# CVEs published 2013-08-09

34 CVEs were published on August 9, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3039](https://cve.now/CVE-2012-3039.md): Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SS (no CVSS)
- [CVE-2013-0492](https://cve.now/CVE-2013-0492.md): Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users t (no CVSS)
- [CVE-2013-0494](https://cve.now/CVE-2013-0494.md): IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (no CVSS)
- [CVE-2013-2792](https://cve.now/CVE-2013-2792.md): Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of s (no CVSS)
- [CVE-2013-2796](https://cve.now/CVE-2013-2796.md): Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers (no CVSS)
- [CVE-2013-2798](https://cve.now/CVE-2013-2798.md): Schweitzer Engineering Laboratories (SEL) SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow physically proximate attackers to cause (no CVSS)
- [CVE-2013-4031](https://cve.now/CVE-2013-4031.md): The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module I (no CVSS)
- [CVE-2013-4037](https://cve.now/CVE-2013-4037.md): The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and I (no CVSS)
- [CVE-2013-4038](https://cve.now/CVE-2013-4038.md): The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, S (no CVSS)
- [CVE-2012-6458](https://cve.now/CVE-2012-6458.md): Multiple cross-site scripting (XSS) vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to (no CVSS)
- [CVE-2013-4115](https://cve.now/CVE-2013-4115.md): Buffer overflow in the idnsALookup function in dns\_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to (no CVSS)
- [CVE-2013-5100](https://cve.now/CVE-2013-5100.md): Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attacker (no CVSS, jambagecom/div2007)
- [CVE-2013-2576](https://cve.now/CVE-2013-2576.md): Buffer overflow in Artweaver before 3.1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v (no CVSS)
- [CVE-2013-2577](https://cve.now/CVE-2013-2577.md): Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file. (no CVSS)
- [CVE-2013-3262](https://cve.now/CVE-2013-3262.md): Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attack (no CVSS)
- [CVE-2013-4147](https://cve.now/CVE-2013-4147.md): Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial (no CVSS)
- [CVE-2013-4600](https://cve.now/CVE-2013-4600.md): Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms before 8.5.2 allow remote attackers to inject arbitrary web script or (no CVSS, org.opencms:opencms-core)
- [CVE-2013-4619](https://cve.now/CVE-2013-4619.md): Multiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) start (no CVSS)
- [CVE-2013-4620](https://cve.now/CVE-2013-4620.md): Cross-site scripting (XSS) vulnerability in interface/main/onotes/office\_comments\_full.php in OpenEMR 4.1.1 allows remote attackers to injec (no CVSS)
- [CVE-2013-4625](https://cve.now/CVE-2013-4625.md): Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote at (no CVSS)
- [CVE-2013-4742](https://cve.now/CVE-2013-4742.md): Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary co (no CVSS)
- [CVE-2013-4759](https://cve.now/CVE-2013-4759.md): Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow (no CVSS)
- [CVE-2013-4789](https://cve.now/CVE-2013-4789.md): SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2013-5098](https://cve.now/CVE-2013-5098.md): Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attack (no CVSS)
- [CVE-2013-5099](https://cve.now/CVE-2013-5099.md): Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject ar (no CVSS)
- [CVE-2013-3027](https://cve.now/CVE-2013-3027.md): Integer overflow in the DWA9W ActiveX control in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2013-3032](https://cve.now/CVE-2013-3032.md): Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to (no CVSS)
- [CVE-2013-3659](https://cve.now/CVE-2013-3659.md): The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows rem (no CVSS)
- [CVE-2013-3990](https://cve.now/CVE-2013-3990.md): Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to (no CVSS)
- [CVE-2013-4943](https://cve.now/CVE-2013-4943.md): The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain (no CVSS)
- [CVE-2013-0150](https://cve.now/CVE-2013-0150.md): Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 (no CVSS)
- [CVE-2013-2117](https://cve.now/CVE-2013-2117.md): Directory traversal vulnerability in the cgit\_parse\_readme function in ui-summary.c in cgit before 0.9.2, when a readme file is set to a fil (no CVSS)
- [CVE-2013-3253](https://cve.now/CVE-2013-3253.md): Cross-site request forgery (CSRF) vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows rem (no CVSS)
- [CVE-2013-3480](https://cve.now/CVE-2013-3480.md): Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-08-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.