# CVEs published 2013-06-26

22 CVEs were published on June 26, 2013: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-3396](https://cve.now/CVE-2013-3396.md): Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) de (no CVSS)
- [CVE-2013-3397](https://cve.now/CVE-2013-3397.md): Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager (CUCM) allow (no CVSS)
- [CVE-2013-3398](https://cve.now/CVE-2013-3398.md): The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbi (no CVSS)
- [CVE-2013-3382](https://cve.now/CVE-2013-3382.md): The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco (no CVSS)
- [CVE-2013-3393](https://cve.now/CVE-2013-3393.md): The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to (no CVSS)
- [CVE-2013-1682](https://cve.now/CVE-2013-1682.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird befor (no CVSS)
- [CVE-2013-1683](https://cve.now/CVE-2013-1683.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 allow remote attackers to cause a denial of servic (no CVSS)
- [CVE-2013-1684](https://cve.now/CVE-2013-1684.md): Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::LookupMediaElementURITable function in Mozilla Firefox before 22.0, Fire (no CVSS)
- [CVE-2013-1685](https://cve.now/CVE-2013-1685.md): Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thu (no CVSS)
- [CVE-2013-1686](https://cve.now/CVE-2013-1686.md): Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird b (no CVSS)
- [CVE-2013-1687](https://cve.now/CVE-2013-1687.md): The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implementations in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7 (no CVSS)
- [CVE-2013-1688](https://cve.now/CVE-2013-1688.md): The Profiler implementation in Mozilla Firefox before 22.0 parses untrusted data during UI rendering, which allows user-assisted remote atta (no CVSS)
- [CVE-2013-1690](https://cve.now/CVE-2013-1690.md): Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not proper (CVSS 8.8, KEV)
- [CVE-2013-1692](https://cve.now/CVE-2013-1692.md): Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not preven (no CVSS)
- [CVE-2013-1693](https://cve.now/CVE-2013-1693.md): The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR (no CVSS)
- [CVE-2013-1694](https://cve.now/CVE-2013-1694.md): The PreserveWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbir (no CVSS)
- [CVE-2013-1695](https://cve.now/CVE-2013-1695.md): Mozilla Firefox before 22.0 does not properly implement certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element (no CVSS)
- [CVE-2013-1696](https://cve.now/CVE-2013-1696.md): Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Options protection mechanism, which allows remote attackers to conduct cli (no CVSS)
- [CVE-2013-1697](https://cve.now/CVE-2013-1697.md): The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ES (no CVSS)
- [CVE-2013-1698](https://cve.now/CVE-2013-1698.md): The getUserMedia permission implementation in Mozilla Firefox before 22.0 references the URL of a top-level document instead of the URL of a (no CVSS)
- [CVE-2013-1699](https://cve.now/CVE-2013-1699.md): The Internationalized Domain Name (IDN) display algorithm in Mozilla Firefox before 22.0 does not properly handle the .com, .name, and .net (no CVSS)
- [CVE-2013-1700](https://cve.now/CVE-2013-1700.md): The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Windows does not properly handle inability to launch the Mozilla Updater e (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.