# CVEs published 2013-11-22

14 CVEs were published on November 22, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3288](https://cve.now/CVE-2013-3288.md): Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 (no CVSS)
- [CVE-2013-5997](https://cve.now/CVE-2013-5997.md): Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticat (no CVSS)
- [CVE-2013-5998](https://cve.now/CVE-2013-5998.md): Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote att (no CVSS)
- [CVE-2013-5999](https://cve.now/CVE-2013-5999.md): Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle a (no CVSS)
- [CVE-2013-6312](https://cve.now/CVE-2013-6312.md): Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before (no CVSS)
- [CVE-2013-6694](https://cve.now/CVE-2013-6694.md): The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service (MTU change and tunnel-session drop) via crafted (no CVSS)
- [CVE-2013-6698](https://cve.now/CVE-2013-6698.md): The web interface on Cisco Wireless LAN Controller (WLC) devices does not properly restrict use of IFRAME elements, which makes it easier fo (no CVSS)
- [CVE-2013-6699](https://cve.now/CVE-2013-6699.md): The Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation on Cisco Wireless LAN Controller (WLC) devices allow (no CVSS)
- [CVE-2013-6342](https://cve.now/CVE-2013-6342.md): Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2013-2811](https://cve.now/CVE-2013-2811.md): The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDr (no CVSS)
- [CVE-2013-2823](https://cve.now/CVE-2013-2823.md): The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDr (no CVSS)
- [CVE-2013-6692](https://cve.now/CVE-2013-6692.md): Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated us (no CVSS)
- [CVE-2013-6693](https://cve.now/CVE-2013-6693.md): The MLDP implementation in Cisco IOS 15.3(3)S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a (no CVSS)
- [CVE-2013-6852](https://cve.now/CVE-2013-6852.md): Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.