# CVEs published 2013-09-18

20 CVEs were published on September 18, 2013: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-1718](https://cve.now/CVE-2013-1718.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird befor (no CVSS)
- [CVE-2013-1719](https://cve.now/CVE-2013-1719.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.2 (no CVSS)
- [CVE-2013-1720](https://cve.now/CVE-2013-1720.md): The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tree Builder in Mozilla Firefox before 24.0, Thunderbird before 24.0, an (no CVSS)
- [CVE-2013-1721](https://cve.now/CVE-2013-1721.md): Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Fi (no CVSS)
- [CVE-2013-1722](https://cve.now/CVE-2013-1722.md): Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0, Fi (no CVSS)
- [CVE-2013-1723](https://cve.now/CVE-2013-1723.md): The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruc (no CVSS)
- [CVE-2013-1724](https://cve.now/CVE-2013-1724.md): Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox before 24.0, Thunderbi (no CVSS)
- [CVE-2013-1725](https://cve.now/CVE-2013-1725.md): Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey befo (no CVSS)
- [CVE-2013-1726](https://cve.now/CVE-2013-1726.md): Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, (no CVSS)
- [CVE-2013-1727](https://cve.now/CVE-2013-1727.md): Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting (XSS (no CVSS)
- [CVE-2013-1728](https://cve.now/CVE-2013-1728.md): The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, when Valgrind mode is us (no CVSS)
- [CVE-2013-1729](https://cve.now/CVE-2013-1729.md): The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtai (no CVSS)
- [CVE-2013-1730](https://cve.now/CVE-2013-1730.md): Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey befo (no CVSS)
- [CVE-2013-1731](https://cve.now/CVE-2013-1731.md): Untrusted search path vulnerability in the GL tracing functionality in Mozilla Firefox before 24.0 on Android allows attackers to execute ar (no CVSS)
- [CVE-2013-1732](https://cve.now/CVE-2013-1732.md): Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird befo (no CVSS)
- [CVE-2013-1735](https://cve.now/CVE-2013-1735.md): Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0 (no CVSS)
- [CVE-2013-1736](https://cve.now/CVE-2013-1736.md): The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbi (no CVSS)
- [CVE-2013-1737](https://cve.now/CVE-2013-1737.md): Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey befo (no CVSS)
- [CVE-2013-1738](https://cve.now/CVE-2013-1738.md): Use-after-free vulnerability in the JS\_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonke (no CVSS)
- [CVE-2013-3893](https://cve.now/CVE-2013-3893.md): Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote a (CVSS 8.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.