# CVEs published 2013-09-20

20 CVEs were published on September 20, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0596](https://cve.now/CVE-2013-0596.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows (no CVSS)
- [CVE-2013-4052](https://cve.now/CVE-2013-4052.md): Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7 (no CVSS)
- [CVE-2013-4053](https://cve.now/CVE-2013-4053.md): The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8 (no CVSS)
- [CVE-2013-4815](https://cve.now/CVE-2013-4815.md): Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote atta (no CVSS)
- [CVE-2012-4081](https://cve.now/CVE-2012-4081.md): MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (applica (no CVSS)
- [CVE-2012-4082](https://cve.now/CVE-2012-4082.md): MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges by entering crafted (no CVSS)
- [CVE-2013-3473](https://cve.now/CVE-2013-3473.md): The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the exis (no CVSS)
- [CVE-2010-5290](https://cve.now/CVE-2010-5290.md): The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, (no CVSS)
- [CVE-2012-4072](https://cve.now/CVE-2012-4072.md): The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers (no CVSS)
- [CVE-2012-4073](https://cve.now/CVE-2012-4073.md): The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2012-4074](https://cve.now/CVE-2012-4074.md): The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded p (no CVSS)
- [CVE-2012-4083](https://cve.now/CVE-2012-4083.md): Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated users to ca (no CVSS)
- [CVE-2012-4093](https://cve.now/CVE-2012-4093.md): The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home (no CVSS)
- [CVE-2013-1130](https://cve.now/CVE-2013-1130.md): Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileg (no CVSS)
- [CVE-2013-5500](https://cve.now/CVE-2013-5500.md): Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitr (no CVSS)
- [CVE-2013-5501](https://cve.now/CVE-2013-5501.md): Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2013-4068](https://cve.now/CVE-2013-4068.md): Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code (no CVSS)
- [CVE-2013-4706](https://cve.now/CVE-2013-4706.md): The SSH implementation on the D-Link Japan DWL-2100AP with firmware before R252JP-RC572 allows remote authenticated users to cause a denial (no CVSS)
- [CVE-2013-4707](https://cve.now/CVE-2013-4707.md): The SSH implementation on D-Link Japan DES-3810 devices with firmware before R2.20.011 allows remote authenticated users to cause a denial o (no CVSS)
- [CVE-2013-4709](https://cve.now/CVE-2013-4709.md): Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware before 4.32, SEIL/X2 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.