# CVEs published 2013-10-02 32 CVEs were published on October 2, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-4095](https://cve.now/CVE-2012-4095.md): The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, an (no CVSS) - [CVE-2012-4102](https://cve.now/CVE-2012-4102.md): The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privil (no CVSS) - [CVE-2012-4103](https://cve.now/CVE-2012-4103.md): ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding (no CVSS) - [CVE-2012-4104](https://cve.now/CVE-2012-4104.md): Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System ( (no CVSS) - [CVE-2012-4109](https://cve.now/CVE-2012-4109.md): The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges (no CVSS) - [CVE-2012-4110](https://cve.now/CVE-2012-4110.md): run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding c (no CVSS) - [CVE-2012-4111](https://cve.now/CVE-2012-4111.md): The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilege (no CVSS) - [CVE-2013-4066](https://cve.now/CVE-2013-4066.md): IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creatin (no CVSS) - [CVE-2013-4067](https://cve.now/CVE-2013-4067.md): IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, (no CVSS) - [CVE-2013-5503](https://cve.now/CVE-2013-5503.md): The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause (no CVSS) - [CVE-2013-5517](https://cve.now/CVE-2013-5517.md): SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute (no CVSS) - [CVE-2013-5979](https://cve.now/CVE-2013-5979.md): Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary (no CVSS) - [CVE-2013-2906](https://cve.now/CVE-2013-2906.md): Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to c (no CVSS) - [CVE-2013-2907](https://cve.now/CVE-2013-2907.md): The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of (no CVSS) - [CVE-2013-2908](https://cve.now/CVE-2013-2908.md): Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote atta (no CVSS) - [CVE-2013-2909](https://cve.now/CVE-2013-2909.md): Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or (no CVSS) - [CVE-2013-2910](https://cve.now/CVE-2013-2910.md): Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Ch (no CVSS) - [CVE-2013-2911](https://cve.now/CVE-2013-2911.md): Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Goog (no CVSS) - [CVE-2013-2912](https://cve.now/CVE-2013-2912.md): Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper\_in\_process\_router.cc in the (no CVSS) - [CVE-2013-2913](https://cve.now/CVE-2013-2913.md): Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google (no CVSS) - [CVE-2013-2914](https://cve.now/CVE-2013-2914.md): Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a (no CVSS) - [CVE-2013-2915](https://cve.now/CVE-2013-2915.md): Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers (no CVSS) - [CVE-2013-2916](https://cve.now/CVE-2013-2916.md): Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with (no CVSS) - [CVE-2013-2917](https://cve.now/CVE-2013-2917.md): The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in B (no CVSS) - [CVE-2013-2918](https://cve.now/CVE-2013-2918.md): Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implement (no CVSS) - [CVE-2013-2919](https://cve.now/CVE-2013-2919.md): Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibl (no CVSS) - [CVE-2013-2920](https://cve.now/CVE-2013-2920.md): The DoResolveRelativeHost function in url/url\_canon\_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a deni (no CVSS) - [CVE-2013-2921](https://cve.now/CVE-2013-2921.md): Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink (no CVSS) - [CVE-2013-2922](https://cve.now/CVE-2013-2922.md): Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote atta (no CVSS) - [CVE-2013-2923](https://cve.now/CVE-2013-2923.md): Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have othe (no CVSS) - [CVE-2013-2924](https://cve.now/CVE-2013-2924.md): Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, (no CVSS) - [CVE-2013-4032](https://cve.now/CVE-2013-4032.md): The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-10-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.