CVE-2013-1853
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local...
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
Exploit likelihood
What each source reports
NVD Score used
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
- Record
CVE-2013-1853- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
- Record
CVE-2013-1853- Updated
- 2026-11-02
EUVDEUVD-2013-1860 No score
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
- Record
EUVD-2013-1860- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8j4j-jgp5-w98g No score
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local...
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
- Record
GHSA-8j4j-jgp5-w98g- Updated
- 2026-11-02
OSV No score
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
- Record
CVE-2013-1853- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1853 No score
Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
- Record
DEBIAN-CVE-2013-1853- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10375-1 No score
almanah-0.11.1-1.15 on GA media
These are all security issues fixed in the almanah-0.11.1-1.15 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10375-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1853 is a low vulnerability (CVSS 2.1) in Almanah Project Almanah, published January 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in almanah 0.9.1-1.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=702905
bugzilla.redhat.com/show_bug.cgi?id=920848
lists.opensuse.org/opensuse-updates/2014-01/msg00080.html
openwall.com/lists/oss-security/2013/03/13/1
bugzilla.gnome.org/show_bug.cgi?id=695117
nvd.nist.gov/vuln/detail/CVE-2013-1853
github.com/advisories/GHSA-8j4j-jgp5-w98g
security-tracker.debian.org/tracker/CVE-2013-1853
suse.com/security/cve/CVE-2013-1853