# CVEs published 2013-09-12

23 CVEs were published on September 12, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2601](https://cve.now/CVE-2013-2601.md): The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to (no CVSS)
- [CVE-2013-2933](https://cve.now/CVE-2013-2933.md): Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack (no CVSS)
- [CVE-2013-2934](https://cve.now/CVE-2013-2934.md): Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 does not properly restrict access to web services, which ha (no CVSS)
- [CVE-2013-2935](https://cve.now/CVE-2013-2935.md): Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack (no CVSS)
- [CVE-2013-2936](https://cve.now/CVE-2013-2936.md): Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack (no CVSS)
- [CVE-2013-2937](https://cve.now/CVE-2013-2937.md): Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack (no CVSS)
- [CVE-2013-2938](https://cve.now/CVE-2013-2938.md): Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack (no CVSS)
- [CVE-2013-2939](https://cve.now/CVE-2013-2939.md): Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack (no CVSS)
- [CVE-2013-2940](https://cve.now/CVE-2013-2940.md): Unspecified vulnerability in Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 has unknown impact and attack (no CVSS)
- [CVE-2013-4329](https://cve.now/CVE-2013-4329.md): The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough d (no CVSS)
- [CVE-2013-5216](https://cve.now/CVE-2013-5216.md): Directory traversal vulnerability in logreader/uploadreader.jsp in CapaSystems Performance Guard before 6.2.102 allows remote attackers to r (no CVSS)
- [CVE-2013-5740](https://cve.now/CVE-2013-5740.md): Unspecified vulnerability in the Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) before 1.2, as used by the (no CVSS)
- [CVE-2013-4338](https://cve.now/CVE-2013-4338.md): wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attack (no CVSS)
- [CVE-2013-4339](https://cve.now/CVE-2013-4339.md): WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redi (no CVSS)
- [CVE-2013-4340](https://cve.now/CVE-2013-4340.md): wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the A (no CVSS)
- [CVE-2013-5738](https://cve.now/CVE-2013-5738.md): The get\_allowed\_mime\_types function in wp-includes/functions.php in WordPress before 3.6.1 does not require the unfiltered\_html capability f (no CVSS)
- [CVE-2013-5739](https://cve.now/CVE-2013-5739.md): The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe files, which might make it easier for remote a (no CVSS)
- [CVE-2013-3036](https://cve.now/CVE-2013-3036.md): Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitr (no CVSS)
- [CVE-2013-3037](https://cve.now/CVE-2013-3037.md): Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown (no CVSS)
- [CVE-2013-3038](https://cve.now/CVE-2013-3038.md): Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials vi (no CVSS)
- [CVE-2013-3039](https://cve.now/CVE-2013-3039.md): IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vec (no CVSS)
- [CVE-2013-3446](https://cve.now/CVE-2013-3446.md): Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary we (no CVSS)
- [CVE-2013-5488](https://cve.now/CVE-2013-5488.md): Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.