Archive
4 April 2013
Vulnerabilities first published on this day (UTC), newest first.
14 results · Feed
-
Unscored —
The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file …
-
Unscored —CVE-2013-0125 Public exploit
Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary …
-
Unscored —
TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information…
-
Unscored —
PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before…
-
Unscored —
PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, ge…
-
Unscored —
PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 g…
-
Unscored —
PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remot…
-
Unscored —
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows r…
-
Unscored —
Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests t…
-
Unscored —
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TS…
-
Unscored —CVE-2013-0663 Public exploit
Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM1…
-
Unscored —
The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of…
-
Unscored —
The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, w…
-
Unscored —
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via …