# CVEs published 2013-09-27 16 CVEs were published on September 27, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-1313](https://cve.now/CVE-2012-1313.md): The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via malformed (no CVSS) - [CVE-2013-5403](https://cve.now/CVE-2013-5403.md): Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative (no CVSS) - [CVE-2013-5498](https://cve.now/CVE-2013-5498.md): The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remot (no CVSS) - [CVE-2013-5093](https://cve.now/CVE-2013-5093.md): The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, whi (no CVSS, graphite-web) - [CVE-2013-5472](https://cve.now/CVE-2013-5472.md): The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulat (no CVSS) - [CVE-2013-5473](https://cve.now/CVE-2013-5473.md): Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to caus (no CVSS) - [CVE-2013-5474](https://cve.now/CVE-2013-5474.md): Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows (no CVSS) - [CVE-2013-5475](https://cve.now/CVE-2013-5475.md): Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denial of service (device (no CVSS) - [CVE-2013-5476](https://cve.now/CVE-2013-5476.md): The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remot (no CVSS) - [CVE-2013-5477](https://cve.now/CVE-2013-5477.md): The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to caus (no CVSS) - [CVE-2013-5478](https://cve.now/CVE-2013-5478.md): Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service (i (no CVSS) - [CVE-2013-5479](https://cve.now/CVE-2013-5479.md): The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2013-5480](https://cve.now/CVE-2013-5480.md): The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2013-5481](https://cve.now/CVE-2013-5481.md): The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (dev (no CVSS) - [CVE-2013-5942](https://cve.now/CVE-2013-5942.md): Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted (no CVSS, graphite-web) - [CVE-2013-5943](https://cve.now/CVE-2013-5943.md): Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML (no CVSS, graphite-web) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-09-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.