Skip to content
OpenAdvisories

Archive

4 April 2013

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file …

  • Unscored —
    CVE-2013-0125 Public exploit

    Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary …

  • Unscored —

    TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information…

  • Unscored —

    PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before…

  • Unscored —

    PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, ge…

  • Unscored —

    PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 g…

  • Unscored —

    PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remot…

  • Unscored —
    CVE-2013-1899 Public exploit EPSS 54%

    Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows r…

  • Unscored —

    Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests t…

  • Unscored —

    The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TS…

  • Unscored —
    CVE-2013-0663 Public exploit

    Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM1…

  • Unscored —

    The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of…

  • Unscored —

    The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, w…

  • Unscored —

    The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via …