# CVEs published 2013-11-16 30 CVEs were published on November 16, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-1741](https://cve.now/CVE-2013-1741.md): Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possi (no CVSS) - [CVE-2013-4006](https://cve.now/CVE-2013-4006.md): IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local us (no CVSS) - [CVE-2013-5414](https://cve.now/CVE-2013-5414.md): The migration functionality in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does n (no CVSS) - [CVE-2013-5417](https://cve.now/CVE-2013-5417.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8 (no CVSS) - [CVE-2013-5418](https://cve.now/CVE-2013-5418.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 be (no CVSS) - [CVE-2013-5605](https://cve.now/CVE-2013-5605.md): Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or po (no CVSS) - [CVE-2013-5606](https://cve.now/CVE-2013-5606.md): The CERT\_VerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 provides an unexpected (no CVSS) - [CVE-2013-5972](https://cve.now/CVE-2013-5972.md): VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host O (no CVSS) - [CVE-2013-6632](https://cve.now/CVE-2013-6632.md): Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory (no CVSS) - [CVE-2013-6801](https://cve.now/CVE-2013-6801.md): Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed .do (no CVSS) - [CVE-2013-6802](https://cve.now/CVE-2013-6802.md): Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process (no CVSS) - [CVE-2013-5193](https://cve.now/CVE-2013-5193.md): The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows (no CVSS) - [CVE-2013-6798](https://cve.now/CVE-2013-6798.md): BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution (no CVSS) - [CVE-2013-6799](https://cve.now/CVE-2013-6799.md): Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link to a directory. (no CVSS) - [CVE-2013-6800](https://cve.now/CVE-2013-6800.md): An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authentic (no CVSS) - [CVE-2013-1418](https://cve.now/CVE-2013-1418.md): The setup\_server\_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple rea (no CVSS) - [CVE-2013-3030](https://cve.now/CVE-2013-3030.md): The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 be (no CVSS) - [CVE-2013-3406](https://cve.now/CVE-2013-3406.md): The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) al (no CVSS) - [CVE-2013-3407](https://cve.now/CVE-2013-3407.md): The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, wh (no CVSS) - [CVE-2013-3694](https://cve.now/CVE-2013-3694.md): BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access fold (no CVSS) - [CVE-2013-3876](https://cve.now/CVE-2013-3876.md): DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Wi (no CVSS) - [CVE-2013-4034](https://cve.now/CVE-2013-4034.md): IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 (no CVSS) - [CVE-2013-4842](https://cve.now/CVE-2013-4842.md): Cross-site scripting (XSS) vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote attackers to inject ar (no CVSS) - [CVE-2013-4843](https://cve.now/CVE-2013-4843.md): Unspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote authenticated users to obtain sensiti (no CVSS) - [CVE-2013-5425](https://cve.now/CVE-2013-5425.md): Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before (no CVSS) - [CVE-2013-5454](https://cve.now/CVE-2013-5454.md): IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through (no CVSS) - [CVE-2013-5556](https://cve.now/CVE-2013-5556.md): The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2 (no CVSS) - [CVE-2013-6686](https://cve.now/CVE-2013-6686.md): The SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users to cause a denial of service (interface queu (no CVSS) - [CVE-2013-6688](https://cve.now/CVE-2013-6688.md): Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified Communi (no CVSS) - [CVE-2013-6689](https://cve.now/CVE-2013-6689.md): Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or cre (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-11-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.