# Vulnerabilities published in 2013


- [CVE-2013-6495](https://insights.sbomify.com/CVE-2013-6495/): JBossWeb Bayeux has reflected XSS (medium 6.1)
- [CVE-2013-6494](https://insights.sbomify.com/CVE-2013-6494/): Denial of service in n/a (low 2.1)
- [CVE-2013-6493](https://insights.sbomify.com/CVE-2013-6493/): Information disclosure in n/a (low 2.1)
- [CVE-2013-6492](https://insights.sbomify.com/CVE-2013-6492/): Auth bypass in n/a (medium 5.8)
- [CVE-2013-6491](https://insights.sbomify.com/CVE-2013-6491/): Weak cryptography in n/a (medium 4.3)
- [CVE-2013-6490](https://insights.sbomify.com/CVE-2013-6490/): Memory corruption in n/a (critical 10.0)
- [CVE-2013-6489](https://insights.sbomify.com/CVE-2013-6489/): Integer overflow in n/a (medium 5.0)
- [CVE-2013-6487](https://insights.sbomify.com/CVE-2013-6487/): Integer overflow in n/a (high 7.5)
- [CVE-2013-6486](https://insights.sbomify.com/CVE-2013-6486/): Command injection in n/a (critical 9.3)
- [CVE-2013-6485](https://insights.sbomify.com/CVE-2013-6485/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-6484](https://insights.sbomify.com/CVE-2013-6484/): The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds (medium 5.0)
- [CVE-2013-6483](https://insights.sbomify.com/CVE-2013-6483/): Null dereference in n/a (medium 6.4)
- [CVE-2013-6482](https://insights.sbomify.com/CVE-2013-6482/): Null dereference in n/a (medium 5.0)
- [CVE-2013-6481](https://insights.sbomify.com/CVE-2013-6481/): libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! (medium 5.0)
- [CVE-2013-6480](https://insights.sbomify.com/CVE-2013-6480/): Libcloud does not properly scrub data when destroying a DigitalOcean node (low 2.1)
- [CVE-2013-6479](https://insights.sbomify.com/CVE-2013-6479/): Denial of service in n/a (medium 5.0)
- [CVE-2013-6478](https://insights.sbomify.com/CVE-2013-6478/): Denial of service in n/a (medium 4.3)
- [CVE-2013-6477](https://insights.sbomify.com/CVE-2013-6477/): Integer overflow in n/a (medium 5.0)
- [CVE-2013-6476](https://insights.sbomify.com/CVE-2013-6476/): Path traversal in n/a (medium 4.4)
- [CVE-2013-6475](https://insights.sbomify.com/CVE-2013-6475/): Integer overflow in n/a (medium 6.8)
- [CVE-2013-6474](https://insights.sbomify.com/CVE-2013-6474/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-6473](https://insights.sbomify.com/CVE-2013-6473/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-6472](https://insights.sbomify.com/CVE-2013-6472/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-6470](https://insights.sbomify.com/CVE-2013-6470/): Auth bypass in n/a (medium 5.0)
- [CVE-2013-6469](https://insights.sbomify.com/CVE-2013-6469/): Code injection in n/a (medium 6.5)
- [CVE-2013-6468](https://insights.sbomify.com/CVE-2013-6468/): Code injection in n/a (medium 6.5)
- [CVE-2013-6467](https://insights.sbomify.com/CVE-2013-6467/): Null dereference in n/a (medium 5.0)
- [CVE-2013-6466](https://insights.sbomify.com/CVE-2013-6466/): Null dereference in n/a (medium 5.0)
- [CVE-2013-6465](https://insights.sbomify.com/CVE-2013-6465/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2013-6462](https://insights.sbomify.com/CVE-2013-6462/): Memory corruption in n/a (critical 9.3)
- [CVE-2013-6461](https://insights.sbomify.com/CVE-2013-6461/): Nokogiri vulnerable to DoS while parsing XML entities (medium 6.5)
- [CVE-2013-6460](https://insights.sbomify.com/CVE-2013-6460/): Nokogiri vulnerable to DoS while parsing XML documents (medium 6.5)
- [CVE-2013-6459](https://insights.sbomify.com/CVE-2013-6459/): will_paginate Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2013-6458](https://insights.sbomify.com/CVE-2013-6458/): Race condition in n/a (medium 6.8)
