# CVEs published 2013-08-21

21 CVEs were published on August 21, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0597](https://cve.now/CVE-2013-0597.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8 (no CVSS)
- [CVE-2013-2802](https://cve.now/CVE-2013-2802.md): The universal protocol implementation in Sixnet UDR before 2.0 and RTU firmware before 4.8 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2013-2967](https://cve.now/CVE-2013-2967.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 be (no CVSS)
- [CVE-2013-2976](https://cve.now/CVE-2013-2976.md): The Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 b (no CVSS)
- [CVE-2013-3029](https://cve.now/CVE-2013-3029.md): Cross-site request forgery (CSRF) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, (no CVSS)
- [CVE-2013-4004](https://cve.now/CVE-2013-4004.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.7 and 8.5 (no CVSS)
- [CVE-2013-4005](https://cve.now/CVE-2013-4005.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 be (no CVSS)
- [CVE-2013-0526](https://cve.now/CVE-2013-0526.md): ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch a (no CVSS)
- [CVE-2013-3016](https://cve.now/CVE-2013-3016.md): IBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a crafted request for a servlet, related to (no CVSS)
- [CVE-2013-4699](https://cve.now/CVE-2013-4699.md): The Yahoo! Japan Yafuoku! application 4.3.0 and earlier for iOS and Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)
- [CVE-2013-4700](https://cve.now/CVE-2013-4700.md): The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-t (no CVSS)
- [CVE-2013-4701](https://cve.now/CVE-2013-4701.md): Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet s (no CVSS, openid/php-openid · typo3/cms)
- [CVE-2013-4229](https://cve.now/CVE-2013-4229.md): Cross-site scripting (XSS) vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users wi (no CVSS)
- [CVE-2013-4230](https://cve.now/CVE-2013-4230.md): The mm\_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restri (no CVSS)
- [CVE-2013-2887](https://cve.now/CVE-2013-2887.md): Multiple unspecified vulnerabilities in Google Chrome before 29.0.1547.57 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2013-2900](https://cve.now/CVE-2013-2900.md): The FilePath::ReferencesParent function in files/file\_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathn (no CVSS)
- [CVE-2013-2901](https://cve.now/CVE-2013-2901.md): Multiple integer overflows in (1) libGLESv2/renderer/Renderer9.cpp and (2) libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer (no CVSS)
- [CVE-2013-2902](https://cve.now/CVE-2013-2902.md): Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows (no CVSS)
- [CVE-2013-2903](https://cve.now/CVE-2013-2903.md): Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in G (no CVSS)
- [CVE-2013-2904](https://cve.now/CVE-2013-2904.md): Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29 (no CVSS)
- [CVE-2013-2905](https://cve.now/CVE-2013-2905.md): The SharedMemory::Create function in memory/shared\_memory\_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-08-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.