# Vulnerabilities published in 2013


- [CVE-2013-6387](https://insights.sbomify.com/CVE-2013-6387/): Cross-site scripting in n/a (low 2.1)
- [CVE-2013-6386](https://insights.sbomify.com/CVE-2013-6386/): Weak cryptography in n/a (medium 6.8)
- [CVE-2013-6385](https://insights.sbomify.com/CVE-2013-6385/): Cross-site request forgery in n/a (medium 5.1)
- [CVE-2013-6384](https://insights.sbomify.com/CVE-2013-6384/): Information disclosure in n/a (low 1.9)
- [CVE-2013-6383](https://insights.sbomify.com/CVE-2013-6383/): Missing authorization in n/a (medium 6.9)
- [CVE-2013-6382](https://insights.sbomify.com/CVE-2013-6382/): Memory corruption in n/a (medium 4.0)
- [CVE-2013-6381](https://insights.sbomify.com/CVE-2013-6381/): Memory corruption in n/a (medium 6.9)
- [CVE-2013-6380](https://insights.sbomify.com/CVE-2013-6380/): Null dereference in n/a (medium 4.7)
- [CVE-2013-6378](https://insights.sbomify.com/CVE-2013-6378/): Denial of service in n/a (medium 4.4)
- [CVE-2013-6376](https://insights.sbomify.com/CVE-2013-6376/): Denial of service in n/a (medium 5.2)
- [CVE-2013-6375](https://insights.sbomify.com/CVE-2013-6375/): Privilege escalation in n/a (high 7.9)
- [CVE-2013-6374](https://insights.sbomify.com/CVE-2013-6374/): Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS) (low 3.5)
- [CVE-2013-6373](https://insights.sbomify.com/CVE-2013-6373/): Jenkins Exclusion Plugin allows Access to Resource Locks (medium 5.5)
- [CVE-2013-6372](https://insights.sbomify.com/CVE-2013-6372/): Jenkins Subversion Plugin Stores Credentials with Base64 Encoding (low 2.1)
- [CVE-2013-6371](https://insights.sbomify.com/CVE-2013-6371/): Denial of service in n/a (medium 5.0)
- [CVE-2013-6370](https://insights.sbomify.com/CVE-2013-6370/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-6369](https://insights.sbomify.com/CVE-2013-6369/): Memory corruption in n/a (medium 6.8)
- [CVE-2013-6368](https://insights.sbomify.com/CVE-2013-6368/): Privilege escalation in n/a (medium 6.2)
- [CVE-2013-6367](https://insights.sbomify.com/CVE-2013-6367/): Denial of service in n/a (medium 5.7)
- [CVE-2013-6366](https://insights.sbomify.com/CVE-2013-6366/): Code injection in n/a (medium 6.5)
- [CVE-2013-6365](https://insights.sbomify.com/CVE-2013-6365/): Cross-site request forgery in n/a (medium 5.3)
- [CVE-2013-6364](https://insights.sbomify.com/CVE-2013-6364/): Cross-site scripting in n/a (high 8.8)
- [CVE-2013-6362](https://insights.sbomify.com/CVE-2013-6362/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2013-6360](https://insights.sbomify.com/CVE-2013-6360/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2013-6359](https://insights.sbomify.com/CVE-2013-6359/): Denial of service in n/a (medium 4.3)
- [CVE-2013-6358](https://insights.sbomify.com/CVE-2013-6358/): File upload in n/a (high 8.8)
- [CVE-2013-6357](https://insights.sbomify.com/CVE-2013-6357/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-6349](https://insights.sbomify.com/CVE-2013-6349/): Code injection in n/a (high 8.5)
- [CVE-2013-6348](https://insights.sbomify.com/CVE-2013-6348/): Apache Struts is vulnerable to Cross-site Scripting (medium 4.3)
- [CVE-2013-6347](https://insights.sbomify.com/CVE-2013-6347/): Auth bypass in n/a (medium 6.8)
- [CVE-2013-6346](https://insights.sbomify.com/CVE-2013-6346/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-6345](https://insights.sbomify.com/CVE-2013-6345/): Other in n/a (critical 10.0)
- [CVE-2013-6344](https://insights.sbomify.com/CVE-2013-6344/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6343](https://insights.sbomify.com/CVE-2013-6343/): Memory corruption in n/a (critical 10.0)
- [CVE-2013-6342](https://insights.sbomify.com/CVE-2013-6342/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6341](https://insights.sbomify.com/CVE-2013-6341/): SQL injection in n/a (high 7.5)
- [CVE-2013-6340](https://insights.sbomify.com/CVE-2013-6340/): Denial of service in n/a (medium 4.3)
- [CVE-2013-6339](https://insights.sbomify.com/CVE-2013-6339/): Denial of service in n/a (medium 4.3)
- [CVE-2013-6338](https://insights.sbomify.com/CVE-2013-6338/): Denial of service in n/a (medium 4.3)
- [CVE-2013-6337](https://insights.sbomify.com/CVE-2013-6337/): Denial of service in n/a (medium 4.3)
- [CVE-2013-6336](https://insights.sbomify.com/CVE-2013-6336/): The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1 (medium 4.3)
- [CVE-2013-6335](https://insights.sbomify.com/CVE-2013-6335/): Missing authorization in n/a (low 3.3)
- [CVE-2013-6334](https://insights.sbomify.com/CVE-2013-6334/): Auth bypass in n/a (medium 6.4)
- [CVE-2013-6333](https://insights.sbomify.com/CVE-2013-6333/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6332](https://insights.sbomify.com/CVE-2013-6332/): File upload in n/a (high 8.5)
- [CVE-2013-6331](https://insights.sbomify.com/CVE-2013-6331/): SQL injection in n/a (medium 6.5)
- [CVE-2013-6330](https://insights.sbomify.com/CVE-2013-6330/): Information disclosure in n/a (low 3.5)
- [CVE-2013-6329](https://insights.sbomify.com/CVE-2013-6329/): Denial of service in n/a (high 7.8)
- [CVE-2013-6328](https://insights.sbomify.com/CVE-2013-6328/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6327](https://insights.sbomify.com/CVE-2013-6327/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6325](https://insights.sbomify.com/CVE-2013-6325/): Denial of service in n/a (medium 4.3)
