Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
March

CVEs published in March 2013

433 vulnerabilities, 43 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft visio, visio viewer, office filter pack +2 moreMicrosoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted...CVE-2013-0079EPSS 26.7%9.3 HighMarch 13, 2013
microsoft silverlightMicrosoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate...CVE-2013-0074In KEVPublic exploitEPSS 78.9%7.8 HighMarch 13, 2013
apache cxfImproper Authentication in Apache CXFCVE-2013-0239Fix available5.0 MediumMarch 12, 2013
redhat enterprise virtualization managerThe MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does...CVE-2013-01684.0 MediumMarch 12, 2013
redhat enterprise virtualization managerThe domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ...CVE-2012-61152.1 LowMarch 12, 2013
redhat automatic bug reporting toolabrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows...CVE-2012-56606.9 MediumMarch 12, 2013
redhat automatic bug reporting toolUntrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in...CVE-2012-56593.7 LowMarch 12, 2013
apache cxfImproper Authentication in Apache CXFCVE-2012-5633Fix available5.8 MediumMarch 12, 2013
redhat jboss enterprise application platform, jboss enterprise web platform +1 moreThe default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss...CVE-2012-5629Fix available7.5 HighMarch 12, 2013
freeradiusmodules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user...CVE-2011-4966Fix available6.0 MediumMarch 12, 2013
david king vinoVino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when...CVE-2011-11655.1 MediumMarch 12, 2013
david king vinoVino before 2.99.4 can connect external networks contrary to the statement in the vino...CVE-2011-11644.6 MediumMarch 12, 2013
boostboost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not...CVE-2013-02525.0 MediumMarch 12, 2013
redhat aeolus conductorThe Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota...CVE-2012-61185.5 MediumMarch 12, 2013
redhat cloudforms cloud engineAeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world...CVE-2012-61172.1 LowMarch 12, 2013
inkscapeInkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might...CVE-2012-6076Fix available4.4 MediumMarch 12, 2013
redhat cloudforms cloud engineaeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud...CVE-2012-55092.1 LowMarch 12, 2013
piwigoCross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before...CVE-2013-1468Public exploit7.6 HighMarch 12, 2013
ganglia ganglia-webMultiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote...CVE-2013-0275Fix available4.3 MediumMarch 12, 2013
condor project condor, redhat enterprise mrg +1 moreaviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job,...CVE-2012-4462Fix available4.3 MediumMarch 12, 2013
apache qpidThe serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20...CVE-2012-44605.0 MediumMarch 12, 2013
apache qpidInteger overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and...CVE-2012-44595.0 MediumMarch 12, 2013
apache qpidThe AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial...CVE-2012-44585.0 MediumMarch 12, 2013
apache qpidImproper Authentication in Apache QpidCVE-2012-4446Fix available6.8 MediumMarch 12, 2013
bitcoin bitcoin-qt, bitcoind, core +2 moreThe CTransaction::FetchInputs method in bitcoind and Bitcoin-Qt before 0.8.0rc1 copies...CVE-2013-22935.0 MediumMarch 12, 2013
bitcoin bitcoin-qt, bitcoind, core +2 morebitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service ...CVE-2013-22927.8 HighMarch 12, 2013
bitcoin bitcoin-qt, bitcoind, core +2 morebitcoind and Bitcoin-Qt before 0.4.9rc1, 0.5.x before 0.5.8rc1, 0.6.0 before 0.6.0.11rc1, 0.6.1...CVE-2013-22735.0 MediumMarch 12, 2013
bitcoin bitcoin-qt, bitcoind, core +2 moreThe penny-flooding protection mechanism in the CTxMemPool::accept method in bitcoind and Bitcoin...CVE-2013-22725.0 MediumMarch 12, 2013
bitcoin bitcoin-qt, bitcoind, core +1 more +3 moreThe alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character...CVE-2012-46847.8 HighMarch 12, 2013
puppet, puppet enterprise, canonical ubuntu linux +2 moreThe default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x...CVE-2013-2275Fix available4.0 MediumMarch 12, 2013
puppet, puppet enterprise +1 morePuppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated...CVE-2013-2274Fix available6.5 MediumMarch 12, 2013
puppet, puppet enterprise +1 morePuppet Improper Input Validation vulnerabilityCVE-2013-1655Fix available7.5 HighMarch 12, 2013
puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does...CVE-2013-1654Fix available5.0 MediumMarch 12, 2013
puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1...CVE-2013-1653Fix available7.1 HighMarch 12, 2013
puppet, puppet enterprise, canonical ubuntu linux +2 morePuppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1...CVE-2013-1652Fix available4.9 MediumMarch 12, 2013
puppet, puppet enterprise, canonical ubuntu linux +2 moreThe (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18,...CVE-2013-1640Fix available9.0 HighMarch 12, 2013
novell zenworks mobile managementDirectory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and...CVE-2013-1081Public exploitEPSS 68.1%7.5 HighMarch 11, 2013
emerson deltav se3006 sd plus controller, deltav ve3005 controller md, deltav ve3006 controller md plus +2 moreThe Emerson DeltaV SE3006 through 11.3.1, DeltaV VE3005 through 10.3.1 and 11.x through 11.3.1,...CVE-2012-47036.1 MediumMarch 11, 2013
hp systems insight managerUnspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote...CVE-2012-19998.5 HighMarch 11, 2013
hp systems insight managerUnspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers...CVE-2012-19986.8 MediumMarch 11, 2013
hp systems insight managerUnspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers...CVE-2012-19977.5 HighMarch 11, 2013
hp systems insight managerUnspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers...CVE-2012-19964.3 MediumMarch 11, 2013
hp systems insight managerUnspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows local users to...CVE-2012-19953.2 LowMarch 11, 2013
privoxyPrivoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers...CVE-2013-2503Public exploitFix available5.8 MediumMarch 11, 2013
advantech studio, indusoft web studio +1 moreAbsolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and...CVE-2013-1627Public exploit7.8 HighMarch 11, 2013
360systems image server 2000, image server maxx, maxx +2 more360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root...CVE-2012-470210.0 HighMarch 11, 2013
microsoft internet explorerThe sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to...CVE-2013-2557EPSS 10.9%7.5 HighMarch 11, 2013
microsoft windows 7, windows server 2008, windows vista +2 moreUnspecified vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and...CVE-2013-25567.5 HighMarch 11, 2013
adobe air, flash player, opensuse +6 more +8 moreInteger overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows...CVE-2013-255510.0 HighMarch 11, 2013
microsoft windows 7Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP...CVE-2013-25547.5 HighMarch 11, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open