworks (medium 5.0)
- [CVE-2013-0715](https://insights.sbomify.com/CVE-2013-0715/): Denial of service in windriver:vxworks (medium 4.0)
- [CVE-2013-0714](https://insights.sbomify.com/CVE-2013-0714/): Memory corruption in windriver:vxworks (critical 10.0)
- [CVE-2013-0713](https://insights.sbomify.com/CVE-2013-0713/): Denial of service in windriver:vxworks (medium 6.8)
- [CVE-2013-0712](https://insights.sbomify.com/CVE-2013-0712/): Denial of service in windriver:vxworks (medium 6.8)
- [CVE-2013-0711](https://insights.sbomify.com/CVE-2013-0711/): Denial of service in windriver:vxworks (high 7.8)
- [CVE-2013-0710](https://insights.sbomify.com/CVE-2013-0710/): Memory corruption in kingsoft:writer 2007 (critical 9.3)
- [CVE-2013-0709](https://insights.sbomify.com/CVE-2013-0709/): Cross-site scripting in bayashi:dopvstar\* (medium 4.3)
- [CVE-2013-0708](https://insights.sbomify.com/CVE-2013-0708/): Cross-site scripting in bayashi:dopvcomet\* (medium 4.3)
- [CVE-2013-0707](https://insights.sbomify.com/CVE-2013-0707/): Other in justsystems:hanako (critical 9.3)
- [CVE-2013-0706](https://insights.sbomify.com/CVE-2013-0706/): Missing authorization in nec:universal raid utility (critical 9.0)
- [CVE-2013-0705](https://insights.sbomify.com/CVE-2013-0705/): Path traversal in lsi:3ware disk manager (medium 5.0)
- [CVE-2013-0704](https://insights.sbomify.com/CVE-2013-0704/): Path traversal in gree:gree (medium 4.3)
- [CVE-2013-0703](https://insights.sbomify.com/CVE-2013-0703/): Cross-site scripting in big:imgboard (medium 4.3)
- [CVE-2013-0702](https://insights.sbomify.com/CVE-2013-0702/): Cross-site scripting in cybozu:garoon (medium 4.3)
- [CVE-2013-0701](https://insights.sbomify.com/CVE-2013-0701/): SQL injection in cybozu:garoon (medium 6.0)
- [CVE-2013-0700](https://insights.sbomify.com/CVE-2013-0700/): Denial of service in siemens:simatic s7-1200 cpu 1211c firmware (high 7.8)
- [CVE-2013-0699](https://insights.sbomify.com/CVE-2013-0699/): Denial of service in galilmc:rio-47100 plc (high 7.1)
- [CVE-2013-0694](https://insights.sbomify.com/CVE-2013-0694/): Hardcoded credentials in emerson:dl 8000 remote terminal unit (critical 9.0)
- [CVE-2013-0693](https://insights.sbomify.com/CVE-2013-0693/): Information disclosure in emerson:dl 8000 remote terminal unit (critical 10.0)
- [CVE-2013-0692](https://insights.sbomify.com/CVE-2013-0692/): Missing authorization in emerson:dl 8000 remote terminal unit (critical 10.0)
- [CVE-2013-0689](https://insights.sbomify.com/CVE-2013-0689/): File upload in emerson:dl 8000 remote terminal unit (critical 10.0)
- [CVE-2013-0688](https://insights.sbomify.com/CVE-2013-0688/): Cross-site scripting in invensys:wonderware information server (medium 4.3)
- [CVE-2013-0687](https://insights.sbomify.com/CVE-2013-0687/): Misconfiguration in schneider-electric:micom s1 studio (medium 6.6)
- [CVE-2013-0686](https://insights.sbomify.com/CVE-2013-0686/): XML external entity in invensys:wonderware information server (critical 9.3)
- [CVE-2013-0685](https://insights.sbomify.com/CVE-2013-0685/): Memory corruption in invensys:wonderware information server (critical 9.3)
- [CVE-2013-0684](https://insights.sbomify.com/CVE-2013-0684/): SQL injection in invensys:wonderware information server (high 7.5)
- [CVE-2013-0683](https://insights.sbomify.com/CVE-2013-0683/): Denial of service in cogentdatahub:cascade datahub (high 7.1)
- [CVE-2013-0682](https://insights.sbomify.com/CVE-2013-0682/): Memory corruption in cogentdatahub:cascade datahub (high 7.5)
- [CVE-2013-0681](https://insights.sbomify.com/CVE-2013-0681/): Null dereference in cogentdatahub:cascade datahub (medium 5.0)
- [CVE-2013-0680](https://insights.sbomify.com/CVE-2013-0680/): Memory corruption in cogentdatahub:cascade datahub (high 7.5)
- [CVE-2013-0679](https://insights.sbomify.com/CVE-2013-0679/): Path traversal in siemens:simatic pcs7 (medium 4.0)
- [CVE-2013-0678](https://insights.sbomify.com/CVE-2013-0678/): Information disclosure in siemens:simatic pcs7 (medium 4.0)
- [CVE-2013-0677](https://insights.sbomify.com/CVE-2013-0677/): Information disclosure in siemens:simatic pcs7 (medium 5.8)
- [CVE-2013-0676](https://insights.sbomify.com/CVE-2013-0676/): Missing authorization in siemens:simatic pcs7 (medium 4.0)
- [CVE-2013-0675](https://insights.sbomify.com/CVE-2013-0675/): Memory corruption in siemens:simatic pcs7 (medium 6.1)
- [CVE-2013-0674](https://insights.sbomify.com/CVE-2013-0674/): Memory corruption in siemens:simatic pcs7 (medium 6.8)
- [CVE-2013-0673](https://insights.sbomify.com/CVE-2013-0673/): Path traversal in matrikonopc:matrikonopc a\&e historian (critical 9.4)
