# Vulnerabilities published in 2013


- [CVE-2013-0193](https://insights.sbomify.com/CVE-2013-0193/): Cross-site scripting in piwik (medium 6.1)
- [CVE-2013-0192](https://insights.sbomify.com/CVE-2013-0192/): Information disclosure in SMF (medium 4.9)
- [CVE-2013-0191](https://insights.sbomify.com/CVE-2013-0191/): Auth bypass in lucas clemente vella:libpam-pgsql (medium 5.0)
- [CVE-2013-0190](https://insights.sbomify.com/CVE-2013-0190/): Memory corruption in linux:linux kernel (medium 4.9)
- [CVE-2013-0189](https://insights.sbomify.com/CVE-2013-0189/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2013-0187](https://insights.sbomify.com/CVE-2013-0187/): Privilege escalation in theforeman:foreman (medium 6.5)
- [CVE-2013-0186](https://insights.sbomify.com/CVE-2013-0186/): Cross-site scripting in ManageIQ EVM (medium 6.1)
- [CVE-2013-0185](https://insights.sbomify.com/CVE-2013-0185/): Cross-site request forgery in redhat:manageiq enterprise virtualization manager (high 8.8)
- [CVE-2013-0184](https://insights.sbomify.com/CVE-2013-0184/): Rack vulnerable to Denial of Service (medium 4.3)
- [CVE-2013-0183](https://insights.sbomify.com/CVE-2013-0183/): Rack rubygems receiving excessively long lines triggers out-of-memory error (medium 5.0)
- [CVE-2013-0182](https://insights.sbomify.com/CVE-2013-0182/): Missing authorization in bart feenstra:payment (medium 5.0)
- [CVE-2013-0181](https://insights.sbomify.com/CVE-2013-0181/): Cross-site scripting in thomas seidl:search api (low 2.6)
- [CVE-2013-0180](https://insights.sbomify.com/CVE-2013-0180/): Other in Redis (medium 5.5)
- [CVE-2013-0179](https://insights.sbomify.com/CVE-2013-0179/): Memory corruption in memcached:memcached (low 1.8)
- [CVE-2013-0178](https://insights.sbomify.com/CVE-2013-0178/): Other in Redis (medium 5.5)
- [CVE-2013-0177](https://insights.sbomify.com/CVE-2013-0177/): Cross-site scripting in apache:ofbiz (low 3.5)
- [CVE-2013-0176](https://insights.sbomify.com/CVE-2013-0176/): Null dereference in libssh:libssh (medium 4.3)
- [CVE-2013-0175](https://insights.sbomify.com/CVE-2013-0175/): Improper Input Validation in multi_xml (high 7.5)
- [CVE-2013-0174](https://insights.sbomify.com/CVE-2013-0174/): Information disclosure in theforeman:foreman (medium 5.0)
- [CVE-2013-0173](https://insights.sbomify.com/CVE-2013-0173/): Weak cryptography in theforeman:foreman (medium 5.0)
- [CVE-2013-0172](https://insights.sbomify.com/CVE-2013-0172/): Security feature bypass in samba:samba (low 3.5)
- [CVE-2013-0171](https://insights.sbomify.com/CVE-2013-0171/): Deserialization in theforeman:foreman (high 7.5)
- [CVE-2013-0170](https://insights.sbomify.com/CVE-2013-0170/): Use after free in canonical:ubuntu linux (medium 6.8)
- [CVE-2013-0169](https://insights.sbomify.com/CVE-2013-0169/): Weak cryptography in openssl:openssl (low 2.6)
- [CVE-2013-0168](https://insights.sbomify.com/CVE-2013-0168/): Missing authorization in redhat:enterprise virtualization manager (medium 4.0)
- [CVE-2013-0167](https://insights.sbomify.com/CVE-2013-0167/): Denial of service in redhat:enterprise virtualization (low 2.7)
- [CVE-2013-0166](https://insights.sbomify.com/CVE-2013-0166/): Null dereference in openssl:openssl (medium 5.0)
- [CVE-2013-0165](https://insights.sbomify.com/CVE-2013-0165/): Other in OpenShift mongodb cartridge (high 7.3)
- [CVE-2013-0164](https://insights.sbomify.com/CVE-2013-0164/): Race condition in redhat:openshift (low 3.6)
- [CVE-2013-0163](https://insights.sbomify.com/CVE-2013-0163/): Other in OpenShift haproxy cartridge (medium 5.5)
- [CVE-2013-0162](https://insights.sbomify.com/CVE-2013-0162/): ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name (low 2.1)
- [CVE-2013-0161](https://insights.sbomify.com/CVE-2013-0161/): Cross-site scripting in CMS (medium 5.4)
- [CVE-2013-0160](https://insights.sbomify.com/CVE-2013-0160/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2013-0159](https://insights.sbomify.com/CVE-2013-0159/): Other in fedoraproject:fedora (high 7.1)
