# CVEs published 2013-11-29

8 CVEs were published on November 29, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-5448](https://cve.now/CVE-2013-5448.md): Cross-site scripting (XSS) vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patc (no CVSS)
- [CVE-2013-5463](https://cve.now/CVE-2013-5463.md): The WinCollect agent in IBM Security QRadar SIEM before 7.1.1.569824 allows remote attackers to bypass intended access restrictions by injec (no CVSS)
- [CVE-2013-6307](https://cve.now/CVE-2013-6307.md): Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or (no CVSS)
- [CVE-2013-6791](https://cve.now/CVE-2013-6791.md): Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier fo (no CVSS)
- [CVE-2013-4844](https://cve.now/CVE-2013-4844.md): Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execut (no CVSS)
- [CVE-2013-6700](https://cve.now/CVE-2013-6700.md): The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process reload) via a request for an unspecified MIB, (no CVSS)
- [CVE-2013-6706](https://cve.now/CVE-2013-6706.md): The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via craf (no CVSS)
- [CVE-2013-6885](https://cve.now/CVE-2013-6885.md): The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-11-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.