# Vulnerabilities published in 2013


- [CVE-2013-0297](https://insights.sbomify.com/CVE-2013-0297/): Cross-site scripting in owncloud:owncloud (low 3.5)
- [CVE-2013-0296](https://insights.sbomify.com/CVE-2013-0296/): Race condition in zlib:pigz (medium 4.4)
- [CVE-2013-0294](https://insights.sbomify.com/CVE-2013-0294/): pyrad is vulnerable to the use of Insufficiently Random Values (medium 5.9)
- [CVE-2013-0293](https://insights.sbomify.com/CVE-2013-0293/): Privilege escalation in oVirt Node (high 7.8)
- [CVE-2013-0292](https://insights.sbomify.com/CVE-2013-0292/): Privilege escalation in freedesktop:dbus-glib (high 7.2)
- [CVE-2013-0291](https://insights.sbomify.com/CVE-2013-0291/): Information disclosure in NextGEN Gallery Plugin (high 7.5)
- [CVE-2013-0290](https://insights.sbomify.com/CVE-2013-0290/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2013-0289](https://insights.sbomify.com/CVE-2013-0289/): Security feature bypass in isync project:isync (medium 4.3)
- [CVE-2013-0288](https://insights.sbomify.com/CVE-2013-0288/): Memory corruption in arthurdejong:nss-pam-ldapd (medium 6.8)
- [CVE-2013-0287](https://insights.sbomify.com/CVE-2013-0287/): Security feature bypass in fedoraproject:sssd (medium 4.9)
- [CVE-2013-0286](https://insights.sbomify.com/CVE-2013-0286/): Cross-site scripting in Pinboard theme (medium 5.4)
- [CVE-2013-0285](https://insights.sbomify.com/CVE-2013-0285/): nori contains Improper Input Validation (high 7.5)
- [CVE-2013-0284](https://insights.sbomify.com/CVE-2013-0284/): newrelic_rpm Gem Discloses Sensitive Information (medium 5.0)
- [CVE-2013-0283](https://insights.sbomify.com/CVE-2013-0283/): Cross-site scripting in Katello (medium 5.4)
- [CVE-2013-0282](https://insights.sbomify.com/CVE-2013-0282/): OpenStack Keystone allows context-dependent attackers to bypass access restrictions (medium 5.0)
- [CVE-2013-0281](https://insights.sbomify.com/CVE-2013-0281/): Denial of service in clusterlabs:pacemaker (medium 4.3)
- [CVE-2013-0277](https://insights.sbomify.com/CVE-2013-0277/): Active Record contains deserialization of arbitrary YAML (critical 10.0)
- [CVE-2013-0276](https://insights.sbomify.com/CVE-2013-0276/): ActiveRecord vulnerable to modification of protected model attributes (medium 4.3)
- [CVE-2013-0275](https://insights.sbomify.com/CVE-2013-0275/): Cross-site scripting in ganglia:ganglia-web (medium 4.3)
- [CVE-2013-0274](https://insights.sbomify.com/CVE-2013-0274/): Denial of service in pidgin:pidgin (low 2.9)
- [CVE-2013-0273](https://insights.sbomify.com/CVE-2013-0273/): Denial of service in pidgin:pidgin (medium 5.0)
- [CVE-2013-0272](https://insights.sbomify.com/CVE-2013-0272/): Memory corruption in pidgin:pidgin (medium 6.8)
- [CVE-2013-0271](https://insights.sbomify.com/CVE-2013-0271/): Path traversal in pidgin:pidgin (medium 5.0)
- [CVE-2013-0270](https://insights.sbomify.com/CVE-2013-0270/): Keystone: openstack keystone: denial of service via large http request with long tenant name (medium 6.5)
- [CVE-2013-0269](https://insights.sbomify.com/CVE-2013-0269/): JSON gem has Improper Input Validation vulnerability (high 7.5)
- [CVE-2013-0268](https://insights.sbomify.com/CVE-2013-0268/): Privilege escalation in linux:linux kernel (medium 6.2)
- [CVE-2013-0267](https://insights.sbomify.com/CVE-2013-0267/): Privilege escalation in apache:vcl (high 8.8)
- [CVE-2013-0266](https://insights.sbomify.com/CVE-2013-0266/): Misconfiguration in Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) (medium 5.5)
- [CVE-2013-0265](https://insights.sbomify.com/CVE-2013-0265/): Race condition in bitbucket:xnbd (low 2.1)
- [CVE-2013-0264](https://insights.sbomify.com/CVE-2013-0264/): Security feature bypass in cumin (high 7.5)
- [CVE-2013-0263](https://insights.sbomify.com/CVE-2013-0263/): Rack arbitrary code execution via timing attack (medium 5.1)
- [CVE-2013-0262](https://insights.sbomify.com/CVE-2013-0262/): Rack Vulnerable to Path Traversal (medium 4.3)
- [CVE-2013-0261](https://insights.sbomify.com/CVE-2013-0261/): Packstack: packstack: arbitrary file overwrite via symlink attack (high 8.8)