- [CVE-2013-6457](https://insights.sbomify.com/CVE-2013-6457/): Memory corruption in n/a (medium 5.2)
- [CVE-2013-6456](https://insights.sbomify.com/CVE-2013-6456/): Path traversal in n/a (medium 5.8)
- [CVE-2013-6455](https://insights.sbomify.com/CVE-2013-6455/): Information disclosure in MediaWiki (medium 5.3)
- [CVE-2013-6454](https://insights.sbomify.com/CVE-2013-6454/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6453](https://insights.sbomify.com/CVE-2013-6453/): XML external entity in n/a (high 7.5)
- [CVE-2013-6452](https://insights.sbomify.com/CVE-2013-6452/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6451](https://insights.sbomify.com/CVE-2013-6451/): Cross-site scripting in MediaWiki (medium 6.1)
- [CVE-2013-6450](https://insights.sbomify.com/CVE-2013-6450/): Denial of service in n/a (medium 5.8)
- [CVE-2013-6449](https://insights.sbomify.com/CVE-2013-6449/): The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, w (medium 4.3)
- [CVE-2013-6448](https://insights.sbomify.com/CVE-2013-6448/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-6447](https://insights.sbomify.com/CVE-2013-6447/): XML external entity in n/a (medium 5.0)
- [CVE-2013-6446](https://insights.sbomify.com/CVE-2013-6446/): Missing authorization in n/a (low 3.1)
- [CVE-2013-6445](https://insights.sbomify.com/CVE-2013-6445/): Weak cryptography in n/a (medium 5.0)
- [CVE-2013-6444](https://insights.sbomify.com/CVE-2013-6444/): PyWBEM TOCTOU vulnerability in certificate validation (medium 5.8)
- [CVE-2013-6443](https://insights.sbomify.com/CVE-2013-6443/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-6442](https://insights.sbomify.com/CVE-2013-6442/): Security feature bypass in n/a (medium 5.8)
- [CVE-2013-6441](https://insights.sbomify.com/CVE-2013-6441/): Privilege escalation in n/a (high 7.2)
- [CVE-2013-6440](https://insights.sbomify.com/CVE-2013-6440/): Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML (medium 5.0)
- [CVE-2013-6439](https://insights.sbomify.com/CVE-2013-6439/): Auth bypass in n/a (critical 9.3)
- [CVE-2013-6438](https://insights.sbomify.com/CVE-2013-6438/): Denial of service in n/a (medium 5.0)
- [CVE-2013-6437](https://insights.sbomify.com/CVE-2013-6437/): OpenStack Nova DoS through ephemeral disk backing files (medium 4.0)
- [CVE-2013-6436](https://insights.sbomify.com/CVE-2013-6436/): Null dereference in n/a (low 2.1)
- [CVE-2013-6435](https://insights.sbomify.com/CVE-2013-6435/): Race condition in n/a (high 7.6)
- [CVE-2013-6434](https://insights.sbomify.com/CVE-2013-6434/): Security feature bypass in n/a (medium 4.3)
- [CVE-2013-6433](https://insights.sbomify.com/CVE-2013-6433/): Privilege escalation in n/a (high 7.6)
- [CVE-2013-6432](https://insights.sbomify.com/CVE-2013-6432/): Null dereference in n/a (medium 4.6)
- [CVE-2013-6431](https://insights.sbomify.com/CVE-2013-6431/): Null dereference in n/a (medium 4.7)
- [CVE-2013-6430](https://insights.sbomify.com/CVE-2013-6430/): Improper Neutralization of Input During Web Page Generation in Spring Framework (medium 5.4)
- [CVE-2013-6429](https://insights.sbomify.com/CVE-2013-6429/): Cross-Site Request Forgery in Spring Framework (medium 6.8)
- [CVE-2013-6428](https://insights.sbomify.com/CVE-2013-6428/): Auth bypass in n/a (medium 4.0)
- [CVE-2013-6427](https://insights.sbomify.com/CVE-2013-6427/): Code injection in n/a (medium 6.8)
- [CVE-2013-6426](https://insights.sbomify.com/CVE-2013-6426/): Missing authorization in n/a (medium 4.0)
- [CVE-2013-6425](https://insights.sbomify.com/CVE-2013-6425/): Integer overflow in n/a (medium 5.0)
- [CVE-2013-6424](https://insights.sbomify.com/CVE-2013-6424/): Integer overflow in n/a (medium 5.0)
