# CVEs published 2013-11-21

14 CVEs were published on November 21, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-5991](https://cve.now/CVE-2013-5991.md): The displaySystemError function in html/handle\_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to obtain sensitive (no CVSS)
- [CVE-2013-5992](https://cve.now/CVE-2013-5992.md): Cross-site scripting (XSS) vulnerability in the displaySystemError function in html/handle\_error.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 (no CVSS)
- [CVE-2013-5993](https://cve.now/CVE-2013-5993.md): Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the authentication (no CVSS)
- [CVE-2013-5994](https://cve.now/CVE-2013-5994.md): data/class/pages/mypage/LC\_Page\_Mypage\_DeliveryAddr.php in LOCKON EC-CUBE 2.11.2 through 2.13.0 allows remote attackers to obtain sensitive (no CVSS)
- [CVE-2013-5995](https://cve.now/CVE-2013-5995.md): data/class/helper/SC\_Helper\_Address.php in the front-features implementation in LOCKON EC-CUBE 2.12.3 through 2.13.0 allows remote authentic (no CVSS)
- [CVE-2013-5996](https://cve.now/CVE-2013-5996.md): Multiple cross-site scripting (XSS) vulnerabilities in shopping/payment.tpl components in LOCKON EC-CUBE 2.11.0 through 2.13.0 allow remote (no CVSS)
- [CVE-2013-6173](https://cve.now/CVE-2013-6173.md): Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, (no CVSS)
- [CVE-2013-6174](https://cve.now/CVE-2013-6174.md): Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 be (no CVSS)
- [CVE-2013-6175](https://cve.now/CVE-2013-6175.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 (no CVSS)
- [CVE-2013-6176](https://cve.now/CVE-2013-6176.md): Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch (no CVSS)
- [CVE-2013-6177](https://cve.now/CVE-2013-6177.md): Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, (no CVSS)
- [CVE-2013-6832](https://cve.now/CVE-2013-6832.md): The nand\_ioctl function in sys/dev/nand/nand\_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize (no CVSS)
- [CVE-2013-6833](https://cve.now/CVE-2013-6833.md): The qls\_eioctl function in sys/dev/qlxge/qls\_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, whi (no CVSS)
- [CVE-2013-6834](https://cve.now/CVE-2013-6834.md): The ql\_eioctl function in sys/dev/qlxgbe/ql\_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, whic (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-11-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.