Skip to content
OpenAdvisories

Archive

March 2013

Vulnerabilities first published in this month (UTC), newest first.

← February 2013 2013 / March April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

438 results · Feed

  • Unscored —
    CVE-2013-0252

    boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain …

  • Unscored —
    CVE-2012-6118

    The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updat…

  • Unscored —
    CVE-2012-6117

    Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions f…

  • Unscored —
    CVE-2012-6076

    Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to proce…

    inkscape Debian
  • Unscored —
    CVE-2012-5509

    aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, …

  • Unscored —
    CVE-2013-0275

    Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitr…

    ganglia-web ganglia Debian
  • Unscored —
    CVE-2013-1667

    The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memo…

    perl Debian
  • Unscored —
    CVE-2013-1423

    (1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-specific/group…

  • Unscored —
    CVE-2013-1468 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote at…

  • Unscored —
    CVE-2013-1794

    Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial…

    openafs Debian
  • Unscored —
    CVE-2013-1795

    Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a…

    openafs Debian
  • Unscored —
    CVE-2013-1049

    Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of serv…

    cfingerd Debian
  • Unscored —
    CVE-2012-4460

    The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4458

    The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory cons…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4459

    Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote at…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4462

    aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to …

  • Medium —
    CVE-2012-4446

    Improper Authentication in Apache Qpid

    The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact vi…

    qpid-cpp org.apache.qpid:qpid-client Ubuntu Maven
  • Unscored —
    CVE-2013-2293

    The CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies transactions from disk to memory…

  • Unscored —
    CVE-2013-2273

    bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1 through 0.6.5 before 0.…

  • Unscored —
    CVE-2013-2272

    The penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin-Qt before 0.4.9rc1, 0.…

  • Unscored —
    CVE-2013-2292

    bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption)…

  • Unscored —
    CVE-2012-4684

    The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the sam…

  • Unscored —
    CVE-2013-1081 Public exploit EPSS 68%

    Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote a…

  • Unscored —
    CVE-2012-1997

    Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive in…

  • Unscored —
    CVE-2012-1995

    Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows local users to obtain sensitive informa…

  • Unscored —
    CVE-2012-1998

    Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive in…

  • Unscored —
    CVE-2012-1999

    Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote authenticated users to obtain se…

  • Unscored —
    CVE-2012-1996

    Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to modify data via unk…

  • Unscored —
    CVE-2012-4703

    The Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1, and DeltaV VE3006 throu…

  • Unscored —
    CVE-2013-1627 Public exploit

    Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 an…

  • Unscored —
    CVE-2013-2503 Public exploit

    Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server …

    privoxy Debian
  • Unscored —
    CVE-2012-4702

    360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes …

  • Unscored —
    CVE-2013-0787

    Use-after-free vulnerability in the nsEditor::IsPreformatted function in editor/libeditor/base/nsEditor.cpp in Mozilla …

  • Unscored —
    CVE-2013-0912

    WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverag…

  • Unscored —
    CVE-2013-2557 EPSS 11%

    The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2013-2553

    Unspecified vulnerability in the kernel in Microsoft Windows 7 allows local users to gain privileges via unknown vector…

  • High 8.8
    CVE-2013-2551 Exploited · Ransomware Public exploit EPSS 74%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary c…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2013-2550

    Unspecified vulnerability in Adobe Reader 11.0.02 allows attackers to bypass the sandbox protection mechanism via unkno…

  • Unscored —
    CVE-2013-2554

    Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via …

  • Unscored —
    CVE-2013-2556

    Unspecified vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 through SP1…