# CVEs published 2013-12-04 9 CVEs were published on December 4, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-6945](https://cve.now/CVE-2013-6945.md): The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to per (no CVSS) - [CVE-2013-2825](https://cve.now/CVE-2013-2825.md): The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attacke (no CVSS) - [CVE-2013-3519](https://cve.now/CVE-2013-3519.md): lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through (no CVSS) - [CVE-2013-6702](https://cve.now/CVE-2013-6702.md): The management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier allows remote attackers to cause a denial of (no CVSS) - [CVE-2013-6935](https://cve.now/CVE-2013-6935.md): Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the S (no CVSS) - [CVE-2013-6936](https://cve.now/CVE-2013-6936.md): Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote (no CVSS) - [CVE-2013-6937](https://cve.now/CVE-2013-6937.md): Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the n (no CVSS) - [CVE-2013-5449](https://cve.now/CVE-2013-5449.md): Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter componen (no CVSS) - [CVE-2013-6029](https://cve.now/CVE-2013-6029.md): Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrar (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-12-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.