# CVEs published 2013-12-17

20 CVEs were published on December 17, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6882](https://cve.now/CVE-2013-6882.md): Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1)… (no CVSS)
- [CVE-2013-6883](https://cve.now/CVE-2013-6883.md): Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers… (no CVSS)
- [CVE-2013-7129](https://cve.now/CVE-2013-7129.md): Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2013-2813](https://cve.now/CVE-2013-2813.md): The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service (reboot or… (no CVSS)
- [CVE-2013-2814](https://cve.now/CVE-2013-2814.md): Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled exception and process… (no CVSS)
- [CVE-2013-2816](https://cve.now/CVE-2013-2816.md): The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service… (no CVSS)
- [CVE-2013-6038](https://cve.now/CVE-2013-6038.md): Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file. (no CVSS)
- [CVE-2013-6193](https://cve.now/CVE-2013-6193.md): Unspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw, CP1\*, M121\*, M1536dnf, and P1\*; Color… (no CVSS)
- [CVE-2013-6327](https://cve.now/CVE-2013-6327.md): Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before… (no CVSS)
- [CVE-2013-6329](https://cve.now/CVE-2013-6329.md): IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause… (no CVSS)
- [CVE-2013-6721](https://cve.now/CVE-2013-6721.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.x through… (no CVSS)
- [CVE-2013-6733](https://cve.now/CVE-2013-6733.md): Cross-site scripting (XSS) vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1… (no CVSS)
- [CVE-2013-7127](https://cve.now/CVE-2013-7127.md): Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain… (no CVSS)
- [CVE-2013-7128](https://cve.now/CVE-2013-7128.md): Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a… (no CVSS)
- [CVE-2013-6191](https://cve.now/CVE-2013-6191.md): Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2013-6192](https://cve.now/CVE-2013-6192.md): Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the… (no CVSS)
- [CVE-2013-6420](https://cve.now/CVE-2013-6420.md): The asn1\_time\_to\_time\_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not… (no CVSS)
- [CVE-2013-6925](https://cve.now/CVE-2013-6925.md): The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session… (no CVSS)
- [CVE-2013-6926](https://cve.now/CVE-2013-6926.md): The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on… (no CVSS)
- [CVE-2013-6966](https://cve.now/CVE-2013-6966.md): Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.