# CVEs published 2013-07-26 24 CVEs were published on July 26, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-4854](https://cve.now/CVE-2013-4854.md): The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco B (no CVSS) - [CVE-2013-2242](https://cve.now/CVE-2013-2242.md): mod/chat/gui\_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 (no CVSS) - [CVE-2013-2243](https://cve.now/CVE-2013-2243.md): mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote aut (no CVSS) - [CVE-2013-2244](https://cve.now/CVE-2013-2244.md): Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote (no CVSS) - [CVE-2013-2245](https://cve.now/CVE-2013-2245.md): rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly (no CVSS) - [CVE-2013-2246](https://cve.now/CVE-2013-2246.md): mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not (no CVSS) - [CVE-2013-4938](https://cve.now/CVE-2013-4938.md): The LTI (aka IMS-LTI) mod\_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5 (no CVSS) - [CVE-2013-4939](https://cve.now/CVE-2013-4939.md): Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through (no CVSS, yui) - [CVE-2013-4940](https://cve.now/CVE-2013-4940.md): Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x (no CVSS, yui · moodle/moodle) - [CVE-2013-4941](https://cve.now/CVE-2013-4941.md): Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle thro (no CVSS, yui · moodle/moodle) - [CVE-2013-4942](https://cve.now/CVE-2013-4942.md): Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle (no CVSS, yui · moodle/moodle) - [CVE-2013-2368](https://cve.now/CVE-2013-2368.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknown vectors, aka ZDI-CA (no CVSS) - [CVE-2013-2369](https://cve.now/CVE-2013-2369.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1 (no CVSS) - [CVE-2013-2370](https://cve.now/CVE-2013-2370.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1 (no CVSS) - [CVE-2013-4797](https://cve.now/CVE-2013-4797.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1 (no CVSS) - [CVE-2013-4798](https://cve.now/CVE-2013-4798.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1 (no CVSS) - [CVE-2013-4799](https://cve.now/CVE-2013-4799.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1 (no CVSS) - [CVE-2013-4800](https://cve.now/CVE-2013-4800.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1 (no CVSS) - [CVE-2013-4801](https://cve.now/CVE-2013-4801.md): Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1 (no CVSS) - [CVE-2013-3300](https://cve.now/CVE-2013-3300.md): The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote (no CVSS, net.liftweb:lift-webkit · net.liftweb:lift-webkit\_2.7.7 +6) - [CVE-2013-3445](https://cve.now/CVE-2013-3445.md): The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a deni (no CVSS) - [CVE-2013-4802](https://cve.now/CVE-2013-4802.md): Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to (no CVSS) - [CVE-2013-4015](https://cve.now/CVE-2013-4015.md): Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mode or (2) Enhanced P (no CVSS) - [CVE-2013-4937](https://cve.now/CVE-2013-4937.md): Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U w (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-07-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.