- [CVE-2013-0260](https://insights.sbomify.com/CVE-2013-0260/): Information disclosure in elliot pahl:drush debian packaging (low 2.1)
- [CVE-2013-0259](https://insights.sbomify.com/CVE-2013-0259/): Cross-site scripting in boxes project:boxes (low 2.1)
- [CVE-2013-0258](https://insights.sbomify.com/CVE-2013-0258/): Auth bypass in google authenticator login project:ga login (medium 6.8)
- [CVE-2013-0257](https://insights.sbomify.com/CVE-2013-0257/): Missing authorization in david alkire:email2image (medium 5.0)
- [CVE-2013-0256](https://insights.sbomify.com/CVE-2013-0256/): RDoc contains XSS vulnerability (medium 4.3)
- [CVE-2013-0255](https://insights.sbomify.com/CVE-2013-0255/): Memory corruption in postgresql:postgresql (medium 6.8)
- [CVE-2013-0254](https://insights.sbomify.com/CVE-2013-0254/): Misconfiguration in qt:qt (low 3.6)
- [CVE-2013-0253](https://insights.sbomify.com/CVE-2013-0253/): Misconfiguration in apache:maven (medium 5.8)
- [CVE-2013-0252](https://insights.sbomify.com/CVE-2013-0252/): Security feature bypass in boost:boost (medium 5.0)
- [CVE-2013-0251](https://insights.sbomify.com/CVE-2013-0251/): Memory corruption in debian:latd (critical 10.0)
- [CVE-2013-0250](https://insights.sbomify.com/CVE-2013-0250/): Denial of service in corosync:corosync (medium 5.0)
- [CVE-2013-0249](https://insights.sbomify.com/CVE-2013-0249/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2013-0248](https://insights.sbomify.com/CVE-2013-0248/): Incorrect Default Permissions in Apache Commons FileUpload (medium 6.8)
- [CVE-2013-0247](https://insights.sbomify.com/CVE-2013-0247/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2013-0246](https://insights.sbomify.com/CVE-2013-0246/): Missing authorization in drupal:drupal (medium 4.3)
- [CVE-2013-0245](https://insights.sbomify.com/CVE-2013-0245/): Missing authorization in drupal:drupal (low 2.1)
- [CVE-2013-0244](https://insights.sbomify.com/CVE-2013-0244/): Cross-site scripting in drupal:drupal (low 2.6)
- [CVE-2013-0243](https://insights.sbomify.com/CVE-2013-0243/): Security feature bypass in haskell-tls-extra (high 7.4)
- [CVE-2013-0242](https://insights.sbomify.com/CVE-2013-0242/): Memory corruption in gnu:glibc (medium 5.0)
- [CVE-2013-0241](https://insights.sbomify.com/CVE-2013-0241/): Denial of service in canonical:ubuntu linux (low 2.1)
- [CVE-2013-0240](https://insights.sbomify.com/CVE-2013-0240/): Weak cryptography in canonical:ubuntu linux (medium 4.3)
- [CVE-2013-0239](https://insights.sbomify.com/CVE-2013-0239/): Improper Authentication in Apache CXF (medium 5.0)
- [CVE-2013-0238](https://insights.sbomify.com/CVE-2013-0238/): Denial of service in ircd-hybrid:ircd-hybrid (medium 5.0)
- [CVE-2013-0237](https://insights.sbomify.com/CVE-2013-0237/): Cross-site scripting in fedoraproject:fedora (medium 4.3)
- [CVE-2013-0236](https://insights.sbomify.com/CVE-2013-0236/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2013-0235](https://insights.sbomify.com/CVE-2013-0235/): Server-side request forgery in wordpress:wordpress (medium 6.4)
- [CVE-2013-0234](https://insights.sbomify.com/CVE-2013-0234/): Cross-site scripting in elgg:elgg (medium 4.3)
- [CVE-2013-0233](https://insights.sbomify.com/CVE-2013-0233/): Devise does not properly perform type conversion when performing database queries (medium 6.8)
- [CVE-2013-0232](https://insights.sbomify.com/CVE-2013-0232/): Command injection in zoneminder:zoneminder (high 7.5)
- [CVE-2013-0231](https://insights.sbomify.com/CVE-2013-0231/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2013-0230](https://insights.sbomify.com/CVE-2013-0230/): Memory corruption in miniupnp project:miniupnpd (critical 10.0)
- [CVE-2013-0229](https://insights.sbomify.com/CVE-2013-0229/): Memory corruption in miniupnp project:miniupnpd (high 7.8)
- [CVE-2013-0228](https://insights.sbomify.com/CVE-2013-0228/): Privilege escalation in linux:linux kernel (medium 6.2)
- [CVE-2013-0227](https://insights.sbomify.com/CVE-2013-0227/): Cross-site scripting in mathijs koenraadt:search api sorts (low 2.1)