- [CVE-2013-6422](https://insights.sbomify.com/CVE-2013-6422/): Security feature bypass in n/a (medium 4.0)
- [CVE-2013-6421](https://insights.sbomify.com/CVE-2013-6421/): sprout Arbitrary Code Execution vulnerability (high 7.5)
- [CVE-2013-6420](https://insights.sbomify.com/CVE-2013-6420/): Memory corruption in n/a (high 7.5)
- [CVE-2013-6419](https://insights.sbomify.com/CVE-2013-6419/): OpenStack Nova Router metadata queries are not restricted by tenant (medium 5.0)
- [CVE-2013-6418](https://insights.sbomify.com/CVE-2013-6418/): PyWBEM TOCTOU vulnerability in certificate validation (medium 5.8)
- [CVE-2013-6417](https://insights.sbomify.com/CVE-2013-6417/): actionpack allows bypass of database-query restrictions (medium 6.4)
- [CVE-2013-6416](https://insights.sbomify.com/CVE-2013-6416/): actionpack Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2013-6415](https://insights.sbomify.com/CVE-2013-6415/): actionpack vulnerable to Cross-site Scripting (medium 4.3)
- [CVE-2013-6414](https://insights.sbomify.com/CVE-2013-6414/): actionpack Improper Input Validation vulnerability (medium 5.0)
- [CVE-2013-6413](https://insights.sbomify.com/CVE-2013-6413/): Use after free in n/a (medium 5.0)
- [CVE-2013-6412](https://insights.sbomify.com/CVE-2013-6412/): Misconfiguration in n/a (medium 4.6)
- [CVE-2013-6411](https://insights.sbomify.com/CVE-2013-6411/): Denial of service in n/a (medium 5.0)
- [CVE-2013-6410](https://insights.sbomify.com/CVE-2013-6410/): Auth bypass in n/a (high 7.5)
- [CVE-2013-6409](https://insights.sbomify.com/CVE-2013-6409/): Privilege escalation in n/a (medium 6.2)
- [CVE-2013-6408](https://insights.sbomify.com/CVE-2013-6408/): XML Injection in Apache Solr (medium 6.4)
- [CVE-2013-6407](https://insights.sbomify.com/CVE-2013-6407/): Apache Solr UpdateRequestHandler for XML resolves XML External Entities (medium 6.4)
- [CVE-2013-6404](https://insights.sbomify.com/CVE-2013-6404/): Missing authorization in n/a (medium 4.0)
- [CVE-2013-6403](https://insights.sbomify.com/CVE-2013-6403/): Auth bypass in n/a (medium 6.8)
- [CVE-2013-6402](https://insights.sbomify.com/CVE-2013-6402/): Path traversal in n/a (low 2.1)
- [CVE-2013-6401](https://insights.sbomify.com/CVE-2013-6401/): Denial of service in n/a (medium 5.0)
- [CVE-2013-6400](https://insights.sbomify.com/CVE-2013-6400/): Privilege escalation in n/a (medium 6.8)
- [CVE-2013-6399](https://insights.sbomify.com/CVE-2013-6399/): Code injection in n/a (high 7.5)
- [CVE-2013-6398](https://insights.sbomify.com/CVE-2013-6398/): Security feature bypass in n/a (low 2.8)
- [CVE-2013-6397](https://insights.sbomify.com/CVE-2013-6397/): Improper Limitation of a Pathname to a Restricted Directory in Apache Solr (medium 4.3)
- [CVE-2013-6396](https://insights.sbomify.com/CVE-2013-6396/): Python Swift client is vulnerable to Missing SSL Certificate Check (medium 5.8)
- [CVE-2013-6395](https://insights.sbomify.com/CVE-2013-6395/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6394](https://insights.sbomify.com/CVE-2013-6394/): Weak cryptography in n/a (low 2.1)
- [CVE-2013-6393](https://insights.sbomify.com/CVE-2013-6393/): Heap Based Buffer Overflow in libyaml (medium 6.8)
- [CVE-2013-6392](https://insights.sbomify.com/CVE-2013-6392/): Information disclosure in n/a (medium 4.9)
- [CVE-2013-6391](https://insights.sbomify.com/CVE-2013-6391/): Privilege escalation in n/a (medium 5.8)
- [CVE-2013-6389](https://insights.sbomify.com/CVE-2013-6389/): Drupal has open redirect vulnerability in the Overlay module (medium 5.8)
- [CVE-2013-6388](https://insights.sbomify.com/CVE-2013-6388/): Cross-site scripting in n/a (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/8/