# CVEs published 2013-10-04

24 CVEs were published on October 4, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3540](https://cve.now/CVE-2013-3540.md): Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, O (no CVSS)
- [CVE-2013-3541](https://cve.now/CVE-2013-3541.md): Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to (no CVSS)
- [CVE-2013-3543](https://cve.now/CVE-2013-3543.md): The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote attackers to create (no CVSS)
- [CVE-2013-3689](https://cve.now/CVE-2013-3689.md): Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier (no CVSS)
- [CVE-2013-4986](https://cve.now/CVE-2013-4986.md): Stack-based buffer overflow in PDFAX0722\_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote (no CVSS)
- [CVE-2013-5091](https://cve.now/CVE-2013-5091.md): SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated users to execute arbi (no CVSS)
- [CVE-2013-2221](https://cve.now/CVE-2013-2221.md): Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2013-2222](https://cve.now/CVE-2013-2222.md): Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (crash) and possibly e (no CVSS)
- [CVE-2013-2223](https://cve.now/CVE-2013-2223.md): GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (o (no CVSS)
- [CVE-2013-4157](https://cve.now/CVE-2013-4157.md): Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err (no CVSS)
- [CVE-2013-4249](https://cve.now/CVE-2013-4249.md): Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6. (no CVSS, django)
- [CVE-2013-4330](https://cve.now/CVE-2013-4330.md): Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple langua (no CVSS, org.apache.camel:camel-core)
- [CVE-2013-4344](https://cve.now/CVE-2013-4344.md): Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local (no CVSS)
- [CVE-2013-4758](https://cve.now/CVE-2013-4758.md): Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7. (no CVSS)
- [CVE-2013-4788](https://cve.now/CVE-2013-4788.md): The PTR\_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initial (no CVSS)
- [CVE-2013-5915](https://cve.now/CVE-2013-5915.md): The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers (no CVSS)
- [CVE-2013-6011](https://cve.now/CVE-2013-6011.md): Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd (no CVSS)
- [CVE-2013-6044](https://cve.now/CVE-2013-6044.md): The is\_safe\_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as s (no CVSS, django)
- [CVE-2013-2964](https://cve.now/CVE-2013-2964.md): Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 throu (no CVSS)
- [CVE-2013-4711](https://cve.now/CVE-2013-4711.md): Cross-site scripting (XSS) vulnerability in Accela BizSearch 3.2 on Linux and Solaris allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2013-4828](https://cve.now/CVE-2013-4828.md): HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; (no CVSS)
- [CVE-2013-4829](https://cve.now/CVE-2013-4829.md): HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; (no CVSS)
- [CVE-2013-5163](https://cve.now/CVE-2013-5163.md): Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify (no CVSS)
- [CVE-2013-5419](https://cve.now/CVE-2013-5419.md): Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by l (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.