Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (323357 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-5661 4 Isc, Nic, Nlnetlabs and 1 more 4 Bind, Knot Resolver, Nsd and 1 more 2024-11-21 5.9 Medium
Cache Poisoning issue exists in DNS Response Rate Limiting.
CVE-2013-5659 1 Info-zip 1 Wiz 2024-11-21 7.5 High
Wiz 5.0.3 has a user mode write access violation
CVE-2013-5658 1 Aultware 1 Pwstore 2024-11-21 6.1 Medium
AultWare pwStore 2010.8.30.0 has XSS
CVE-2013-5657 1 Aultware 1 Pwstore 2024-11-21 7.5 High
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
CVE-2013-5656 1 Fuzezip Project 1 Fuzezip 2024-11-21 7.8 High
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
CVE-2013-5654 1 Yingzhipython Project 1 Yingzhipython 2024-11-21 N/A
Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage
CVE-2013-5638 1 Transcend-info 2 Wifisd, Wifisd Firmware 2024-11-21 5.4 Medium
Transcend WiFiSD 1.8 has persistent XSS
CVE-2013-5637 1 Pqigroup 2 Air Card, Air Card Firmware 2024-11-21 5.4 Medium
PQI AirCard has persistent XSS
CVE-2013-5594 1 Mozilla 1 Firefox 2024-11-21 4.3 Medium
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding
CVE-2013-5582 1 Ammyy 1 Ammyy Admin 2024-11-21 7.8 High
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AA_v3.2.exe file.
CVE-2013-5571 1 Hmailserver 1 Hmailserver 2024-11-21 5.9 Medium
HMailServer 5.3.x and prior: Memory Corruption which could cause DOS
CVE-2013-5461 1 Ibm 2 Endpoint Manager For Remote Control, Tivoli Remote Control 2024-11-21 N/A
IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by leveraging access to the hashes. IBM X-Force ID: 88309.
CVE-2013-5391 1 Ibm 2 Mobile Foundation, Worklight 2024-11-21 N/A
IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.0 Fix Pack 2 make it easier for attackers to defeat cryptographic protection mechanisms by leveraging improper initialization of the pseudo random number generator (PRNG) in Android and use of the Java Cryptography Architecture (JCA) by a Worklight program. IBM X-Force ID: 87128.
CVE-2013-5212 1 Easyxdm 1 Easyxdm 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file.
CVE-2013-5123 5 Debian, Fedoraproject, Pypa and 2 more 6 Debian Linux, Fedora, Pip and 3 more 2024-11-21 5.9 Medium
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
CVE-2013-5122 1 Cisco 8 Linksys E4200, Linksys E4200 Firmware, Linksys Ea2700 and 5 more 2024-11-21 9.8 Critical
Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access
CVE-2013-5116 1 Evernote 1 Evernote 2024-11-21 7.1 High
Evernote prior to 5.5.1 has insecure password change
CVE-2013-5114 1 Logmein 1 Lastpass 2024-11-21 6.1 Medium
LastPass prior to 2.5.1 allows secure wipe bypass.
CVE-2013-5113 1 Logmein 1 Lastpass 2024-11-21 6.8 Medium
LastPass prior to 2.5.1 has an insecure PIN implementation.
CVE-2013-5112 1 Evernote 1 Evernote 2024-11-21 4.6 Medium
Evernote before 5.5.1 has insecure PIN storage