Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (323550 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-0517 1 Ibm 1 Sterling External Authentication Server 2024-11-21 7.8 High
A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.
CVE-2013-0507 1 Ibm 1 Infosphere Information Server 2024-11-21 8.1 High
IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability
CVE-2013-0342 1 Pyrad Project 1 Pyrad 2024-11-21 4.3 Medium
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.
CVE-2013-0326 2 Debian, Openstack 2 Debian Linux, Nova 2024-11-21 5.5 Medium
OpenStack nova base images permissions are world readable
CVE-2013-0294 2 Fedoraproject, Pyrad Project 2 Fedora, Pyrad 2024-11-21 5.9 Medium
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
CVE-2013-0293 1 Ovirt 1 Node 2024-11-21 7.8 High
oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation
CVE-2013-0291 1 Imagely 1 Nextgen Gallery 2024-11-21 7.5 High
NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability
CVE-2013-0286 1 Pinboard Project 1 Pinboard 2024-11-21 5.4 Medium
Pinboard 1.0.6 theme for Wordpress has XSS.
CVE-2013-0283 1 Theforeman 1 Katello 2024-11-21 5.4 Medium
Katello: Username in Notification page has cross site scripting
CVE-2013-0267 1 Apache 1 Vcl 2024-11-21 N/A
The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2 and 2.1 allow remote authenticated users with nodeAdmin, manageGroup, resourceGrant, or userGrant permissions to gain privileges, cause a denial of service, or conduct cross-site scripting (XSS) attacks by leveraging improper data validation.
CVE-2013-0264 1 Redhat 1 Mrg Management Console 2024-11-21 7.5 High
An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it.
CVE-2013-0243 1 Haskell 1 Hs-tls 2024-11-21 7.4 High
haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections
CVE-2013-0196 1 Redhat 2 Enterprise Linux, Openshift 2024-11-21 6.5 Medium
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser.
CVE-2013-0195 1 Matomo 1 Matomo 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194.
CVE-2013-0194 1 Matomo 1 Matomo 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195.
CVE-2013-0193 1 Matomo 1 Matomo 2024-11-21 6.1 Medium
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195.
CVE-2013-0192 1 Simplemachines 1 Simple Machines Forum 2024-11-21 4.9 Medium
File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.
CVE-2013-0186 1 Redhat 3 Cloudforms, Cloudforms Managementengine, Manageiq Enterprise Virtualization Manager 2024-11-21 6.1 Medium
Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0185 1 Redhat 2 Cloudforms Managementengine, Manageiq Enterprise Virtualization Manager 2024-11-21 N/A
Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
CVE-2013-0180 1 Redislabs 1 Redis 2024-11-21 5.5 Medium
Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.