# CVEs published 2013-11-01

10 CVEs were published on November 1, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2701](https://cve.now/CVE-2013-2701.md): Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack t (no CVSS)
- [CVE-2013-4447](https://cve.now/CVE-2013-4447.md): Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal al (no CVSS)
- [CVE-2013-5977](https://cve.now/CVE-2013-5977.md): Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote a (no CVSS)
- [CVE-2013-3630](https://cve.now/CVE-2013-3630.md): Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then tr (no CVSS, moodle/moodle)
- [CVE-2013-4484](https://cve.now/CVE-2013-4484.md): Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET reque (no CVSS)
- [CVE-2013-4713](https://cve.now/CVE-2013-4713.md): Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to (no CVSS)
- [CVE-2013-5431](https://cve.now/CVE-2013-5431.md): Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before (no CVSS)
- [CVE-2013-5548](https://cve.now/CVE-2013-5548.md): The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay feature (no CVSS)
- [CVE-2013-5551](https://cve.now/CVE-2013-5551.md): Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are enabled, allows remot (no CVSS)
- [CVE-2013-5555](https://cve.now/CVE-2013-5555.md): Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (service restart) via a c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.