# CVEs published 2013-11-12

12 CVEs were published on November 12, 2013: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-5726](https://cve.now/CVE-2013-5726.md): Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows rem (no CVSS)
- [CVE-2013-2239](https://cve.now/CVE-2013-2239.md): vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allo (no CVSS)
- [CVE-2013-3918](https://cve.now/CVE-2013-3918.md): The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V (CVSS 8.8, KEV)
- [CVE-2013-4511](https://cve.now/CVE-2013-4511.md): Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memo (no CVSS)
- [CVE-2013-4512](https://cve.now/CVE-2013-4512.md): Buffer overflow in the exitcode\_proc\_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause (no CVSS)
- [CVE-2013-4513](https://cve.now/CVE-2013-4513.md): Buffer overflow in the oz\_cdev\_write function in drivers/staging/ozwpan/ozcdev.c in the Linux kernel before 3.12 allows local users to cause (no CVSS)
- [CVE-2013-4514](https://cve.now/CVE-2013-4514.md): Multiple buffer overflows in drivers/staging/wlags49\_h2/wl\_priv.c in the Linux kernel before 3.12 allow local users to cause a denial of ser (no CVSS)
- [CVE-2013-4515](https://cve.now/CVE-2013-4515.md): The bcm\_char\_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, w (no CVSS)
- [CVE-2013-4516](https://cve.now/CVE-2013-4516.md): The mp\_get\_count function in drivers/staging/sb105x/sb\_pci\_mp.c in the Linux kernel before 3.12 does not initialize a certain data structure (no CVSS)
- [CVE-2013-4740](https://cve.now/CVE-2013-4740.md): goodix\_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contribu (no CVSS)
- [CVE-2013-6122](https://cve.now/CVE-2013-6122.md): goodix\_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contribu (no CVSS)
- [CVE-2013-6763](https://cve.now/CVE-2013-6763.md): The uio\_mmap\_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-11-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.