# CVEs published 2013-09-19 43 CVEs were published on September 19, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-1121](https://cve.now/CVE-2013-1121.md): The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote (no CVSS) - [CVE-2013-5497](https://cve.now/CVE-2013-5497.md): The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, whi (no CVSS) - [CVE-2011-2391](https://cve.now/CVE-2011-2391.md): The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via craft (no CVSS) - [CVE-2013-0957](https://cve.now/CVE-2013-0957.md): Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a confi (no CVSS) - [CVE-2013-1034](https://cve.now/CVE-2013-1034.md): Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject ar (no CVSS) - [CVE-2013-1035](https://cve.now/CVE-2013-1035.md): The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS) - [CVE-2013-1036](https://cve.now/CVE-2013-1036.md): Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafte (no CVSS) - [CVE-2013-1037](https://cve.now/CVE-2013-1037.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1038](https://cve.now/CVE-2013-1038.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1039](https://cve.now/CVE-2013-1039.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1040](https://cve.now/CVE-2013-1040.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1041](https://cve.now/CVE-2013-1041.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1042](https://cve.now/CVE-2013-1042.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1043](https://cve.now/CVE-2013-1043.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1044](https://cve.now/CVE-2013-1044.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1045](https://cve.now/CVE-2013-1045.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1046](https://cve.now/CVE-2013-1046.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-1047](https://cve.now/CVE-2013-1047.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-5125](https://cve.now/CVE-2013-5125.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-5126](https://cve.now/CVE-2013-5126.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-5127](https://cve.now/CVE-2013-5127.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-5128](https://cve.now/CVE-2013-5128.md): WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2013-5129](https://cve.now/CVE-2013-5129.md): Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers to inject arbitrary (no CVSS) - [CVE-2013-5131](https://cve.now/CVE-2013-5131.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2013-5137](https://cve.now/CVE-2013-5137.md): IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control over a background app (no CVSS) - [CVE-2013-5138](https://cve.now/CVE-2013-5138.md): IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via (no CVSS) - [CVE-2013-5139](https://cve.now/CVE-2013-5139.md): The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds array (no CVSS) - [CVE-2013-5140](https://cve.now/CVE-2013-5140.md): The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device restart) via an invalid (no CVSS) - [CVE-2013-5141](https://cve.now/CVE-2013-5141.md): The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable, which allows attackers to cause a denial of ser (no CVSS) - [CVE-2013-5142](https://cve.now/CVE-2013-5142.md): The kernel in Apple iOS before 7 does not initialize unspecified kernel data structures, which allows local users to obtain sensitive inform (no CVSS) - [CVE-2013-5145](https://cve.now/CVE-2013-5145.md): kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to (1) load (no CVSS) - [CVE-2013-5147](https://cve.now/CVE-2013-5147.md): Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attackers to bypass an intend (no CVSS) - [CVE-2013-5149](https://cve.now/CVE-2013-5149.md): The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user approval, which allows at (no CVSS) - [CVE-2013-5150](https://cve.now/CVE-2013-5150.md): The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, which allows physically (no CVSS) - [CVE-2013-5151](https://cve.now/CVE-2013-5151.md): Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content type, which allows r (no CVSS) - [CVE-2013-5152](https://cve.now/CVE-2013-5152.md): Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site. (no CVSS) - [CVE-2013-5153](https://cve.now/CVE-2013-5153.md): Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read (no CVSS) - [CVE-2013-5154](https://cve.now/CVE-2013-5154.md): The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of the script interprete (no CVSS) - [CVE-2013-5155](https://cve.now/CVE-2013-5155.md): The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an application that writes cra (no CVSS) - [CVE-2013-5156](https://cve.now/CVE-2013-5156.md): The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attack (no CVSS) - [CVE-2013-5157](https://cve.now/CVE-2013-5157.md): The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers (no CVSS) - [CVE-2013-5158](https://cve.now/CVE-2013-5158.md): The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximat (no CVSS) - [CVE-2013-5159](https://cve.now/CVE-2013-5159.md): WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive information about use (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-09-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.