# CVEs published 2013-07-11

10 CVEs were published on July 11, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1768](https://cve.now/CVE-2013-1768.md): The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing loggin (no CVSS, org.apache.openjpa:openjpa)
- [CVE-2013-1777](https://cve.now/CVE-2013-1777.md): The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0. (no CVSS, org.apache.geronimo.framework:geronimo-jmx-remoting)
- [CVE-2013-3418](https://cve.now/CVE-2013-3418.md): Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated u (no CVSS)
- [CVE-2013-3419](https://cve.now/CVE-2013-3419.md): Cross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2013-4684](https://cve.now/CVE-2013-4684.md): flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM (no CVSS)
- [CVE-2013-4685](https://cve.now/CVE-2013-4685.md): Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX (no CVSS)
- [CVE-2013-4686](https://cve.now/CVE-2013-4686.md): The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D (no CVSS)
- [CVE-2013-4687](https://cve.now/CVE-2013-4687.md): flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application (no CVSS)
- [CVE-2013-4688](https://cve.now/CVE-2013-4688.md): flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attacker (no CVSS)
- [CVE-2013-4690](https://cve.now/CVE-2013-4690.md): Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.