CVE-2013-10075 | Critical | 9.1 | 2026-05-08 | Apache::Session versions through 1.94 for Perl re-creates deleted sessions.
The session stores Apache::Session::Store::File and Apache::Session::Store::DB_Fil… |
CVE-2013-20006 | High | 7.5 | 2026-03-16 | Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST parameters are not properly sanitized b… |
CVE-2013-20005 | Medium | 5.3 | 2026-03-16 | Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into v… |
CVE-2013-10031 | High | 7.5 | 2025-12-09 | Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks |
CVE-2013-10074 | Medium | 5.4 | 2025-10-30 | Nagios XI versions prior to 2012R2.6 are vulnerable to cross-site scripting (XSS) via the Tools Menu of the web interface. Insufficient validation or escaping… |
CVE-2013-10073 | High | 8.8 | 2025-10-30 | Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell wit… |
CVE-2013-10072 | Medium | 6.5 | 2025-10-30 | Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-only roles could directly reach Auto-Di… |
CVE-2013-10071 | Medium | 6.1 | 2025-10-30 | Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting (XSS) vulnerability in the dashboard dashlet AJAX load functionality. Insufficien… |
CVE-2013-10070 | | | 2025-08-05 | PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval() without sa… |
CVE-2013-10069 | Critical | 9.8 | 2025-08-05 | The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vu… |
CVE-2013-10068 | | | 2025-08-05 | Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFo… |
CVE-2013-10067 | | | 2025-08-05 | Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a standalone application, the administra… |
CVE-2013-10066 | | | 2025-08-05 | An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint (users_add.php) that allows… |
CVE-2013-10065 | High | 7.5 | 2025-08-05 | A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash… |
CVE-2013-10064 | | | 2025-08-05 | A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied dat… |
CVE-2013-10054 | | | 2025-08-04 | An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file up… |
CVE-2013-10052 | | | 2025-08-04 | ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for administrative tasks. However, when misconfigured in /etc/su… |
CVE-2013-10063 | | | 2025-08-01 | A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can… |
CVE-2013-10062 | | | 2025-08-01 | A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specific… |
CVE-2013-10061 | High | 7.2 | 2025-08-01 | An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the… |
CVE-2013-10060 | High | 7.2 | 2025-08-01 | An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe… |
CVE-2013-10059 | High | 7.2 | 2025-08-01 | An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmware version 8.04) via the tools_vct.htm… |
CVE-2013-10058 | | | 2025-08-01 | An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the appl… |
CVE-2013-10057 | | | 2025-08-01 | A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifically the ConnectToSynactis method. When a… |
CVE-2013-10055 | | | 2025-08-01 | An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fa… |
CVE-2013-10053 | | | 2025-08-01 | A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is pas… |
CVE-2013-10051 | Critical | 9.8 | 2025-08-01 | A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler. Specifically… |
CVE-2013-10050 | High | 8.8 | 2025-08-01 | An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_… |
CVE-2013-10049 | | | 2025-08-01 | An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHan… |
CVE-2013-10048 | Critical | 9.8 | 2025-08-01 | An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)… |
CVE-2013-10047 | | | 2025-08-01 | An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to… |
CVE-2013-10046 | | | 2025-08-01 | A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYST… |
CVE-2013-10044 | High | 8.8 | 2025-08-01 | An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and… |
CVE-2013-10043 | | | 2025-07-31 | A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to… |
CVE-2013-10042 | Critical | 9.8 | 2025-07-31 | A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a spe… |
CVE-2013-10040 | Critical | 9.8 | 2025-07-31 | ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoi… |
CVE-2013-10039 | | | 2025-07-31 | A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to… |
CVE-2013-10038 | | | 2025-07-31 | An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8. The upload.php endpoint fails to properly va… |
CVE-2013-10037 | | | 2025-07-31 | An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script. The parameters cpusername, cppassword, and cpdo… |
CVE-2013-10036 | | | 2025-07-31 | A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfi… |
CVE-2013-10035 | | | 2025-07-31 | A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbi… |
CVE-2013-10034 | | | 2025-07-31 | An unrestricted file upload vulnerability exists in Kaseya KServer versions prior to 6.3.0.2. The uploadImage.asp endpoint allows unauthenticated users to uplo… |
CVE-2013-10033 | | | 2025-07-31 | An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint. The flaw allows attackers to inject arbitrary S… |
CVE-2013-10032 | High | 8.8 | 2025-07-25 | An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to… |
CVE-2013-3307 | High | 8.3 | 2025-07-11 | Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the… |
CVE-2013-1424 | Medium | 5.6 | 2025-06-26 | Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787. |
CVE-2013-2513 | Critical | 9.8 | 2023-12-12 | The flash_tool gem through 0.6.0 for Ruby allows command execution via shell metacharacters in the name of a downloaded file. |
CVE-2013-10030 | Medium | 4.3 | 2023-06-05 | A vulnerability, which was classified as problematic, has been found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this issue is some unknown fu… |
CVE-2013-10029 | Medium | 4.3 | 2023-06-05 | A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the function exitboxadmi… |
CVE-2013-10028 | Low | 3.5 | 2023-06-04 | A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the function style_newsletter… |
CVE-2013-10027 | Medium | 4.3 | 2023-06-04 | A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of t… |
CVE-2013-10026 | Low | 3.5 | 2023-05-02 | A vulnerability, which was classified as problematic, has been found in Mail Subscribe List Plugin up to 2.0.10 on WordPress. This issue affects some unknown p… |
