# CVEs published 2013-07-04

11 CVEs were published on July 4, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2164](https://cve.now/CVE-2013-2164.md): The mmc\_ioctl\_cdrom\_read\_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive info (no CVSS)
- [CVE-2013-2206](https://cve.now/CVE-2013-2206.md): The sctp\_sf\_do\_5\_2\_4\_dupcook function in net/sctp/sm\_statefuns.c in the SCTP implementation in the Linux kernel before 3.8.5 does not proper (no CVSS)
- [CVE-2013-2224](https://cve.now/CVE-2013-2224.md): A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (in (no CVSS)
- [CVE-2013-2232](https://cve.now/CVE-2013-2232.md): The ip6\_sk\_dst\_check function in net/ipv6/ip6\_output.c in the Linux kernel before 3.10 allows local users to cause a denial of service (syst (no CVSS)
- [CVE-2013-2234](https://cve.now/CVE-2013-2234.md): The (1) key\_notify\_sa\_flush and (2) key\_notify\_policy\_flush functions in net/key/af\_key.c in the Linux kernel before 3.10 do not initialize (no CVSS)
- [CVE-2013-2237](https://cve.now/CVE-2013-2237.md): The key\_notify\_policy\_flush function in net/key/af\_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, whic (no CVSS)
- [CVE-2013-3413](https://cve.now/CVE-2013-3413.md): Cross-site scripting (XSS) vulnerability in the search form in the administration/monitoring panel on the Cisco Identity Services Engine (IS (no CVSS)
- [CVE-2013-3563](https://cve.now/CVE-2013-3563.md): Stack-based buffer overflow in db\_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a denial of service (dae (no CVSS)
- [CVE-2013-3742](https://cve.now/CVE-2013-3742.md): Cross-site scripting (XSS) vulnerability in view\_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenti (no CVSS)
- [CVE-2013-4650](https://cve.now/CVE-2013-4650.md): MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a use (no CVSS)
- [CVE-2013-4729](https://cve.now/CVE-2013-4729.md): import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remo (no CVSS, phpmyadmin/phpmyadmin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-07-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.