- [CVE-2013-0158](https://insights.sbomify.com/CVE-2013-0158/): Jenkins allows attackers to obtain the master cryptographic key (low 2.6)
- [CVE-2013-0157](https://insights.sbomify.com/CVE-2013-0157/): Information disclosure in kernel:util-linux (low 2.1)
- [CVE-2013-0156](https://insights.sbomify.com/CVE-2013-0156/): actionpack Improper Input Validation vulnerability (high 7.5)
- [CVE-2013-0155](https://insights.sbomify.com/CVE-2013-0155/): Active Record allows bypassing of database-query restrictions (medium 6.4)
- [CVE-2013-0154](https://insights.sbomify.com/CVE-2013-0154/): Denial of service in xen:xen (low 1.9)
- [CVE-2013-0153](https://insights.sbomify.com/CVE-2013-0153/): Denial of service in xen:xen (medium 4.7)
- [CVE-2013-0152](https://insights.sbomify.com/CVE-2013-0152/): Denial of service in xen:xen (medium 4.7)
- [CVE-2013-0151](https://insights.sbomify.com/CVE-2013-0151/): Denial of service in xen:xen (medium 4.6)
- [CVE-2013-0150](https://insights.sbomify.com/CVE-2013-0150/): Path traversal in f5:big-ip access policy manager (critical 9.3)
- [CVE-2013-0149](https://insights.sbomify.com/CVE-2013-0149/): Denial of service in cisco:asa 5500 (medium 5.8)
- [CVE-2013-0148](https://insights.sbomify.com/CVE-2013-0148/): Weak cryptography in faircom:c-treeace (high 7.1)
- [CVE-2013-0145](https://insights.sbomify.com/CVE-2013-0145/): Memory corruption in vercot:serva32 (medium 5.0)
- [CVE-2013-0144](https://insights.sbomify.com/CVE-2013-0144/): Cross-site request forgery in qnap:viostor network video recorder (medium 6.8)
- [CVE-2013-0143](https://insights.sbomify.com/CVE-2013-0143/): Command injection in qnap:nas (medium 6.5)
- [CVE-2013-0142](https://insights.sbomify.com/CVE-2013-0142/): Hardcoded credentials in qnap:nas (medium 5.0)
- [CVE-2013-0141](https://insights.sbomify.com/CVE-2013-0141/): Path traversal in mcafee:epolicy orchestrator (medium 4.3)
- [CVE-2013-0140](https://insights.sbomify.com/CVE-2013-0140/): SQL injection in mcafee:epolicy orchestrator (high 7.9)
- [CVE-2013-0139](https://insights.sbomify.com/CVE-2013-0139/): Denial of service in arecont:vision av1355dn megadome camera (high 7.8)
- [CVE-2013-0138](https://insights.sbomify.com/CVE-2013-0138/): Memory corruption in bitberry software:bitzipper (critical 9.3)
- [CVE-2013-0137](https://insights.sbomify.com/CVE-2013-0137/): Hardcoded credentials in digital alert systems:dasdec eas (critical 10.0)
- [CVE-2013-0136](https://insights.sbomify.com/CVE-2013-0136/): Path traversal in mutiny:mutiny (high 8.5)
- [CVE-2013-0135](https://insights.sbomify.com/CVE-2013-0135/): SQL injection in chatelao:php address book (high 7.5)
- [CVE-2013-0134](https://insights.sbomify.com/CVE-2013-0134/): Cross-site scripting in airdroid:airdroid (medium 4.3)
- [CVE-2013-0133](https://insights.sbomify.com/CVE-2013-0133/): Privilege escalation in parallels:parallels plesk panel (high 7.2)
- [CVE-2013-0132](https://insights.sbomify.com/CVE-2013-0132/): Code injection in parallels:parallels plesk panel (medium 6.8)
- [CVE-2013-0131](https://insights.sbomify.com/CVE-2013-0131/): Memory corruption in nvidia:gpu driver (high 7.1)
- [CVE-2013-0130](https://insights.sbomify.com/CVE-2013-0130/): Memory corruption in coreftp:coreftp (medium 5.1)
- [CVE-2013-0129](https://insights.sbomify.com/CVE-2013-0129/): Cross-site scripting in pd-admin:pd-admin (low 3.5)
- [CVE-2013-0128](https://insights.sbomify.com/CVE-2013-0128/): Information disclosure in tigertext:tigertext (medium 5.0)
- [CVE-2013-0127](https://insights.sbomify.com/CVE-2013-0127/): Security feature bypass in ibm:lotus notes (medium 5.8)
- [CVE-2013-0126](https://insights.sbomify.com/CVE-2013-0126/): Cross-site request forgery in verizon:fios actiontec mi424wr-gen31 router (medium 6.8)
- [CVE-2013-0125](https://insights.sbomify.com/CVE-2013-0125/): Cross-site scripting in c2enterprise:c2 webresource (medium 4.3)
- [CVE-2013-0124](https://insights.sbomify.com/CVE-2013-0124/): Cross-site scripting in askia:askiaweb (medium 4.3)
