# CVEs published 2013-06-17

21 CVEs were published on June 17, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6564](https://cve.now/CVE-2012-6564.md): Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecif (no CVSS)
- [CVE-2012-6565](https://cve.now/CVE-2012-6565.md): Cross-site scripting (XSS) vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2012-6566](https://cve.now/CVE-2012-6566.md): Cross-site scripting (XSS) vulnerability in REDCap before 4.14.2 allows remote attackers to inject arbitrary web script or HTML via unspecif (no CVSS)
- [CVE-2012-6567](https://cve.now/CVE-2012-6567.md): REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule. (no CVSS)
- [CVE-2013-1093](https://cve.now/CVE-2013-1093.md): Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (no CVSS)
- [CVE-2013-1094](https://cve.now/CVE-2013-1094.md): Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3 (no CVSS)
- [CVE-2013-1095](https://cve.now/CVE-2013-1095.md): Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Mon (no CVSS)
- [CVE-2013-1097](https://cve.now/CVE-2013-1097.md): Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Mon (no CVSS)
- [CVE-2013-2980](https://cve.now/CVE-2013-2980.md): Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the (no CVSS)
- [CVE-2013-2981](https://cve.now/CVE-2013-2981.md): Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2013-4608](https://cve.now/CVE-2013-4608.md): Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors i (no CVSS)
- [CVE-2013-4609](https://cve.now/CVE-2013-4609.md): REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows (no CVSS)
- [CVE-2013-4610](https://cve.now/CVE-2013-4610.md): Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact an (no CVSS)
- [CVE-2013-4611](https://cve.now/CVE-2013-4611.md): Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the O (no CVSS)
- [CVE-2013-4612](https://cve.now/CVE-2013-4612.md): Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2013-2309](https://cve.now/CVE-2013-2309.md): Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3 (no CVSS)
- [CVE-2013-2310](https://cve.now/CVE-2013-2310.md): SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, (no CVSS)
- [CVE-2013-3026](https://cve.now/CVE-2013-3026.md): Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2 (no CVSS)
- [CVE-2013-3520](https://cve.now/CVE-2013-3520.md): VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2013-3642](https://cve.now/CVE-2013-3642.md): The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earl (no CVSS)
- [CVE-2013-3643](https://cve.now/CVE-2013-3643.md): The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to obtain sensitive info (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.