- [CVE-2013-0226](https://insights.sbomify.com/CVE-2013-0226/): Missing authorization in zugec ivan:keyboard shortcut utility (medium 6.0)
- [CVE-2013-0225](https://insights.sbomify.com/CVE-2013-0225/): Cross-site scripting in user relationships project:user relationships (low 2.1)
- [CVE-2013-0224](https://insights.sbomify.com/CVE-2013-0224/): Code injection in video project:video (medium 4.4)
- [CVE-2013-0223](https://insights.sbomify.com/CVE-2013-0223/): Memory corruption in opensuse:opensuse (low 1.9)
- [CVE-2013-0222](https://insights.sbomify.com/CVE-2013-0222/): Memory corruption in opensuse:opensuse (low 2.1)
- [CVE-2013-0221](https://insights.sbomify.com/CVE-2013-0221/): Memory corruption in opensuse:opensuse (medium 4.3)
- [CVE-2013-0220](https://insights.sbomify.com/CVE-2013-0220/): Memory corruption in fedoraproject:sssd (medium 5.0)
- [CVE-2013-0219](https://insights.sbomify.com/CVE-2013-0219/): Race condition in fedoraproject:sssd (low 3.7)
- [CVE-2013-0218](https://insights.sbomify.com/CVE-2013-0218/): Information disclosure in redhat:jboss enterprise application platform (low 2.1)
- [CVE-2013-0217](https://insights.sbomify.com/CVE-2013-0217/): Denial of service in linux:linux kernel (medium 5.2)
- [CVE-2013-0216](https://insights.sbomify.com/CVE-2013-0216/): Denial of service in linux:linux kernel (medium 5.2)
- [CVE-2013-0215](https://insights.sbomify.com/CVE-2013-0215/): Information disclosure in xen:xen (medium 4.3)
- [CVE-2013-0214](https://insights.sbomify.com/CVE-2013-0214/): Cross-site request forgery in samba:samba (medium 5.1)
- [CVE-2013-0213](https://insights.sbomify.com/CVE-2013-0213/): Other in samba:samba (medium 5.1)
- [CVE-2013-0212](https://insights.sbomify.com/CVE-2013-0212/): OpenStack Glance logs user name and password in cleartext (medium 4.0)
- [CVE-2013-0211](https://insights.sbomify.com/CVE-2013-0211/): Integer overflow in canonical:ubuntu linux (medium 5.0)
- [CVE-2013-0210](https://insights.sbomify.com/CVE-2013-0210/): Command injection in theforeman:foreman (high 7.5)
- [CVE-2013-0209](https://insights.sbomify.com/CVE-2013-0209/): Code injection in sixapart:movable type (high 7.5)
- [CVE-2013-0208](https://insights.sbomify.com/CVE-2013-0208/): Missing authorization in canonical:ubuntu linux (medium 6.5)
- [CVE-2013-0207](https://insights.sbomify.com/CVE-2013-0207/): Cross-site request forgery in leighton whiting:mark complete (medium 6.8)
- [CVE-2013-0206](https://insights.sbomify.com/CVE-2013-0206/): File upload in guy bedford:live css (medium 6.0)
- [CVE-2013-0205](https://insights.sbomify.com/CVE-2013-0205/): Cross-site request forgery in restful web services project:restful web services (medium 6.8)
- [CVE-2013-0204](https://insights.sbomify.com/CVE-2013-0204/): Code injection in owncloud:owncloud server (medium 4.6)
- [CVE-2013-0203](https://insights.sbomify.com/CVE-2013-0203/): Cross-site scripting in ownCloud Server (medium 5.4)
- [CVE-2013-0202](https://insights.sbomify.com/CVE-2013-0202/): Cross-site scripting in ownCloud (medium 6.1)
- [CVE-2013-0201](https://insights.sbomify.com/CVE-2013-0201/): Cross-site scripting in owncloud:owncloud (medium 4.3)
- [CVE-2013-0200](https://insights.sbomify.com/CVE-2013-0200/): Race condition in hp:linux imaging and printing project (low 1.9)
- [CVE-2013-0199](https://insights.sbomify.com/CVE-2013-0199/): Missing authorization in redhat:freeipa (medium 5.0)
- [CVE-2013-0198](https://insights.sbomify.com/CVE-2013-0198/): Denial of service in thekelleys:dnsmasq (medium 5.0)
- [CVE-2013-0197](https://insights.sbomify.com/CVE-2013-0197/): Cross-site scripting in mantisbt:mantisbt (medium 4.3)
- [CVE-2013-0196](https://insights.sbomify.com/CVE-2013-0196/): Cross-site request forgery in OpenShift Enterprise (medium 6.5)
- [CVE-2013-0195](https://insights.sbomify.com/CVE-2013-0195/): Cross-site scripting in piwik (medium 6.1)
- [CVE-2013-0194](https://insights.sbomify.com/CVE-2013-0194/): Cross-site scripting in piwik (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/61/