# CVEs published 2013-09-23

27 CVEs were published on September 23, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2624](https://cve.now/CVE-2012-2624.md): Stack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of service (crash) via a crafted packet. (no CVSS)
- [CVE-2013-1431](https://cve.now/CVE-2013-1431.md): The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly (no CVSS)
- [CVE-2013-1443](https://cve.now/CVE-2013-1443.md): The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remo (no CVSS, django)
- [CVE-2013-2217](https://cve.now/CVE-2013-2217.md): cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact vi (no CVSS, suds-py3 · suds)
- [CVE-2013-4294](https://cve.now/CVE-2013-4294.md): The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly com (no CVSS, keystone)
- [CVE-2013-5119](https://cve.now/CVE-2013-5119.md): Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replayin (no CVSS)
- [CVE-2013-5666](https://cve.now/CVE-2013-5666.md): The sendfile system-call implementation in sys/kern/uipc\_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad trans (no CVSS)
- [CVE-2013-5710](https://cve.now/CVE-2013-5710.md): The nullfs implementation in sys/fs/nullfs/null\_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users with certain permissions (no CVSS)
- [CVE-2013-5930](https://cve.now/CVE-2013-5930.md): Cross-site scripting (XSS) vulnerability in search\_residential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2013-5931](https://cve.now/CVE-2013-5931.md): SQL injection vulnerability in property\_listings\_detail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2013-5932](https://cve.now/CVE-2013-5932.md): Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and attack vectors. (no CVSS)
- [CVE-2012-5338](https://cve.now/CVE-2012-5338.md): Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks vi (no CVSS)
- [CVE-2013-4325](https://cve.now/CVE-2013-4325.md): The check\_permission\_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for com (no CVSS)
- [CVE-2013-4814](https://cve.now/CVE-2013-4814.md): Cross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attac (no CVSS)
- [CVE-2013-4817](https://cve.now/CVE-2013-4817.md): Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive information via unknow (no CVSS)
- [CVE-2013-4818](https://cve.now/CVE-2013-4818.md): Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10. (no CVSS)
- [CVE-2013-4819](https://cve.now/CVE-2013-4819.md): Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain sensitive information (no CVSS)
- [CVE-2013-4820](https://cve.now/CVE-2013-4820.md): Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10. (no CVSS)
- [CVE-2013-4821](https://cve.now/CVE-2013-4821.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service (no CVSS)
- [CVE-2013-5486](https://cve.now/CVE-2013-5486.md): Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) (no CVSS)
- [CVE-2013-5487](https://cve.now/CVE-2013-5487.md): DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary files via unspecif (no CVSS)
- [CVE-2013-5490](https://cve.now/CVE-2013-5490.md): Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity (no CVSS)
- [CVE-2013-5502](https://cve.now/CVE-2013-5502.md): The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to ob (no CVSS)
- [CVE-2013-5691](https://cve.now/CVE-2013-5691.md): The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, (no CVSS)
- [CVE-2013-5917](https://cve.now/CVE-2013-5917.md): SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2013-5918](https://cve.now/CVE-2013-5918.md): Cross-site scripting (XSS) vulnerability in platinum\_seo\_pack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attack (no CVSS)
- [CVE-2013-5696](https://cve.now/CVE-2013-5696.md): inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, whi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.