# CVEs published 2013-10-17 19 CVEs were published on October 17, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-2190](https://cve.now/CVE-2013-2190.md): The translate\_hierarchy\_event function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XI (no CVSS) - [CVE-2013-2254](https://cve.now/CVE-2013-2254.md): The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in (no CVSS, org.apache.sling:org.apache.sling.api) - [CVE-2013-4287](https://cve.now/CVE-2013-4287.md): Algorithmic complexity vulnerability in Gem::Version::VERSION\_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through (no CVSS, rubygems-update) - [CVE-2013-4363](https://cve.now/CVE-2013-4363.md): Algorithmic complexity vulnerability in Gem::Version::ANCHORED\_VERSION\_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.2, 1.8.2 (no CVSS, rubygems-update) - [CVE-2013-4365](https://cve.now/CVE-2013-4365.md): Heap-based buffer overflow in the fcgid\_header\_bucket\_read function in fcgid\_bucket.c in the mod\_fcgid module before 2.3.9 for the Apache HT (no CVSS) - [CVE-2013-4368](https://cve.now/CVE-2013-4368.md): The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variab (no CVSS) - [CVE-2013-4369](https://cve.now/CVE-2013-4369.md): The xlu\_vif\_parse\_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer d (no CVSS) - [CVE-2013-4370](https://cve.now/CVE-2013-4370.md): The ocaml binding for the xc\_vcpu\_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which (no CVSS) - [CVE-2013-4371](https://cve.now/CVE-2013-4371.md): Use-after-free vulnerability in the libxl\_list\_cpupool function in the libxl toolstack library in Xen 4.2.x and 4.3.x, when running "under m (no CVSS) - [CVE-2013-4397](https://cve.now/CVE-2013-4397.md): Multiple integer overflows in the th\_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of servic (no CVSS) - [CVE-2013-4689](https://cve.now/CVE-2013-4689.md): J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 (no CVSS) - [CVE-2013-6013](https://cve.now/CVE-2013-6013.md): Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 (no CVSS) - [CVE-2013-6015](https://cve.now/CVE-2013-6015.md): Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX (no CVSS) - [CVE-2013-6169](https://cve.now/CVE-2013-6169.md): The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain s (no CVSS) - [CVE-2013-6170](https://cve.now/CVE-2013-6170.md): Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Genera (no CVSS) - [CVE-2013-0500](https://cve.now/CVE-2013-0500.md): IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but a (no CVSS) - [CVE-2013-3025](https://cve.now/CVE-2013-3025.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inj (no CVSS) - [CVE-2013-4389](https://cve.now/CVE-2013-4389.md): Multiple format string vulnerabilities in log\_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x befo (no CVSS, actionmailer) - [CVE-2013-5376](https://cve.now/CVE-2013-5376.md): Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to i (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-10-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.