# CVEs published 2013-11-22

14 CVEs were published on November 22, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3288](https://cve.now/CVE-2013-3288.md): Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before… (no CVSS)
- [CVE-2013-5997](https://cve.now/CVE-2013-5997.md): Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote… (no CVSS)
- [CVE-2013-5998](https://cve.now/CVE-2013-5998.md): Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote… (no CVSS)
- [CVE-2013-5999](https://cve.now/CVE-2013-5999.md): Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle… (no CVSS)
- [CVE-2013-6312](https://cve.now/CVE-2013-6312.md): Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x… (no CVSS)
- [CVE-2013-6694](https://cve.now/CVE-2013-6694.md): The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service (MTU change and tunnel-session drop) via… (no CVSS)
- [CVE-2013-6698](https://cve.now/CVE-2013-6698.md): The web interface on Cisco Wireless LAN Controller (WLC) devices does not properly restrict use of IFRAME elements, which makes it easier… (no CVSS)
- [CVE-2013-6699](https://cve.now/CVE-2013-6699.md): The Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation on Cisco Wireless LAN Controller (WLC) devices… (no CVSS)
- [CVE-2013-6342](https://cve.now/CVE-2013-6342.md): Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject… (no CVSS)
- [CVE-2013-2811](https://cve.now/CVE-2013-2811.md): The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in… (no CVSS)
- [CVE-2013-2823](https://cve.now/CVE-2013-2823.md): The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in… (no CVSS)
- [CVE-2013-6692](https://cve.now/CVE-2013-6692.md): Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated… (no CVSS)
- [CVE-2013-6693](https://cve.now/CVE-2013-6693.md): The MLDP implementation in Cisco IOS 15.3(3)S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause… (no CVSS)
- [CVE-2013-6852](https://cve.now/CVE-2013-6852.md): Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.