Skip to content
OpenAdvisories

Archive

12 March 2013

Vulnerabilities first published on this day (UTC), newest first.

← February 2013 2013 / March /12 April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

32 results · Feed

  • Unscored —
    CVE-2011-1164

    Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which mi…

    vino Debian
  • Unscored —
    CVE-2011-1165

    Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network t…

    vino Debian
  • Unscored —
    CVE-2011-4966

    modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not pro…

    freeradius freeradius Debian Azure Linux
  • Medium —
    CVE-2013-0239

    Improper Authentication in Apache CXF

    Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element tha…

    org.apache.cxf:cxf-rt-frontend-jaxrs Maven
  • Unscored —
    CVE-2013-0168

    The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check perm…

  • Unscored —
    CVE-2012-6115

    The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier…

  • Unscored —
    CVE-2012-5629

    The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application…

  • Unscored —
    CVE-2012-5659

    Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting…

  • Unscored —
    CVE-2012-5660

    abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-…

  • Medium —
    CVE-2012-5633

    Improper Authentication in Apache CXF

    The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

    org.apache.cxf:cxf Maven
  • Unscored —
    CVE-2013-0252

    boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain …

  • Unscored —
    CVE-2012-6118

    The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updat…

  • Unscored —
    CVE-2012-6117

    Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions f…

  • Unscored —
    CVE-2012-6076

    Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to proce…

    inkscape Debian
  • Unscored —
    CVE-2012-5509

    aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, …

  • Unscored —
    CVE-2013-0275

    Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitr…

    ganglia-web ganglia Debian
  • Unscored —
    CVE-2013-1667

    The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memo…

    perl Debian
  • Unscored —
    CVE-2013-1423

    (1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-specific/group…

  • Unscored —
    CVE-2013-1468 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote at…

  • Unscored —
    CVE-2013-1794

    Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial…

    openafs Debian
  • Unscored —
    CVE-2013-1795

    Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a…

    openafs Debian
  • Unscored —
    CVE-2013-1049

    Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of serv…

    cfingerd Debian
  • Unscored —
    CVE-2012-4460

    The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4458

    The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory cons…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4459

    Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote at…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4462

    aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to …

  • Medium —
    CVE-2012-4446

    Improper Authentication in Apache Qpid

    The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact vi…

    qpid-cpp org.apache.qpid:qpid-client Ubuntu Maven
  • Unscored —
    CVE-2013-2293

    The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory…

  • Unscored —
    CVE-2013-2273

    bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.…

  • Unscored —
    CVE-2013-2272

    The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.…

  • Unscored —
    CVE-2013-2292

    bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption)…

  • Unscored —
    CVE-2012-4684

    The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the sam…