# CVEs published 2013-05-29

15 CVEs were published on May 29, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1208](https://cve.now/CVE-2013-1208.md): The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet (no CVSS)
- [CVE-2013-1209](https://cve.now/CVE-2013-1209.md): The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS (no CVSS)
- [CVE-2013-1210](https://cve.now/CVE-2013-1210.md): Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging (no CVSS)
- [CVE-2013-1211](https://cve.now/CVE-2013-1211.md): Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) (no CVSS)
- [CVE-2013-1212](https://cve.now/CVE-2013-1212.md): The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attacker (no CVSS)
- [CVE-2013-1213](https://cve.now/CVE-2013-1213.md): Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual S (no CVSS)
- [CVE-2013-2312](https://cve.now/CVE-2013-2312.md): Cross-site scripting (XSS) vulnerability in the shopping-cart screen in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to (no CVSS)
- [CVE-2013-2313](https://cve.now/CVE-2013-2313.md): Session fixation vulnerability in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 allows remote attackers to hijack web sessions via unspecified ve (no CVSS)
- [CVE-2013-2314](https://cve.now/CVE-2013-2314.md): Cross-site scripting (XSS) vulnerability in the adminAuthorization function in data/class/helper/SC\_Helper\_Session.php in LOCKON EC-CUBE 2.1 (no CVSS)
- [CVE-2013-2315](https://cve.now/CVE-2013-2315.md): data/class/pages/forgot/LC\_Page\_Forgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password (no CVSS)
- [CVE-2002-2443](https://cve.now/CVE-2002-2443.md): schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending r (no CVSS)
- [CVE-2013-0482](https://cve.now/CVE-2013-0482.md): IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8.5.0.2 and WebSphere Message Broker 6.1, 7. (no CVSS)
- [CVE-2013-3666](https://cve.now/CVE-2013-3666.md): The LG Hidden Menu component for Android on the LG Optimus G E973 allows physically proximate attackers to execute arbitrary commands by ent (no CVSS)
- [CVE-2013-1962](https://cve.now/CVE-2013-1962.md): The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial (no CVSS)
- [CVE-2013-2069](https://cve.now/CVE-2013-2069.md): Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3, when a rootpw directive is not set in a Kick (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.