# CVEs published 2013-08-16 24 CVEs were published on August 16, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-3319](https://cve.now/CVE-2013-3319.md): The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a (no CVSS) - [CVE-2013-4114](https://cve.now/CVE-2013-4114.md): The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which a (no CVSS) - [CVE-2013-5301](https://cve.now/CVE-2013-5301.md): Directory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2013-5302](https://cve.now/CVE-2013-5302.md): SQL injection vulnerability in the Faceted Search (ke\_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary (no CVSS) - [CVE-2013-5303](https://cve.now/CVE-2013-5303.md): Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, rela (no CVSS) - [CVE-2013-5304](https://cve.now/CVE-2013-5304.md): SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2013-5305](https://cve.now/CVE-2013-5305.md): Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject a (no CVSS) - [CVE-2013-5306](https://cve.now/CVE-2013-5306.md): SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to execute (no CVSS) - [CVE-2013-5307](https://cve.now/CVE-2013-5307.md): Cross-site scripting (XSS) vulnerability in the Faceted Search (ke\_search) extension before 1.4.1 for TYPO3 allows remote attackers to injec (no CVSS) - [CVE-2013-5308](https://cve.now/CVE-2013-5308.md): Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote a (no CVSS) - [CVE-2013-5309](https://cve.now/CVE-2013-5309.md): Cross-site scripting (XSS) vulnerability in install/forum\_data/src/custom\_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a n (no CVSS) - [CVE-2013-5310](https://cve.now/CVE-2013-5310.md): SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS) - [CVE-2013-4128](https://cve.now/CVE-2013-4128.md): Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote atta (no CVSS) - [CVE-2013-4213](https://cve.now/CVE-2013-4213.md): Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote (no CVSS) - [CVE-2013-1888](https://cve.now/CVE-2013-1888.md): pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory. (no CVSS, pip) - [CVE-2013-5095](https://cve.now/CVE-2013-5095.md): Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance (no CVSS) - [CVE-2013-5096](https://cve.now/CVE-2013-5096.md): Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access co (no CVSS) - [CVE-2013-5097](https://cve.now/CVE-2013-5097.md): Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of (no CVSS) - [CVE-2013-0585](https://cve.now/CVE-2013-0585.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow rem (no CVSS) - [CVE-2013-0587](https://cve.now/CVE-2013-0587.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary w (no CVSS) - [CVE-2013-3034](https://cve.now/CVE-2013-3034.md): Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authen (no CVSS) - [CVE-2013-3040](https://cve.now/CVE-2013-3040.md): IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username (no CVSS) - [CVE-2013-4007](https://cve.now/CVE-2013-4007.md): Cross-site scripting (XSS) vulnerability in adv\_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET be (no CVSS) - [CVE-2013-4698](https://cve.now/CVE-2013-4698.md): Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in oppor (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-08-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.