# CVEs published 2013-05-16

58 CVEs were published on May 16, 2013: 0 critical, 1 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2013-0801](https://cve.now/CVE-2013-0801.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird befor (no CVSS)
- [CVE-2013-1389](https://cve.now/CVE-2013-1389.md): Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 11, 9.0.1 before Update 10, 9.0.2 before Update 5, and 10 before Update 10 a (no CVSS)
- [CVE-2013-1669](https://cve.now/CVE-2013-1669.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0 allow remote attackers to cause a denial of servic (no CVSS)
- [CVE-2013-1670](https://cve.now/CVE-2013-1670.md): The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, an (no CVSS)
- [CVE-2013-1671](https://cve.now/CVE-2013-1671.md): Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a c (no CVSS)
- [CVE-2013-1672](https://cve.now/CVE-2013-1672.md): The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird E (no CVSS)
- [CVE-2013-1673](https://cve.now/CVE-2013-1673.md): The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in cer (no CVSS)
- [CVE-2013-1674](https://cve.now/CVE-2013-1674.md): Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR (no CVSS)
- [CVE-2013-1675](https://cve.now/CVE-2013-1675.md): Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not proper (CVSS 6.5, KEV)
- [CVE-2013-1676](https://cve.now/CVE-2013-1676.md): The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, an (no CVSS)
- [CVE-2013-1677](https://cve.now/CVE-2013-1677.md): The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and (no CVSS)
- [CVE-2013-1678](https://cve.now/CVE-2013-1678.md): The \_cairo\_xlib\_surface\_add\_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Th (no CVSS)
- [CVE-2013-1679](https://cve.now/CVE-2013-1679.md): Use-after-free vulnerability in the mozilla::plugins::child::\_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before (no CVSS)
- [CVE-2013-1680](https://cve.now/CVE-2013-1680.md): Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunder (no CVSS)
- [CVE-2013-1681](https://cve.now/CVE-2013-1681.md): Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17. (no CVSS)
- [CVE-2013-2718](https://cve.now/CVE-2013-2718.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2719](https://cve.now/CVE-2013-2719.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2720](https://cve.now/CVE-2013-2720.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2721](https://cve.now/CVE-2013-2721.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2722](https://cve.now/CVE-2013-2722.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2723](https://cve.now/CVE-2013-2723.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2724](https://cve.now/CVE-2013-2724.md): Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to ex (no CVSS)
- [CVE-2013-2725](https://cve.now/CVE-2013-2725.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2726](https://cve.now/CVE-2013-2726.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2727](https://cve.now/CVE-2013-2727.md): Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbit (no CVSS)
- [CVE-2013-2728](https://cve.now/CVE-2013-2728.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-2729](https://cve.now/CVE-2013-2729.md): Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbit (CVSS 8.8, KEV)
- [CVE-2013-2730](https://cve.now/CVE-2013-2730.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitr (no CVSS)
- [CVE-2013-2731](https://cve.now/CVE-2013-2731.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2732](https://cve.now/CVE-2013-2732.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2733](https://cve.now/CVE-2013-2733.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitr (no CVSS)
- [CVE-2013-2734](https://cve.now/CVE-2013-2734.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2735](https://cve.now/CVE-2013-2735.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2736](https://cve.now/CVE-2013-2736.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-2737](https://cve.now/CVE-2013-2737.md): A JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to obtain sensit (no CVSS)
- [CVE-2013-3324](https://cve.now/CVE-2013-3324.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3325](https://cve.now/CVE-2013-3325.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3326](https://cve.now/CVE-2013-3326.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3327](https://cve.now/CVE-2013-3327.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3328](https://cve.now/CVE-2013-3328.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3329](https://cve.now/CVE-2013-3329.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3330](https://cve.now/CVE-2013-3330.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3331](https://cve.now/CVE-2013-3331.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3332](https://cve.now/CVE-2013-3332.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3333](https://cve.now/CVE-2013-3333.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3334](https://cve.now/CVE-2013-3334.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3335](https://cve.now/CVE-2013-3335.md): Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 (no CVSS)
- [CVE-2013-3337](https://cve.now/CVE-2013-3337.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3338](https://cve.now/CVE-2013-3338.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3339](https://cve.now/CVE-2013-3339.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3340](https://cve.now/CVE-2013-3340.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3341](https://cve.now/CVE-2013-3341.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2013-3342](https://cve.now/CVE-2013-3342.md): Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 do not properly handle operating-system domain blackl (no CVSS)
- [CVE-2013-1188](https://cve.now/CVE-2013-1188.md): Cisco Unified Communications Manager (CUCM) does not properly limit the rate of authentication attempts, which allows remote attackers to ca (no CVSS)
- [CVE-2013-1200](https://cve.now/CVE-2013-1200.md): Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified ve (no CVSS)
- [CVE-2013-1236](https://cve.now/CVE-2013-1236.md): Cisco TelePresence Supervisor MSE 8050 before 2.3(1.31) allows remote attackers to cause a denial of service (CPU consumption or device relo (no CVSS)
- [CVE-2013-1244](https://cve.now/CVE-2013-1244.md): Cross-site scripting (XSS) vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary we (no CVSS)
- [CVE-2013-1245](https://cve.now/CVE-2013-1245.md): The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.