- [CVE-2013-0672](https://insights.sbomify.com/CVE-2013-0672/): Cross-site scripting in siemens:wincc tia portal (low 3.5)
- [CVE-2013-0671](https://insights.sbomify.com/CVE-2013-0671/): Path traversal in siemens:wincc tia portal (medium 4.0)
- [CVE-2013-0670](https://insights.sbomify.com/CVE-2013-0670/): Other in siemens:wincc tia portal (medium 4.3)
- [CVE-2013-0669](https://insights.sbomify.com/CVE-2013-0669/): Denial of service in siemens:wincc tia portal (medium 4.0)
- [CVE-2013-0668](https://insights.sbomify.com/CVE-2013-0668/): Cross-site scripting in siemens:wincc tia portal (medium 4.3)
- [CVE-2013-0667](https://insights.sbomify.com/CVE-2013-0667/): Cross-site scripting in siemens:wincc tia portal (medium 4.3)
- [CVE-2013-0666](https://insights.sbomify.com/CVE-2013-0666/): Denial of service in matrikonopc:matrikonopc security gateway (medium 5.0)
- [CVE-2013-0665](https://insights.sbomify.com/CVE-2013-0665/): Misconfiguration in selinc:acselerator quickset (medium 6.2)
- [CVE-2013-0664](https://insights.sbomify.com/CVE-2013-0664/): Code injection in schneider-electric:modicon m340 (high 8.5)
- [CVE-2013-0663](https://insights.sbomify.com/CVE-2013-0663/): Cross-site request forgery in schneider-electric:modicon m340 (medium 6.8)
- [CVE-2013-0662](https://insights.sbomify.com/CVE-2013-0662/): Memory corruption in schneider-electric:concept (critical 9.3)
- [CVE-2013-0659](https://insights.sbomify.com/CVE-2013-0659/): Other in siemens:cp 1604 (critical 10.0)
- [CVE-2013-0658](https://insights.sbomify.com/CVE-2013-0658/): Memory corruption in schneider-electric:accutech manager (critical 10.0)
- [CVE-2013-0657](https://insights.sbomify.com/CVE-2013-0657/): Memory corruption in schneider-electric:interactive graphical scada system (critical 10.0)
- [CVE-2013-0656](https://insights.sbomify.com/CVE-2013-0656/): Memory corruption in siemens:simatic rf-manager (medium 6.8)
- [CVE-2013-0655](https://insights.sbomify.com/CVE-2013-0655/): Security feature bypass in schneider-electric:software update utility (critical 9.3)
- [CVE-2013-0654](https://insights.sbomify.com/CVE-2013-0654/): Command injection in ge:intelligent platforms proficy hmi\/scada cimplicity (critical 9.3)
- [CVE-2013-0653](https://insights.sbomify.com/CVE-2013-0653/): Path traversal in ge:intelligent platforms proficy hmi\/scada cimplicity (medium 4.3)
- [CVE-2013-0652](https://insights.sbomify.com/CVE-2013-0652/): Missing authorization in ge:intelligent platforms proficy real-time information portal (medium 5.0)
- [CVE-2013-0651](https://insights.sbomify.com/CVE-2013-0651/): Information disclosure in ge:intelligent platforms proficy real-time information portal (medium 5.0)
- [CVE-2013-0650](https://insights.sbomify.com/CVE-2013-0650/): Use after free in adobe:adobe air (critical 10.0)
- [CVE-2013-0649](https://insights.sbomify.com/CVE-2013-0649/): Use after free in adobe:air (critical 10.0)
- [CVE-2013-0648](https://insights.sbomify.com/CVE-2013-0648/): Adobe Flash Player Code Execution (high 8.8, exploited in the wild)
- [CVE-2013-0647](https://insights.sbomify.com/CVE-2013-0647/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2013-0646](https://insights.sbomify.com/CVE-2013-0646/): Integer overflow in adobe:adobe air (critical 10.0)
- [CVE-2013-0645](https://insights.sbomify.com/CVE-2013-0645/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2013-0644](https://insights.sbomify.com/CVE-2013-0644/): Use after free in adobe:air (critical 10.0)
- [CVE-2013-0643](https://insights.sbomify.com/CVE-2013-0643/): Adobe Flash Player Incorrect Default Permissions (high 8.8, exploited in the wild)
- [CVE-2013-0642](https://insights.sbomify.com/CVE-2013-0642/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2013-0641](https://insights.sbomify.com/CVE-2013-0641/): Adobe Reader Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2013-0640](https://insights.sbomify.com/CVE-2013-0640/): Adobe Reader and Acrobat Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2013-0639](https://insights.sbomify.com/CVE-2013-0639/): Integer overflow in adobe:air (critical 10.0)
- [CVE-2013-0638](https://insights.sbomify.com/CVE-2013-0638/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2013-0637](https://insights.sbomify.com/CVE-2013-0637/): Information disclosure in adobe:air (medium 5.0)
- [CVE-2013-0636](https://insights.sbomify.com/CVE-2013-0636/): Memory corruption in adobe:shockwave player (critical 10.0)
- [CVE-2013-0635](https://insights.sbomify.com/CVE-2013-0635/): Memory corruption in adobe:shockwave player (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/57/
