# CVEs published 2013-12-29

6 CVEs were published on December 29, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2504](https://cve.now/CVE-2013-2504.md): Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allow (no CVSS)
- [CVE-2013-3846](https://cve.now/CVE-2013-3846.md): Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2013-5583](https://cve.now/CVE-2013-5583.md): Cross-site scripting (XSS) vulnerability in libraries/idna\_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary (no CVSS, joomla/joomla-cms)
- [CVE-2013-6189](https://cve.now/CVE-2013-6189.md): Unspecified vulnerability in the Archive Query Server in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4 (no CVSS)
- [CVE-2013-6197](https://cve.now/CVE-2013-6197.md): Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated user (no CVSS)
- [CVE-2013-6198](https://cve.now/CVE-2013-6198.md): Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-12-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.