# CVEs published 2013-06-28

14 CVEs were published on June 28, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2010-5288](https://cve.now/CVE-2010-5288.md): Buffer overflow in the lsConnectionCached function in editcp in EDItran Communications Platform 4.1 R7 allows remote attackers to cause a de (no CVSS)
- [CVE-2013-3648](https://cve.now/CVE-2013-3648.md): Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MAIL before 6.7, when Internet Explorer 7 or earlier is used, allows remote attack (no CVSS)
- [CVE-2013-3649](https://cve.now/CVE-2013-3649.md): Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attack (no CVSS)
- [CVE-2013-4091](https://cve.now/CVE-2013-4091.md): The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for (no CVSS)
- [CVE-2013-4092](https://cve.now/CVE-2013-4092.md): The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sen (no CVSS)
- [CVE-2013-4093](https://cve.now/CVE-2013-4093.md): The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive info (no CVSS)
- [CVE-2013-4094](https://cve.now/CVE-2013-4094.md): The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote auth (no CVSS)
- [CVE-2013-4095](https://cve.now/CVE-2013-4095.md): plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authentic (no CVSS)
- [CVE-2013-4096](https://cve.now/CVE-2013-4096.md): ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell (no CVSS)
- [CVE-2013-4097](https://cve.now/CVE-2013-4097.md): ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, (no CVSS)
- [CVE-2013-4098](https://cve.now/CVE-2013-4098.md): ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message paramete (no CVSS)
- [CVE-2013-2322](https://cve.now/CVE-2013-2322.md): HP SQL/MX 3.2 and earlier on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to obtain sensitive informatio (no CVSS)
- [CVE-2013-2323](https://cve.now/CVE-2013-2323.md): HP SQL/MX 3.0 through 3.2 on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to bypass intended access rest (no CVSS)
- [CVE-2013-4660](https://cve.now/CVE-2013-4660.md): The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote atta (no CVSS, js-yaml)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.