Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
March

CVEs published in March 2013

433 vulnerabilities, 43 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

tibco spotfire statistics servicesThe Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4...CVE-2013-23715.0 MediumMarch 15, 2013
foscam fi8919wDirectory traversal vulnerability in the web interface on Foscam devices with firmware before 11...CVE-2013-2560Public exploit7.8 HighMarch 15, 2013
apple mac os xIOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary...CVE-2013-09766.8 MediumMarch 15, 2013
apple mac os x, mac os x server +1 moreSoftware Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the...CVE-2013-09736.8 MediumMarch 15, 2013
apple mac os x, mac os x server +1 moreUse-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to...CVE-2013-09716.8 MediumMarch 15, 2013
apple mac os xMessages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call...CVE-2013-09704.3 MediumMarch 15, 2013
apple mac os xLogin Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the...CVE-2013-09694.9 MediumMarch 15, 2013
apple mac os x, mac os x server +1 moreCoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types,...CVE-2013-09674.3 MediumMarch 15, 2013
apple mac os x, mac os x server +1 moreThe Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does...CVE-2013-09666.4 MediumMarch 15, 2013
apple safariWebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a...CVE-2013-09616.8 MediumMarch 15, 2013
apple safariWebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a...CVE-2013-09606.8 MediumMarch 15, 2013
apache commons fileuploadIncorrect Default Permissions in Apache Commons FileUploadCVE-2013-0248Fix available3.3 LowMarch 15, 2013
firebirdsql firebirdStack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3...CVE-2013-2492Public exploitFix availableEPSS 42.2%6.8 MediumMarch 15, 2013
typo3TYPO3 Open redirect vulnerability in the Access tracking mechanismCVE-2013-1843Fix available6.4 MediumMarch 15, 2013
typo3TYPO3 SQL injection vulnerability in the Extbase FrameworkCVE-2013-1842Fix available7.5 HighMarch 15, 2013
redhat libvirtlibvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users...CVE-2013-1766Fix available3.6 LowMarch 15, 2013
lighttpdThe configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux...CVE-2013-1427Fix available1.9 LowMarch 15, 2013
canonical ubuntu linux, fujitsu m10-1 firmware, m10-4 firmware +13 more +15 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases,...CVE-2013-2566EPSS 84.4%5.9 MediumMarch 14, 2013
linux kernel, redhat enterprise mrg +1 moreThe crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user...CVE-2013-2548Fix available2.1 LowMarch 14, 2013
linux kernel, redhat enterprise mrg +1 moreThe crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user...CVE-2013-2547Fix available2.1 LowMarch 14, 2013
linux kernel, redhat enterprise mrg +1 moreThe report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an...CVE-2013-2546Fix available2.1 LowMarch 14, 2013
linux kernelThe l2tp_ip6_getname function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.6 does not...CVE-2012-65431.9 LowMarch 14, 2013
apache raveApache Rave information disclosure vulnerabilityCVE-2013-1814Public exploitFix availableEPSS 73.6%4.0 MediumMarch 14, 2013
zoneminderMultiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote...CVE-2013-0332Public exploitFix availableEPSS 10.2%5.0 MediumMarch 14, 2013
zoneminderincludes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote...CVE-2013-0232Public exploitFix availableEPSS 47.9%7.5 HighMarch 14, 2013
piwigoDirectory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers...CVE-2013-1469Public exploitEPSS 56.0%4.0 MediumMarch 13, 2013
fedoraproject 389 directory server389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash)...CVE-2013-0312Fix available5.0 MediumMarch 13, 2013
adobe air, air sdk, flash player +2 more +4 moreHeap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180...CVE-2013-137510.0 HighMarch 13, 2013
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X,...CVE-2013-137110.0 HighMarch 13, 2013
adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602...CVE-2013-065010.0 HighMarch 13, 2013
adobe air, air sdk, flash player +2 more +4 moreInteger overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows...CVE-2013-064610.0 HighMarch 13, 2013
microsoft windows 8Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of...CVE-2013-2558EPSS 14.4%10.0 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute...CVE-2013-1288EPSS 18.5%9.3 HighMarch 13, 2013
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreThe USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...CVE-2013-12877.2 HighMarch 13, 2013
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreThe USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...CVE-2013-12867.2 HighMarch 13, 2013
microsoft windows 7, windows 8, windows server 2003 +4 more +6 moreThe USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows...CVE-2013-12857.2 HighMarch 13, 2013
microsoft officeOutlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2...CVE-2013-0095EPSS 20.8%5.0 MediumMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0094EPSS 18.5%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0093EPSS 18.5%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0092EPSS 28.2%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute...CVE-2013-0091EPSS 19.8%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0090Public exploitEPSS 38.2%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0089EPSS 18.5%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0088EPSS 19.8%9.3 HighMarch 13, 2013
microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers...CVE-2013-0087EPSS 18.5%9.3 HighMarch 13, 2013
microsoft sharepoint foundation, sharepoint server +1 moreMicrosoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation,...CVE-2013-0086EPSS 24.0%5.0 MediumMarch 13, 2013
microsoft sharepoint foundation, sharepoint server +1 moreBuffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows...CVE-2013-0085EPSS 34.0%7.8 HighMarch 13, 2013
microsoft sharepoint foundation, sharepoint server +1 moreDirectory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint...CVE-2013-0084EPSS 21.3%7.5 HighMarch 13, 2013
microsoft sharepoint server, sharepoint foundation +1 moreCross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote...CVE-2013-0083EPSS 14.3%4.3 MediumMarch 13, 2013
microsoft sharepoint foundation, sharepoint server +1 moreMicrosoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to...CVE-2013-0080EPSS 19.3%7.5 HighMarch 13, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open