# CVEs published 2013-09-13 29 CVEs were published on September 13, 2013: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2013-2888](https://cve.now/CVE-2013-2888.md): Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow p (no CVSS) - [CVE-2013-2889](https://cve.now/CVE-2013-2889.md): drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_ZEROPLUS is enabled, (no CVSS) - [CVE-2013-2890](https://cve.now/CVE-2013-2890.md): drivers/hid/hid-sony.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_SONY is enabled, allo (no CVSS) - [CVE-2013-2891](https://cve.now/CVE-2013-2891.md): drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_STEELSERIES is (no CVSS) - [CVE-2013-2892](https://cve.now/CVE-2013-2892.md): drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_PANTHERLORD is enabled, (no CVSS) - [CVE-2013-2893](https://cve.now/CVE-2013-2893.md): The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_LOGITECH\_FF, CONFIG\_LOGIG940\_FF, or CONFIG\_LOGIWHEE (no CVSS) - [CVE-2013-2894](https://cve.now/CVE-2013-2894.md): drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_LENOVO\_TPKBD (no CVSS) - [CVE-2013-2895](https://cve.now/CVE-2013-2895.md): drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_LOGITECH\_DJ is (no CVSS) - [CVE-2013-2896](https://cve.now/CVE-2013-2896.md): drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_NTRIG is enabled, al (no CVSS) - [CVE-2013-2897](https://cve.now/CVE-2013-2897.md): Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, (no CVSS) - [CVE-2013-2898](https://cve.now/CVE-2013-2898.md): drivers/hid/hid-sensor-hub.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_SENSOR\_HUB is e (no CVSS) - [CVE-2013-2899](https://cve.now/CVE-2013-2899.md): drivers/hid/hid-picolcd\_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG\_HID\_PICOLCD is en (no CVSS) - [CVE-2013-4809](https://cve.now/CVE-2013-4809.md): Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven (no CVSS) - [CVE-2013-4810](https://cve.now/CVE-2013-4810.md): HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow rem (CVSS 9.8, KEV) - [CVE-2013-4811](https://cve.now/CVE-2013-4811.md): UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Dri (no CVSS) - [CVE-2013-4812](https://cve.now/CVE-2013-4812.md): UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven (no CVSS) - [CVE-2013-4813](https://cve.now/CVE-2013-4813.md): The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 (no CVSS) - [CVE-2013-5717](https://cve.now/CVE-2013-5717.md): The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attack (no CVSS) - [CVE-2013-5718](https://cve.now/CVE-2013-5718.md): The dissect\_nbap\_T\_dCH\_ID function in epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before (no CVSS) - [CVE-2013-5719](https://cve.now/CVE-2013-5719.md): epan/dissectors/packet-assa\_r3.c in the ASSA R3 dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers (no CVSS) - [CVE-2013-5720](https://cve.now/CVE-2013-5720.md): Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of (no CVSS) - [CVE-2013-5721](https://cve.now/CVE-2013-5721.md): The dissect\_mq\_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does (no CVSS) - [CVE-2013-5722](https://cve.now/CVE-2013-5722.md): Unspecified vulnerability in the LDAP dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a (no CVSS) - [CVE-2013-4705](https://cve.now/CVE-2013-4705.md): Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging (no CVSS) - [CVE-2013-5482](https://cve.now/CVE-2013-5482.md): Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to c (no CVSS) - [CVE-2013-5489](https://cve.now/CVE-2013-5489.md): The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obta (no CVSS) - [CVE-2013-5492](https://cve.now/CVE-2013-5492.md): administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-serv (no CVSS) - [CVE-2013-5493](https://cve.now/CVE-2013-5493.md): The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access re (no CVSS) - [CVE-2013-5649](https://cve.now/CVE-2013-5649.md): Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-09-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.