# CVEs published 2013-08-16 24 CVEs were published on August 16, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-3319](https://cve.now/CVE-2013-3319.md): The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via… (no CVSS) - [CVE-2013-4114](https://cve.now/CVE-2013-4114.md): The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which… (no CVSS) - [CVE-2013-5301](https://cve.now/CVE-2013-5301.md): Directory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2013-5302](https://cve.now/CVE-2013-5302.md): SQL injection vulnerability in the Faceted Search (ke\_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute… (no CVSS) - [CVE-2013-5303](https://cve.now/CVE-2013-5303.md): Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors… (no CVSS) - [CVE-2013-5304](https://cve.now/CVE-2013-5304.md): SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2013-5305](https://cve.now/CVE-2013-5305.md): Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject… (no CVSS) - [CVE-2013-5306](https://cve.now/CVE-2013-5306.md): SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to… (no CVSS) - [CVE-2013-5307](https://cve.now/CVE-2013-5307.md): Cross-site scripting (XSS) vulnerability in the Faceted Search (ke\_search) extension before 1.4.1 for TYPO3 allows remote attackers to… (no CVSS) - [CVE-2013-5308](https://cve.now/CVE-2013-5308.md): Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote… (no CVSS) - [CVE-2013-5309](https://cve.now/CVE-2013-5309.md): Cross-site scripting (XSS) vulnerability in install/forum\_data/src/custom\_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a… (no CVSS) - [CVE-2013-5310](https://cve.now/CVE-2013-5310.md): SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2013-4128](https://cve.now/CVE-2013-4128.md): Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote… (no CVSS) - [CVE-2013-4213](https://cve.now/CVE-2013-4213.md): Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows… (no CVSS) - [CVE-2013-1888](https://cve.now/CVE-2013-1888.md): pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory. (no CVSS, pip) - [CVE-2013-5095](https://cve.now/CVE-2013-5095.md): Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500… (no CVSS) - [CVE-2013-5096](https://cve.now/CVE-2013-5096.md): Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access… (no CVSS) - [CVE-2013-5097](https://cve.now/CVE-2013-5097.md): Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list… (no CVSS) - [CVE-2013-0585](https://cve.now/CVE-2013-0585.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow… (no CVSS) - [CVE-2013-0587](https://cve.now/CVE-2013-0587.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary… (no CVSS) - [CVE-2013-3034](https://cve.now/CVE-2013-3034.md): Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote… (no CVSS) - [CVE-2013-3040](https://cve.now/CVE-2013-3040.md): IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the… (no CVSS) - [CVE-2013-4007](https://cve.now/CVE-2013-4007.md): Cross-site scripting (XSS) vulnerability in adv\_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET… (no CVSS) - [CVE-2013-4698](https://cve.now/CVE-2013-4698.md): Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2013-08-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.