# CVEs published 2013-08-14 24 CVEs were published on August 14, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-2078](https://cve.now/CVE-2013-2078.md): Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) via certain bit combin (no CVSS) - [CVE-2013-2126](https://cve.now/CVE-2013-2126.md): Multiple double free vulnerabilities in the LibRaw::unpack function in libraw\_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attack (no CVSS) - [CVE-2013-2127](https://cve.now/CVE-2013-2127.md): Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (cra (no CVSS) - [CVE-2013-5120](https://cve.now/CVE-2013-5120.md): SQL injection vulnerability in PHPFox before 3.6.0 (build4) allows remote attackers to execute arbitrary SQL commands via the search\[gender\] (no CVSS) - [CVE-2013-5121](https://cve.now/CVE-2013-5121.md): SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands via the search\[sort\_by (no CVSS) - [CVE-2013-3175](https://cve.now/CVE-2013-3175.md): Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, (no CVSS) - [CVE-2013-3181](https://cve.now/CVE-2013-3181.md): usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execut (no CVSS) - [CVE-2013-3182](https://cve.now/CVE-2013-3182.md): The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processi (no CVSS) - [CVE-2013-3183](https://cve.now/CVE-2013-3183.md): The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, (no CVSS) - [CVE-2013-3184](https://cve.now/CVE-2013-3184.md): Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2013-3185](https://cve.now/CVE-2013-3185.md): Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, an (no CVSS) - [CVE-2013-3186](https://cve.now/CVE-2013-3186.md): The Protected Mode feature in Microsoft Internet Explorer 7 through 10 on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S (no CVSS) - [CVE-2013-3187](https://cve.now/CVE-2013-3187.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2013-3188](https://cve.now/CVE-2013-3188.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS) - [CVE-2013-3189](https://cve.now/CVE-2013-3189.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS) - [CVE-2013-3190](https://cve.now/CVE-2013-3190.md): Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2013-3191](https://cve.now/CVE-2013-3191.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2013-3192](https://cve.now/CVE-2013-3192.md): Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2013-3193](https://cve.now/CVE-2013-3193.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2013-3194](https://cve.now/CVE-2013-3194.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS) - [CVE-2013-3196](https://cve.now/CVE-2013-3196.md): The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows (no CVSS) - [CVE-2013-3197](https://cve.now/CVE-2013-3197.md): The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows (no CVSS) - [CVE-2013-3198](https://cve.now/CVE-2013-3198.md): The NT Virtual DOS Machine (NTVDM) subsystem in the kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows (no CVSS) - [CVE-2013-3199](https://cve.now/CVE-2013-3199.md): Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-08-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.