# CVEs published 2013-12-31

12 CVEs were published on December 31, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0261](https://cve.now/CVE-2012-0261.md): license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary command (no CVSS)
- [CVE-2012-0262](https://cve.now/CVE-2012-0262.md): op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2012-0263](https://cve.now/CVE-2012-0263.md): monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as da (no CVSS)
- [CVE-2012-0264](https://cve.now/CVE-2012-0264.md): op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impa (no CVSS)
- [CVE-2013-3572](https://cve.now/CVE-2013-3572.md): Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier al (no CVSS)
- [CVE-2013-3667](https://cve.now/CVE-2013-3667.md): The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does no (no CVSS)
- [CVE-2013-5573](https://cve.now/CVE-2013-5573.md): Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web sc (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2013-6459](https://cve.now/CVE-2013-6459.md): Cross-site scripting (XSS) vulnerability in the will\_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web scri (no CVSS, will\_paginate)
- [CVE-2013-6987](https://cve.now/CVE-2013-6987.md): Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before 4.3-3810 Update 3 al (no CVSS)
- [CVE-2013-6983](https://cve.now/CVE-2013-6983.md): SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL (no CVSS)
- [CVE-2013-7241](https://cve.now/CVE-2013-7241.md): Cross-site scripting (XSS) vulnerability in the export function in zp-core/zp-extensions/mergedRSS.php in Zenphoto before 1.4.5.4 allows rem (no CVSS)
- [CVE-2013-7242](https://cve.now/CVE-2013-7242.md): SQL injection vulnerability in zp-core/zp-extensions/wordpress\_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrat (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-12-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.