# CVEs published 2013-12-10

13 CVEs were published on December 10, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3047](https://cve.now/CVE-2012-3047.md): Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote att (no CVSS)
- [CVE-2013-5404](https://cve.now/CVE-2013-5404.md): Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before (no CVSS)
- [CVE-2013-7043](https://cve.now/CVE-2013-7043.md): Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 all (no CVSS)
- [CVE-2013-3622](https://cve.now/CVE-2013-3622.md): Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT\_X9\_315) on Supermicro X (no CVSS)
- [CVE-2013-3623](https://cve.now/CVE-2013-3623.md): Multiple stack-based buffer overflows in cgi/close\_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) w (no CVSS)
- [CVE-2013-6224](https://cve.now/CVE-2013-6224.md): Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2013-3710](https://cve.now/CVE-2013-3710.md): SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attacke (no CVSS)
- [CVE-2013-6237](https://cve.now/CVE-2013-6237.md): The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive inform (no CVSS)
- [CVE-2013-6840](https://cve.now/CVE-2013-6840.md): Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspe (no CVSS)
- [CVE-2013-7042](https://cve.now/CVE-2013-7042.md): SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain p (no CVSS)
- [CVE-2013-4408](https://cve.now/CVE-2013-4408.md): Heap-based buffer overflow in the dcerpc\_read\_ncacn\_packet\_done function in librpc/rpc/dcerpc\_util.c in winbindd in Samba 3.x before 3.6.22, (no CVSS)
- [CVE-2013-5447](https://cve.now/CVE-2013-5447.md): Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2013-6708](https://cve.now/CVE-2013-6708.md): Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui6088 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.