# CVEs published 2013-07-09 10 CVEs were published on July 9, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-1362](https://cve.now/CVE-2013-1362.md): Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute ar (no CVSS) - [CVE-2013-1950](https://cve.now/CVE-2013-1950.md): The svc\_dg\_getargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service (rpcbind crash) via a Sun RPC (no CVSS) - [CVE-2013-1976](https://cve.now/CVE-2013-1976.md): The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 (no CVSS) - [CVE-2013-2051](https://cve.now/CVE-2013-2051.md): The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access res (no CVSS) - [CVE-2013-2052](https://cve.now/CVE-2013-2052.md): Buffer overflow in the atodn function in libreswan 3.0 and 3.1, when Opportunistic Encryption is enabled and an RSA key is being used, allow (no CVSS) - [CVE-2013-2053](https://cve.now/CVE-2013-2053.md): Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allo (no CVSS) - [CVE-2013-2054](https://cve.now/CVE-2013-2054.md): Buffer overflow in the atodn function in strongSwan 2.0.0 through 4.3.4, when Opportunistic Encryption is enabled and an RSA key is being us (no CVSS) - [CVE-2013-2096](https://cve.now/CVE-2013-2096.md): OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a (no CVSS, nova) - [CVE-2013-2118](https://cve.now/CVE-2013-2118.md): SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control (no CVSS) - [CVE-2013-4787](https://cve.now/CVE-2013-4787.md): Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows attackers to execut (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-07-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.