# CVEs published 2013-06-29

14 CVEs were published on June 29, 2013: 0 critical, 2 high. Days are UTC.

- [CVE-2013-0137](https://cve.now/CVE-2013-0137.md): The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device bef (no CVSS)
- [CVE-2013-4731](https://cve.now/CVE-2013-4731.md): ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary com (no CVSS)
- [CVE-2013-4732](https://cve.now/CVE-2013-4732.md): The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS devic (no CVSS)
- [CVE-2013-4733](https://cve.now/CVE-2013-4733.md): The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 a (CVSS 7.5)
- [CVE-2013-4734](https://cve.now/CVE-2013-4734.md): dasdec\_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 ge (CVSS 7.3)
- [CVE-2013-4735](https://cve.now/CVE-2013-4735.md): The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 have a default pass (no CVSS)
- [CVE-2013-3581](https://cve.now/CVE-2013-3581.md): ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive info (no CVSS)
- [CVE-2013-3650](https://cve.now/CVE-2013-3650.md): Directory traversal vulnerability in the lfCheckFileName function in data/class/pages/LC\_Page\_ResizeImage.php in LOCKON EC-CUBE before 2.12. (no CVSS)
- [CVE-2013-3651](https://cve.now/CVE-2013-3651.md): LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related (no CVSS)
- [CVE-2013-3654](https://cve.now/CVE-2013-3654.md): Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors (no CVSS)
- [CVE-2013-3652](https://cve.now/CVE-2013-3652.md): Cross-site scripting (XSS) vulnerability in data/class/pages/products/LC\_Page\_Products\_List.php in LOCKON EC-CUBE 2.11.0 through 2.12.4 allo (no CVSS)
- [CVE-2013-3653](https://cve.now/CVE-2013-3653.md): Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 (no CVSS)
- [CVE-2013-2339](https://cve.now/CVE-2013-2339.md): HP Smart Zero Core 4.3 and 4.3.1 on the t410 All-in-One Smart Zero Client, t410 Smart Zero Client, t510 Flexible Thin Client, t5565z Smart C (no CVSS)
- [CVE-2013-2342](https://cve.now/CVE-2013-2342.md): The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.