# CVEs published 2013-12-20

7 CVEs were published on December 20, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7186](https://cve.now/CVE-2013-7186.md): Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long string in a .m3u fil (no CVSS)
- [CVE-2013-7187](https://cve.now/CVE-2013-7187.md): SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2013-7188](https://cve.now/CVE-2013-7188.md): Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2013-7189](https://cve.now/CVE-2013-7189.md): Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2013-7190](https://cve.now/CVE-2013-7190.md): Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1 (no CVSS)
- [CVE-2013-6767](https://cve.now/CVE-2013-6767.md): Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2013-4576](https://cve.now/CVE-2013-4576.md): GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-12-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.