# CVEs published 2013-11-21

14 CVEs were published on November 21, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-5991](https://cve.now/CVE-2013-5991.md): The displaySystemError function in html/handle\_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain… (no CVSS)
- [CVE-2013-5992](https://cve.now/CVE-2013-5992.md): Cross-site scripting (XSS) vulnerability in the displaySystemError function in html/handle\_error.php in LOCKON EC-CUBE 2.11.0 through… (no CVSS)
- [CVE-2013-5993](https://cve.now/CVE-2013-5993.md): Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the… (no CVSS)
- [CVE-2013-5994](https://cve.now/CVE-2013-5994.md): data/class/pages/mypage/LC\_Page\_Mypage\_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers to obtain… (no CVSS)
- [CVE-2013-5995](https://cve.now/CVE-2013-5995.md): data/class/helper/SC\_Helper\_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote… (no CVSS)
- [CVE-2013-5996](https://cve.now/CVE-2013-5996.md): Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 through 2.13.0 allow… (no CVSS)
- [CVE-2013-6173](https://cve.now/CVE-2013-6173.md): Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch… (no CVSS)
- [CVE-2013-6174](https://cve.now/CVE-2013-6174.md): Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5… (no CVSS)
- [CVE-2013-6175](https://cve.now/CVE-2013-6175.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and… (no CVSS)
- [CVE-2013-6176](https://cve.now/CVE-2013-6176.md): Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before… (no CVSS)
- [CVE-2013-6177](https://cve.now/CVE-2013-6177.md): Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch… (no CVSS)
- [CVE-2013-6832](https://cve.now/CVE-2013-6832.md): The nand\_ioctl function in sys/dev/nand/nand\_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly… (no CVSS)
- [CVE-2013-6833](https://cve.now/CVE-2013-6833.md): The qls\_eioctl function in sys/dev/qlxge/qls\_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter… (no CVSS)
- [CVE-2013-6834](https://cve.now/CVE-2013-6834.md): The ql\_eioctl function in sys/dev/qlxgbe/ql\_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-11-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.