# CVEs published 2013-09-27

16 CVEs were published on September 27, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1313](https://cve.now/CVE-2012-1313.md): The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via… (no CVSS)
- [CVE-2013-5403](https://cve.now/CVE-2013-5403.md): Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain… (no CVSS)
- [CVE-2013-5498](https://cve.now/CVE-2013-5498.md): The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows… (no CVSS)
- [CVE-2013-5093](https://cve.now/CVE-2013-5093.md): The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely… (no CVSS, graphite-web)
- [CVE-2013-5472](https://cve.now/CVE-2013-5472.md): The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle… (no CVSS)
- [CVE-2013-5473](https://cve.now/CVE-2013-5473.md): Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to… (no CVSS)
- [CVE-2013-5474](https://cve.now/CVE-2013-5474.md): Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3… (no CVSS)
- [CVE-2013-5475](https://cve.now/CVE-2013-5475.md): Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2013-5476](https://cve.now/CVE-2013-5476.md): The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows… (no CVSS)
- [CVE-2013-5477](https://cve.now/CVE-2013-5477.md): The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to… (no CVSS)
- [CVE-2013-5478](https://cve.now/CVE-2013-5478.md): Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2013-5479](https://cve.now/CVE-2013-5479.md): The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2013-5480](https://cve.now/CVE-2013-5480.md): The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2013-5481](https://cve.now/CVE-2013-5481.md): The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2013-5942](https://cve.now/CVE-2013-5942.md): Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a… (no CVSS, graphite-web)
- [CVE-2013-5943](https://cve.now/CVE-2013-5943.md): Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or… (no CVSS, graphite-web)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-09-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.