# CVEs published 2013-10-05 10 CVEs were published on October 5, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-4075](https://cve.now/CVE-2012-4075.md): Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, (no CVSS) - [CVE-2012-4084](https://cve.now/CVE-2012-4084.md): Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco Unified C (no CVSS) - [CVE-2012-4090](https://cve.now/CVE-2012-4090.md): The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file infor (no CVSS) - [CVE-2012-4091](https://cve.now/CVE-2012-4091.md): The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2) (no CVSS) - [CVE-2012-4098](https://cve.now/CVE-2012-4098.md): The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP ser (no CVSS) - [CVE-2012-4122](https://cve.now/CVE-2012-4122.md): The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell (no CVSS) - [CVE-2012-4141](https://cve.now/CVE-2012-4141.md): Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathna (no CVSS) - [CVE-2013-2808](https://cve.now/CVE-2013-2808.md): Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascula (no CVSS) - [CVE-2013-3610](https://cve.now/CVE-2013-3610.md): qis/QIS\_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers t (no CVSS) - [CVE-2013-3627](https://cve.now/CVE-2013-3627.md): FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927 and 4.6 before 4.6.0.3258 allows remote atta (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-10-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.