# CVEs published 2013-10-19

14 CVEs were published on October 19, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4112](https://cve.now/CVE-2012-4112.md): The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrar (no CVSS)
- [CVE-2012-4113](https://cve.now/CVE-2012-4113.md): The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and read arbitrary files via (no CVSS)
- [CVE-2012-4114](https://cve.now/CVE-2012-4114.md): The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attac (no CVSS)
- [CVE-2012-4116](https://cve.now/CVE-2012-4116.md): The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote attackers (no CVSS)
- [CVE-2012-4117](https://cve.now/CVE-2012-4117.md): The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allows man-in-t (no CVSS)
- [CVE-2013-4712](https://cve.now/CVE-2013-4712.md): I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to ob (no CVSS)
- [CVE-2013-5372](https://cve.now/CVE-2013-5372.md): The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 (no CVSS)
- [CVE-2013-5534](https://cve.now/CVE-2013-5534.md): Directory traversal vulnerability in the attachment service in the Voice Message Web Service (aka VMWS or Cisco Unity Web Service) in Cisco (no CVSS)
- [CVE-2013-5702](https://cve.now/CVE-2013-5702.md): Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject (no CVSS)
- [CVE-2013-6021](https://cve.now/CVE-2013-6021.md): Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid (no CVSS)
- [CVE-2013-6025](https://cve.now/CVE-2013-6025.md): The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files v (no CVSS)
- [CVE-2013-6026](https://cve.now/CVE-2013-6026.md): The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, (no CVSS)
- [CVE-2013-6027](https://cve.now/CVE-2013-6027.md): Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated ad (no CVSS)
- [CVE-2013-6129](https://cve.now/CVE-2013-6129.md): The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.