# CVEs published 2013-08-19 23 CVEs were published on August 19, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-5575](https://cve.now/CVE-2012-5575.md): Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm (no CVSS, org.apache.cxf:cxf-rt-transports-http) - [CVE-2013-0167](https://cve.now/CVE-2013-0167.md): VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment (no CVSS) - [CVE-2013-1872](https://cve.now/CVE-2013-1872.md): The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and (no CVSS) - [CVE-2013-2136](https://cve.now/CVE-2013-2136.md): Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script (no CVSS) - [CVE-2013-2145](https://cve.now/CVE-2013-2145.md): The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and ex (no CVSS) - [CVE-2013-2160](https://cve.now/CVE-2013-2160.md): The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a de (no CVSS, org.apache.cxf:cxf-rt-frontend-jaxrs) - [CVE-2013-3567](https://cve.now/CVE-2013-3567.md): Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote atta (no CVSS, puppet) - [CVE-2013-4174](https://cve.now/CVE-2013-4174.md): Multiple cross-site scripting (XSS) vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1 for Drupal allow remote attackers to inject a (no CVSS) - [CVE-2013-4206](https://cve.now/CVE-2013-4206.md): Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (c (no CVSS) - [CVE-2013-4207](https://cve.now/CVE-2013-4207.md): Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature (no CVSS) - [CVE-2013-4208](https://cve.now/CVE-2013-4208.md): The rsa\_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures (no CVSS) - [CVE-2013-4236](https://cve.now/CVE-2013-4236.md): VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment (no CVSS) - [CVE-2013-4242](https://cve.now/CVE-2013-4242.md): GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA (no CVSS) - [CVE-2013-4852](https://cve.now/CVE-2013-4852.md): Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a deni (no CVSS) - [CVE-2013-5029](https://cve.now/CVE-2013-5029.md): phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related (no CVSS) - [CVE-2013-5315](https://cve.now/CVE-2013-5315.md): Cross-site scripting (XSS) vulnerability in the Resource Manager in the MEE submodule (mee.module) in the Scald module 6.x-1.x before 6.x-1. (no CVSS) - [CVE-2013-5311](https://cve.now/CVE-2013-5311.md): Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" pa (no CVSS) - [CVE-2013-5312](https://cve.now/CVE-2013-5312.md): Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2013-5313](https://cve.now/CVE-2013-5313.md): Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote atta (no CVSS) - [CVE-2013-5314](https://cve.now/CVE-2013-5314.md): Cross-site scripting (XSS) vulnerability in serendipity\_admin\_image\_selector.php in Serendipity 1.6.2 and earlier allows remote attackers to (no CVSS) - [CVE-2013-2162](https://cve.now/CVE-2013-2162.md): Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux create (no CVSS) - [CVE-2013-2175](https://cve.now/CVE-2013-2175.md): HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr\_ip or other "hdr\_\*" functions with a negative occurrence coun (no CVSS) - [CVE-2013-4881](https://cve.now/CVE-2013-4881.md): Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote atta (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-08-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.