# CVEs published 2013-06-20

15 CVEs were published on June 20, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1905](https://cve.now/CVE-2013-1905.md): Cross-site scripting (XSS) vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitra (no CVSS)
- [CVE-2013-4634](https://cve.now/CVE-2013-4634.md): SQL injection vulnerability in the jQuery autocomplete for indexed\_search (rzautocomplete) extension before 0.0.9 for TYPO3 allows remote at (no CVSS)
- [CVE-2013-1393](https://cve.now/CVE-2013-1393.md): Cross-site scripting (XSS) vulnerability in the CurvyCorners module 6.x-1.x and 7.x-1.x for Drupal allows remote authenticated users with th (no CVSS)
- [CVE-2012-4960](https://cve.now/CVE-2012-4960.md): The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S230 (no CVSS)
- [CVE-2012-6568](https://cve.now/CVE-2012-6568.md): Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS\_PLUGIN\_NAME string in a pl (no CVSS)
- [CVE-2012-6569](https://cve.now/CVE-2012-6569.md): Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on H (no CVSS)
- [CVE-2012-6570](https://cve.now/CVE-2012-6570.md): The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S30 (no CVSS)
- [CVE-2012-6571](https://cve.now/CVE-2012-6571.md): The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S30 (no CVSS)
- [CVE-2013-4628](https://cve.now/CVE-2013-4628.md): The firewall module on the Huawei Quidway Service Process Unit (SPU) board S7700, S9300, and S9700 on Huawei Campus Switch devices allows re (no CVSS)
- [CVE-2013-4629](https://cve.now/CVE-2013-4629.md): The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishme (no CVSS)
- [CVE-2013-4630](https://cve.now/CVE-2013-4630.md): Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers t (no CVSS)
- [CVE-2013-4631](https://cve.now/CVE-2013-4631.md): Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of service (device crash) (no CVSS)
- [CVE-2013-4632](https://cve.now/CVE-2013-4632.md): The Huawei Access Router (AR) before V200R002SPC003 allows remote attackers to cause a denial of service (device reset) via a crafted field (no CVSS)
- [CVE-2013-4633](https://cve.now/CVE-2013-4633.md): Huawei Seco Versatile Security Manager (VSM) before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain cha (no CVSS)
- [CVE-2013-1612](https://cve.now/CVE-2013-1612.md): Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec En (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.