# CVEs published 2013-09-28 9 CVEs were published on September 28, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-1921](https://cve.now/CVE-2013-1921.md): PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by r (no CVSS) - [CVE-2013-2068](https://cve.now/CVE-2013-2068.md): Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to cr (no CVSS) - [CVE-2013-4112](https://cve.now/CVE-2013-4112.md): The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive inform (no CVSS, org.jgroups:jgroups) - [CVE-2013-4244](https://cve.now/CVE-2013-4244.md): The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out- (no CVSS) - [CVE-2013-4276](https://cve.now/CVE-2013-4276.md): Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of servic (no CVSS) - [CVE-2013-5959](https://cve.now/CVE-2013-5959.md): Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 before 6.5.2 allows remote attackers to cause a denial of service (memory consumpti (no CVSS) - [CVE-2013-0598](https://cve.now/CVE-2013-0598.md): Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8. (no CVSS) - [CVE-2013-5160](https://cve.now/CVE-2013-5160.md): Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, (no CVSS) - [CVE-2013-5161](https://cve.now/CVE-2013-5161.md): Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows physically proximate attackers to bypass an in (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-09-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.