# CVEs published 2013-07-29 32 CVEs were published on July 29, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-4947](https://cve.now/CVE-2013-4947.md): Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and a (no CVSS) - [CVE-2013-4948](https://cve.now/CVE-2013-4948.md): SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the element\_2 parameter. (no CVSS) - [CVE-2013-4949](https://cve.now/CVE-2013-4949.md): Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP fi (no CVSS) - [CVE-2013-4950](https://cve.now/CVE-2013-4950.md): Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web script or HTML via the el (no CVSS) - [CVE-2013-4951](https://cve.now/CVE-2013-4951.md): Multiple cross-site scripting (XSS) vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS) - [CVE-2013-4952](https://cve.now/CVE-2013-4952.md): SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2013-4953](https://cve.now/CVE-2013-4953.md): SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL commands via the gid parame (no CVSS) - [CVE-2013-4954](https://cve.now/CVE-2013-4954.md): Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, (no CVSS) - [CVE-2013-4140](https://cve.now/CVE-2013-4140.md): Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote authenticated users w (no CVSS) - [CVE-2013-4945](https://cve.now/CVE-2013-4945.md): Multiple SQL injection vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2013-4946](https://cve.now/CVE-2013-4946.md): Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to inject arbitrary w (no CVSS) - [CVE-2013-0723](https://cve.now/CVE-2013-0723.md): Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of servi (no CVSS) - [CVE-2013-2181](https://cve.now/CVE-2013-2181.md): Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows attackers to inject ar (no CVSS) - [CVE-2013-3515](https://cve.now/CVE-2013-3515.md): Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script (no CVSS) - [CVE-2013-4944](https://cve.now/CVE-2013-4944.md): Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend C (no CVSS) - [CVE-2013-4920](https://cve.now/CVE-2013-4920.md): The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a (no CVSS) - [CVE-2013-4921](https://cve.now/CVE-2013-4921.md): Off-by-one error in the dissect\_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c in the Radiotap dissector in Wireshark 1.10 (no CVSS) - [CVE-2013-4922](https://cve.now/CVE-2013-4922.md): Double free vulnerability in the dissect\_dcom\_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActiv (no CVSS) - [CVE-2013-4923](https://cve.now/CVE-2013-4923.md): Memory leak in the dissect\_dcom\_ActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector (no CVSS) - [CVE-2013-4924](https://cve.now/CVE-2013-4924.md): epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate cer (no CVSS) - [CVE-2013-4925](https://cve.now/CVE-2013-4925.md): Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 al (no CVSS) - [CVE-2013-4926](https://cve.now/CVE-2013-4926.md): epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine wh (no CVSS) - [CVE-2013-4927](https://cve.now/CVE-2013-4927.md): Integer signedness error in the get\_type\_length function in epan/dissectors/packet-btsdp.c in the Bluetooth SDP dissector in Wireshark 1.8.x (no CVSS) - [CVE-2013-4928](https://cve.now/CVE-2013-4928.md): Integer signedness error in the dissect\_headers function in epan/dissectors/packet-btobex.c in the Bluetooth OBEX dissector in Wireshark 1.1 (no CVSS) - [CVE-2013-4929](https://cve.now/CVE-2013-4929.md): The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 (no CVSS) - [CVE-2013-4930](https://cve.now/CVE-2013-4930.md): The dissect\_dvbci\_tpdu\_hdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x bef (no CVSS) - [CVE-2013-4931](https://cve.now/CVE-2013-4931.md): epan/proto.c in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 allows remote attackers to cause a denial of service (loop) via a craf (no CVSS) - [CVE-2013-4932](https://cve.now/CVE-2013-4932.md): Multiple array index errors in epan/dissectors/packet-gsm\_a\_common.c in the GSM A Common dissector in Wireshark 1.8.x before 1.8.9 and 1.10. (no CVSS) - [CVE-2013-4933](https://cve.now/CVE-2013-4933.md): The netmon\_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not pro (no CVSS) - [CVE-2013-4934](https://cve.now/CVE-2013-4934.md): The netmon\_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not ini (no CVSS) - [CVE-2013-4935](https://cve.now/CVE-2013-4935.md): The dissect\_per\_length\_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in Wireshark 1.8.x before 1.8.9 and 1 (no CVSS) - [CVE-2013-4936](https://cve.now/CVE-2013-4936.md): The IsDFP\_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not v (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-07-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.