CVE-2013-10025 | Medium | 4.3 | 2023-04-08 | A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issue is the function exitpageadmin of the… |
CVE-2013-10024 | Low | 3.5 | 2023-04-08 | A vulnerability has been found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functional… |
CVE-2013-10023 | Medium | 6.3 | 2023-04-08 | A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function… |
CVE-2013-10022 | Low | 3.5 | 2023-04-05 | A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the functi… |
CVE-2013-10021 | Low | 3.5 | 2023-03-11 | A vulnerability was found in dd32 Debug Bar Plugin up to 0.8 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function… |
CVE-2013-10020 | Low | 3.5 | 2023-03-10 | A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2 on WordPress. This affects an unknown part of the fil… |
CVE-2013-10019 | Medium | 6.3 | 2023-02-20 | A vulnerability was found in OCLC-Research OAICat 1.5.61. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to… |
CVE-2013-10018 | Medium | 5.5 | 2023-02-04 | A vulnerability was found in fanzila WebFinance 0.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file h… |
CVE-2013-10017 | Medium | 5.5 | 2023-02-04 | A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function of the file htdocs/admin/save_roles.ph… |
CVE-2013-10016 | Medium | 5.5 | 2023-02-03 | A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdocs/admin/save_taxes… |
CVE-2013-10015 | Medium | 5.5 | 2023-02-03 | A vulnerability has been found in fanzila WebFinance 0.5 and classified as critical. This vulnerability affects unknown code of the file htdocs/admin/save_Cont… |
CVE-2013-10014 | Medium | 5.5 | 2023-01-19 | A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulation leads to sql injection. The patch i… |
CVE-2013-10013 | Medium | 5.5 | 2023-01-17 | A vulnerability was found in Bricco Authenticator Plugin. It has been declared as critical. This vulnerability affects the function authenticate/compare of the… |
CVE-2013-10012 | Medium | 5.5 | 2023-01-16 | A vulnerability, which was classified as critical, was found in antonbolling clan7ups. Affected is an unknown function of the component Login/Session. The mani… |
CVE-2013-10011 | Medium | 6.3 | 2023-01-12 | A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is some unknown functionality. The manipu… |
CVE-2013-10010 | Medium | 4.3 | 2023-01-11 | A vulnerability classified as problematic has been found in zerochplus. This affects the function PrintResList of the file test/mordor/thread.res.pl. The manip… |
CVE-2013-10009 | Medium | 5.5 | 2023-01-07 | A vulnerability was found in DrAzraelTod pyChao and classified as critical. Affected by this issue is the function klauen/lesen of the file mod_fun/__init__.py… |
CVE-2013-10008 | Medium | 5.5 | 2023-01-06 | A vulnerability was found in sheilazpy eShop. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. The… |
CVE-2013-10007 | Medium | 5.3 | 2023-01-03 | A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unknown part of the file wp-print-friendly… |
CVE-2013-10006 | Low | 2.6 | 2023-01-01 | A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the fil… |
CVE-2013-10005 | High | 7.5 | 2022-12-27 | The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack over… |
CVE-2013-4281 | Medium | 5.5 | 2022-10-19 | In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with loca… |
CVE-2013-4253 | High | 7.5 | 2022-10-19 | The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's aut… |
CVE-2013-4561 | Critical | 9.1 | 2022-06-30 | In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity. |
CVE-2013-4144 | Critical | 9.8 | 2022-06-30 | There is an object injection vulnerability in swfupload plugin for wordpress. |
CVE-2013-4170 | Medium | 6.1 | 2022-06-30 | In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the `tagName` property… |
CVE-2013-1916 | High | 8.8 | 2022-06-24 | In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting Wo… |
CVE-2013-1891 | Medium | 6.5 | 2022-06-24 | In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed. |
CVE-2013-10004 | Medium | 6.5 | 2022-05-24 | A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwor… |
CVE-2013-10003 | Medium | 6.5 | 2022-05-24 | A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVers… |
CVE-2013-10002 | Medium | 6.5 | 2022-05-24 | A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function… |
CVE-2013-10001 | Medium | 4.8 | 2022-05-17 | A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An… |
CVE-2013-20004 | Critical | 9.8 | 2022-02-06 | A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker coul… |
CVE-2013-20003 | High | 8.3 | 2022-02-04 | Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker wit… |
CVE-2013-4718 | Medium | 5.4 | 2021-08-09 | Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remot… |
CVE-2013-4717 | High | 8.8 | 2021-08-09 | Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow re… |
CVE-2013-6276 | Critical | 9.8 | 2021-08-09 | QNAP F_VioCard 2312 and F_VioGate 2308 have hardcoded entries in authorized_keys files. NOTE: 1. All active models are not affected. The last affected model wa… |
CVE-2013-20002 | Critical | 9.8 | 2021-06-17 | Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax… |
CVE-2013-4536 | High | 7.8 | 2021-05-28 | An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (dest… |
CVE-2013-1055 | Medium | 4.3 | 2021-04-07 | The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash… |
CVE-2013-1054 | Medium | 4.3 | 2021-04-07 | The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning th… |
CVE-2013-20001 | High | 7.5 | 2021-02-12 | An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse… |
CVE-2013-2512 | Critical | 9.8 | 2021-01-26 | The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP pro… |
CVE-2013-1053 | Medium | 5.5 | 2021-01-13 | In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to… |
CVE-2013-7491 | Medium | 5.3 | 2020-09-11 | An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory a… |
CVE-2013-7490 | Medium | 5.3 | 2020-09-11 | An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption. |
CVE-2013-7489 | Medium | 6.8 | 2020-06-26 | The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution. |
CVE-2013-7488 | High | 7.5 | 2020-04-07 | perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. |