- [CVE-2013-0123](https://insights.sbomify.com/CVE-2013-0123/): SQL injection in askia:askiaweb (high 7.5)
- [CVE-2013-0122](https://insights.sbomify.com/CVE-2013-0122/): Denial of service in avast:avast\! mobile security (low 1.9)
- [CVE-2013-0120](https://insights.sbomify.com/CVE-2013-0120/): Denial of service in dell:powerconnect 6248p (high 7.8)
- [CVE-2013-0118](https://insights.sbomify.com/CVE-2013-0118/): Business logic in cs-cart:cs-cart (medium 5.0)
- [CVE-2013-0113](https://insights.sbomify.com/CVE-2013-0113/): Memory corruption in nuance:pdf reader (critical 9.3)
- [CVE-2013-0111](https://insights.sbomify.com/CVE-2013-0111/): Privilege escalation in nvidia:driver (medium 6.8)
- [CVE-2013-0110](https://insights.sbomify.com/CVE-2013-0110/): Privilege escalation in nvidia:driver (medium 6.8)
- [CVE-2013-0109](https://insights.sbomify.com/CVE-2013-0109/): Memory corruption in nvidia:display driver (high 7.2)
- [CVE-2013-0108](https://insights.sbomify.com/CVE-2013-0108/): Code injection in honeywell:comfortpoint open manager station (medium 6.8)
- [CVE-2013-0107](https://insights.sbomify.com/CVE-2013-0107/): Memory corruption in foxitsoftware:foxit advanced pdf editor (high 7.6)
- [CVE-2013-0096](https://insights.sbomify.com/CVE-2013-0096/): Security feature bypass in microsoft:windows essentials (medium 6.8)
- [CVE-2013-0095](https://insights.sbomify.com/CVE-2013-0095/): Information disclosure in microsoft:office (medium 5.0)
- [CVE-2013-0094](https://insights.sbomify.com/CVE-2013-0094/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2013-0093](https://insights.sbomify.com/CVE-2013-0093/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2013-0092](https://insights.sbomify.com/CVE-2013-0092/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2013-0091](https://insights.sbomify.com/CVE-2013-0091/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2013-0090](https://insights.sbomify.com/CVE-2013-0090/): Use after free in microsoft:internet explorer (high 8.8)
- [CVE-2013-0089](https://insights.sbomify.com/CVE-2013-0089/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2013-0088](https://insights.sbomify.com/CVE-2013-0088/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2013-0087](https://insights.sbomify.com/CVE-2013-0087/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2013-0086](https://insights.sbomify.com/CVE-2013-0086/): Memory corruption in microsoft:sharepoint foundation (medium 5.0)
- [CVE-2013-0085](https://insights.sbomify.com/CVE-2013-0085/): Memory corruption in microsoft:sharepoint foundation (high 7.8)
- [CVE-2013-0084](https://insights.sbomify.com/CVE-2013-0084/): Path traversal in microsoft:sharepoint foundation (high 7.5)
- [CVE-2013-0083](https://insights.sbomify.com/CVE-2013-0083/): Cross-site scripting in microsoft:sharepoint foundation (medium 4.3)
- [CVE-2013-0082](https://insights.sbomify.com/CVE-2013-0082/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2013-0081](https://insights.sbomify.com/CVE-2013-0081/): Denial of service in microsoft:sharepoint foundation (medium 5.0)
- [CVE-2013-0080](https://insights.sbomify.com/CVE-2013-0080/): Auth bypass in microsoft:sharepoint foundation (high 7.5)
- [CVE-2013-0079](https://insights.sbomify.com/CVE-2013-0079/): Memory corruption in microsoft:office filter pack (critical 9.3)
- [CVE-2013-0078](https://insights.sbomify.com/CVE-2013-0078/): Privilege escalation in microsoft:windows defender (high 7.2)
- [CVE-2013-0077](https://insights.sbomify.com/CVE-2013-0077/): Code injection in microsoft:windows server 2003 (critical 9.3)
- [CVE-2013-0076](https://insights.sbomify.com/CVE-2013-0076/): Memory corruption in microsoft:windows 7 (high 7.2)
- [CVE-2013-0075](https://insights.sbomify.com/CVE-2013-0075/): Denial of service in microsoft:windows 7 (high 7.8)
- [CVE-2013-0074](https://insights.sbomify.com/CVE-2013-0074/): Microsoft Silverlight Double Dereference (high 7.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/62/