- [CVE-2013-6323](https://insights.sbomify.com/CVE-2013-6323/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6322](https://insights.sbomify.com/CVE-2013-6322/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6321](https://insights.sbomify.com/CVE-2013-6321/): SQL injection in n/a (high 7.5)
- [CVE-2013-6320](https://insights.sbomify.com/CVE-2013-6320/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6319](https://insights.sbomify.com/CVE-2013-6319/): Missing authorization in n/a (medium 4.0)
- [CVE-2013-6318](https://insights.sbomify.com/CVE-2013-6318/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6316](https://insights.sbomify.com/CVE-2013-6316/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-6315](https://insights.sbomify.com/CVE-2013-6315/): Other in n/a (medium 4.3)
- [CVE-2013-6314](https://insights.sbomify.com/CVE-2013-6314/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6312](https://insights.sbomify.com/CVE-2013-6312/): Path traversal in n/a (medium 5.0)
- [CVE-2013-6311](https://insights.sbomify.com/CVE-2013-6311/): SQL injection in n/a (medium 6.5)
- [CVE-2013-6310](https://insights.sbomify.com/CVE-2013-6310/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6309](https://insights.sbomify.com/CVE-2013-6309/): Code injection in n/a (medium 6.0)
- [CVE-2013-6308](https://insights.sbomify.com/CVE-2013-6308/): Cross-site scripting in n/a (medium 4.9)
- [CVE-2013-6307](https://insights.sbomify.com/CVE-2013-6307/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6306](https://insights.sbomify.com/CVE-2013-6306/): Privilege escalation in n/a (medium 4.6)
- [CVE-2013-6305](https://insights.sbomify.com/CVE-2013-6305/): Hardcoded credentials in n/a (medium 4.3)
- [CVE-2013-6304](https://insights.sbomify.com/CVE-2013-6304/): Path traversal in n/a (medium 4.0)
- [CVE-2013-6303](https://insights.sbomify.com/CVE-2013-6303/): Path traversal in n/a (medium 4.0)
- [CVE-2013-6302](https://insights.sbomify.com/CVE-2013-6302/): SQL injection in n/a (medium 6.5)
- [CVE-2013-6301](https://insights.sbomify.com/CVE-2013-6301/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6300](https://insights.sbomify.com/CVE-2013-6300/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6299](https://insights.sbomify.com/CVE-2013-6299/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-6295](https://insights.sbomify.com/CVE-2013-6295/): Privilege escalation in n/a (critical 9.8)
- [CVE-2013-6289](https://insights.sbomify.com/CVE-2013-6289/): Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS) (medium 4.3)
- [CVE-2013-6288](https://insights.sbomify.com/CVE-2013-6288/): Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize (critical 10.0)
- [CVE-2013-6285](https://insights.sbomify.com/CVE-2013-6285/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-6284](https://insights.sbomify.com/CVE-2013-6284/): Code injection in n/a (high 7.5)
- [CVE-2013-6283](https://insights.sbomify.com/CVE-2013-6283/): Memory corruption in n/a (high 7.5)
- [CVE-2013-6282](https://insights.sbomify.com/CVE-2013-6282/): Linux Kernel Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2013-6281](https://insights.sbomify.com/CVE-2013-6281/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6280](https://insights.sbomify.com/CVE-2013-6280/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6277](https://insights.sbomify.com/CVE-2013-6277/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2013-6276](https://insights.sbomify.com/CVE-2013-6276/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2013-6275](https://insights.sbomify.com/CVE-2013-6275/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2013-6272](https://insights.sbomify.com/CVE-2013-6272/): Missing authorization in n/a (high 7.8)
- [CVE-2013-6271](https://insights.sbomify.com/CVE-2013-6271/): Auth bypass in n/a (high 8.8)
- [CVE-2013-6267](https://insights.sbomify.com/CVE-2013-6267/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-6246](https://insights.sbomify.com/CVE-2013-6246/): Security feature bypass in n/a (medium 5.0)
- [CVE-2013-6245](https://insights.sbomify.com/CVE-2013-6245/): Code injection in n/a (critical 10.0)
- [CVE-2013-6244](https://insights.sbomify.com/CVE-2013-6244/): XML external entity in n/a (medium 5.0)
- [CVE-2013-6243](https://insights.sbomify.com/CVE-2013-6243/): SQL injection in n/a (high 7.5)
- [CVE-2013-6242](https://insights.sbomify.com/CVE-2013-6242/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2013-6241](https://insights.sbomify.com/CVE-2013-6241/): SQL injection in n/a (medium 4.0)
- [CVE-2013-6239](https://insights.sbomify.com/CVE-2013-6239/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2013-6237](https://insights.sbomify.com/CVE-2013-6237/): Information disclosure in n/a (low 3.5)
- [CVE-2013-6236](https://insights.sbomify.com/CVE-2013-6236/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2013-6235](https://insights.sbomify.com/CVE-2013-6235/): Improper Neutralization of Input During Web Page Generation in JAMon (medium 4.3)
- [CVE-2013-6234](https://insights.sbomify.com/CVE-2013-6234/): File upload in n/a (high 8.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/9/