# CVEs published 2013-08-23 20 CVEs were published on August 23, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2011-4607](https://cve.now/CVE-2011-4607.md): PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentica (no CVSS) - [CVE-2012-4733](https://cve.now/CVE-2012-4733.md): Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows (no CVSS) - [CVE-2013-1434](https://cve.now/CVE-2013-1434.md): Multiple SQL injection vulnerabilities in (1) api\_poller.php and (2) utility.php in Cacti before 0.8.8b allow remote attackers to execute ar (no CVSS) - [CVE-2013-1435](https://cve.now/CVE-2013-1435.md): (1) snmp.php and (2) rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspec (no CVSS) - [CVE-2013-1909](https://cve.now/CVE-2013-1909.md): The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) (no CVSS, qpid-python) - [CVE-2013-2194](https://cve.now/CVE-2013-2194.md): Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to (no CVSS) - [CVE-2013-2195](https://cve.now/CVE-2013-2195.md): The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via (no CVSS) - [CVE-2013-2196](https://cve.now/CVE-2013-2196.md): Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permi (no CVSS) - [CVE-2013-3368](https://cve.now/CVE-2013-3368.md): bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary files via a symlink att (no CVSS) - [CVE-2013-3369](https://cve.now/CVE-2013-3369.md): Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions to view the administ (no CVSS) - [CVE-2013-3370](https://cve.now/CVE-2013-3370.md): Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which all (no CVSS) - [CVE-2013-3371](https://cve.now/CVE-2013-3371.md): Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inj (no CVSS) - [CVE-2013-3372](https://cve.now/CVE-2013-3372.md): Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers (no CVSS) - [CVE-2013-3373](https://cve.now/CVE-2013-3373.md): CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary (no CVSS) - [CVE-2013-3374](https://cve.now/CVE-2013-3374.md): Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session (no CVSS) - [CVE-2013-4172](https://cve.now/CVE-2013-4172.md): The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors. (no CVSS) - [CVE-2013-5587](https://cve.now/CVE-2013-5587.md): Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers t (no CVSS) - [CVE-2012-6583](https://cve.now/CVE-2012-6583.md): Cross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with th (no CVSS) - [CVE-2013-5569](https://cve.now/CVE-2013-5569.md): SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec (no CVSS) - [CVE-2013-5570](https://cve.now/CVE-2013-5570.md): Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to in (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-08-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.