Archive

27 March 2013

Vulnerabilities first published on this day (UTC), newest first.

← February 2013 2013 / March /27 April 2013 →

All Critical High Medium Low Exploited only Public exploit

37 results · Feed

Unscored —

CVE-2013-1887

Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote …

Mar 27, 2013
Unscored —

CVE-2013-0320

Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module 6.x-2.x before 6.x-2.…

Mar 27, 2013
Unscored —

CVE-2013-0257

The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote a…

Mar 27, 2013
Unscored —

CVE-2013-0322

Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remot…

Mar 27, 2013
Unscored —

CVE-2013-0182

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote…

Mar 27, 2013
Unscored —

CVE-2013-0316

The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space con…

Mar 27, 2013
Unscored —

CVE-2013-0321

Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal…

Mar 27, 2013
Unscored —

CVE-2013-0259

Cross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal allows remote authentica…

Mar 27, 2013
Unscored —

CVE-2013-0317

Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og_manager_change) module 7.x-2.x be…

Mar 27, 2013
Unscored —

CVE-2013-0181

Cross-site scripting (XSS) vulnerability in Views in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drup…

Mar 27, 2013
Unscored —

CVE-2013-0324

Cross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.…

Mar 27, 2013
Unscored —

CVE-2013-0319

Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5…

Mar 27, 2013
Unscored —

CVE-2013-0323

Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 …

Mar 27, 2013
Unscored —

CVE-2013-0258

The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is ena…

Mar 27, 2013
Unscored —

CVE-2013-0318

The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers t…

Web / CMS

Mar 27, 2013
Unscored —

CVE-2013-0260

Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credent…

Web / CMS

Mar 27, 2013
Unscored —

CVE-2013-0325

Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x…

Mar 27, 2013
Unscored —

CVE-2013-1782

Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote a…

Mar 27, 2013
Unscored —

CVE-2013-1786

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows r…

Mar 27, 2013
Unscored —

CVE-2013-1783

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x…

Mar 27, 2013
Unscored —

CVE-2013-1779

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows rem…

Mar 27, 2013
Unscored —

CVE-2013-1859

The Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the configuration options, wh…

Mar 27, 2013
Unscored —

CVE-2013-1781

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal all…

Mar 27, 2013
Unscored —

CVE-2013-1778

Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenti…

Mar 27, 2013
Unscored —

CVE-2013-1784

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal allows rem…

Mar 27, 2013
Unscored —

CVE-2013-1780

Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote a…

Mar 27, 2013
Unscored —

CVE-2013-1785

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drup…

Mar 27, 2013
Unscored —

CVE-2013-1787

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal…

Mar 27, 2013
Unscored —

CVE-2013-2715

Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4…

Mar 27, 2013
Unscored —

CVE-2013-0720

The COBIME application before 0.9.4 for Android uses weak permissions for unspecified files, which allows attackers to …

Mar 27, 2013
Unscored —

CVE-2013-0718

The Simeji application 4.8.1 and earlier for Android uses weak permissions for unspecified files, which allows attacker…

Mar 27, 2013
Unscored —

CVE-2013-0719

The ArtIME Japanese Input application 1.1.2 and earlier for Android uses weak permissions for unspecified files, which …

Mar 27, 2013
Unscored —

CVE-2013-2300

The FlickWnn (aka OpenWnn/Flick support) application 2.02 and earlier for Android uses weak permissions for unspecified…

Mar 27, 2013
Unscored —

CVE-2013-0486

Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consump…

Mar 27, 2013
Unscored —

CVE-2013-0489

Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x …

Mar 27, 2013
Unscored —

CVE-2013-0488

Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows …

Mar 27, 2013
Unscored —

CVE-2013-0487

The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging kn…

Mar 27, 2013