# CVEs published 2013-12-17

20 CVEs were published on December 17, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-6882](https://cve.now/CVE-2013-6882.md): Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote (no CVSS)
- [CVE-2013-6883](https://cve.now/CVE-2013-6883.md): Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers t (no CVSS)
- [CVE-2013-7129](https://cve.now/CVE-2013-7129.md): Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2013-2813](https://cve.now/CVE-2013-2813.md): The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service (reboot or link (no CVSS)
- [CVE-2013-2814](https://cve.now/CVE-2013-2814.md): Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled exception and process c (no CVSS)
- [CVE-2013-2816](https://cve.now/CVE-2013-2816.md): The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service ( (no CVSS)
- [CVE-2013-6038](https://cve.now/CVE-2013-6038.md): Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file. (no CVSS)
- [CVE-2013-6193](https://cve.now/CVE-2013-6193.md): Unspecified vulnerability on HP LaserJet M1522n and M2727; LaserJet Pro 100, 300, 400, CM1415fnw, CP1\*, M121\*, M1536dnf, and P1\*; Color Lase (no CVSS)
- [CVE-2013-6327](https://cve.now/CVE-2013-6327.md): Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4. (no CVSS)
- [CVE-2013-6329](https://cve.now/CVE-2013-6329.md): IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a (no CVSS)
- [CVE-2013-6721](https://cve.now/CVE-2013-6721.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.x through 8.0.0. (no CVSS)
- [CVE-2013-6733](https://cve.now/CVE-2013-6733.md): Cross-site scripting (XSS) vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows (no CVSS)
- [CVE-2013-7127](https://cve.now/CVE-2013-7127.md): Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain sensi (no CVSS)
- [CVE-2013-7128](https://cve.now/CVE-2013-7128.md): Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cf (no CVSS)
- [CVE-2013-6191](https://cve.now/CVE-2013-6191.md): Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2013-6192](https://cve.now/CVE-2013-6192.md): Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication (no CVSS)
- [CVE-2013-6420](https://cve.now/CVE-2013-6420.md): The asn1\_time\_to\_time\_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properl (no CVSS)
- [CVE-2013-6925](https://cve.now/CVE-2013-6925.md): The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id (no CVSS)
- [CVE-2013-6926](https://cve.now/CVE-2013-6926.md): The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote authenticated users to bypass intended restrictions on admi (no CVSS)
- [CVE-2013-6966](https://cve.now/CVE-2013-6966.md): Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phis (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.