Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
March

CVEs published in March 2013

433 vulnerabilities, 43 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

google chromeThe Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use...CVE-2013-09216.8 MediumMarch 28, 2013
google chromeUse-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43...CVE-2013-09207.5 HighMarch 28, 2013
google chromeUse-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote...CVE-2013-09197.5 HighMarch 28, 2013
google chromeGoogle Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a...CVE-2013-09186.8 MediumMarch 28, 2013
google chromeThe URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of...CVE-2013-09175.0 MediumMarch 28, 2013
google chromeUse-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43...CVE-2013-09167.5 HighMarch 28, 2013
views project viewsMultiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6...CVE-2013-18872.1 LowMarch 27, 2013
thomas seidl search apiCross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module...CVE-2013-27152.1 LowMarch 27, 2013
chris desautels node parameter controlThe Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the...CVE-2013-18596.4 MediumMarch 27, 2013
devsaran corporateCross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme...CVE-2013-17872.1 LowMarch 27, 2013
devsaran companyCross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1...CVE-2013-17862.1 LowMarch 27, 2013
devsaran responsiveCross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme...CVE-2013-17852.1 LowMarch 27, 2013
devsaran clean themeCross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3...CVE-2013-17842.1 LowMarch 27, 2013
devsaran businessCross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the...CVE-2013-17832.1 LowMarch 27, 2013
devsaran responsive blogCross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for...CVE-2013-17822.1 LowMarch 27, 2013
devsaran professional themeCross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before...CVE-2013-17812.1 LowMarch 27, 2013
devsaran best responsiveCross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for...CVE-2013-17802.1 LowMarch 27, 2013
devsaran freshCross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4...CVE-2013-17792.1 LowMarch 27, 2013
devsaran creativeCross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal...CVE-2013-17782.1 LowMarch 27, 2013
varnish http accelerator integration project varnishMultiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2...CVE-2013-03254.3 MediumMarch 27, 2013
tomasbarej menu referenceCross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference...CVE-2013-03242.1 LowMarch 27, 2013
display suite project dsCross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7...CVE-2013-03234.3 MediumMarch 27, 2013
ubercartCross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4...CVE-2013-03224.3 MediumMarch 27, 2013
ubercart views project uc viewsCross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x...CVE-2013-03214.3 MediumMarch 27, 2013
mattias hutterer taxonomy managerCross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module...CVE-2013-03205.1 MediumMarch 27, 2013
yandex.metrics project yandex metricsCross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and...CVE-2013-03194.3 MediumMarch 27, 2013
banckle chat project chatThe admin page in the Banckle Chat module for Drupal does not properly restrict access, which...CVE-2013-031810.0 HighMarch 27, 2013
joe haskins og manager changeCross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups ...CVE-2013-03174.3 MediumMarch 27, 2013
drupalThe Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service ...CVE-2013-03165.0 MediumMarch 27, 2013
elliot pahl drush debian packagingUnspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to...CVE-2013-02602.1 LowMarch 27, 2013
boxes project boxesCross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal...CVE-2013-02592.1 LowMarch 27, 2013
google authenticator login project ga loginThe Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor...CVE-2013-02586.8 MediumMarch 27, 2013
david alkire email2imageThe email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes,...CVE-2013-02575.0 MediumMarch 27, 2013
bart feenstra paymentThe Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to...CVE-2013-01825.0 MediumMarch 27, 2013
thomas seidl search apiCross-site scripting (XSS) vulnerability in Views in the Search API (search_api) module 7.x-1.x...CVE-2013-01812.6 LowMarch 27, 2013
pm9 flickwnnThe FlickWnn (aka OpenWnn/Flick support) application 2.02 and earlier for Android uses weak...CVE-2013-23005.0 MediumMarch 27, 2013
cob\'s products cobimeThe COBIME application before 0.9.4 for Android uses weak permissions for unspecified files,...CVE-2013-07205.0 MediumMarch 27, 2013
codedesign artime japanese inputThe ArtIME Japanese Input application 1.1.2 and earlier for Android uses weak permissions for...CVE-2013-07195.0 MediumMarch 27, 2013
simejiThe Simeji application 4.8.1 and earlier for Android uses weak permissions for unspecified files,...CVE-2013-07185.0 MediumMarch 27, 2013
ibm lotus dominoCross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client...CVE-2013-04896.0 MediumMarch 27, 2013
ibm lotus dominoCross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in...CVE-2013-04884.3 MediumMarch 27, 2013
ibm lotus dominoThe Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary...CVE-2013-04878.5 HighMarch 27, 2013
ibm lotus dominoMemory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of...CVE-2013-04864.3 MediumMarch 27, 2013
ibm lotus inotesMultiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to...CVE-2013-05251.5 LowMarch 26, 2013
ibm storwize, samba, canonical ubuntu linux +2 moreThe SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1...CVE-2013-0454Fix available4.0 MediumMarch 26, 2013
ibm lotus inotesCross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user...CVE-2012-59434.3 MediumMarch 26, 2013
redhat freeipaThe ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the...CVE-2013-0336Fix available5.0 MediumMarch 26, 2013
symantec enterprise vault for file system archivingMultiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File...CVE-2013-16096.8 MediumMarch 26, 2013
symantec netbackup applianceDirectory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU)...CVE-2013-16086.7 MediumMarch 26, 2013
cisco ios xrThe traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to...CVE-2013-11625.0 MediumMarch 26, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open