CVEs published in April 2013
420 vulnerabilities, 66 critical, 2 exploited.
- freedesktop popplersplash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of...4.3 Medium
- freedesktop popplerpoppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and...6.8 Medium
- nori gem project gemnori contains Improper Input Validation7.5 High
- newrelic ruby agentnewrelic_rpm Gem Discloses Sensitive Information5.0 Medium
- apache mavenThe default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL...5.8 Medium
- omniauth-oauth2 project omniauth-oauth2omniauth-oauth2 Cross-Site Request Forgery vulnerability6.8 Medium
- fedorahosted cronieFile descriptor leak in cronie 1.4.8, when running in certain environments, might allow local...4.3 Medium
- gluster glusterfs, redhat storage management console, storage native client +1 more +3 moreThe GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server...2.1 Low
- chatelao php address bookCross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP...7.5 High
- chatelao php address bookMultiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to...7.5 High
- airdroidCross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers...4.3 Medium
- linux kernelHeap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in...4.4 Medium
- trustwave modsecurity, debian linux, fedoraproject fedora +1 more +3 moreModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to...7.5 High
- nvidia gpu driverBuffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313...7.1 High
- nvidia driverdaemonu.exe (aka the NVIDIA Update Service Daemon), as distributed with the NVIDIA driver before...6.8 Medium
- nvidia drivernvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA...6.8 Medium
- nvidia display driverThe NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver...7.2 High
- novell kanakaThe installation functionality in the Novell Kanaka component before 2.8 for Novell Open...5.8 Medium
- ibm scale out network attached storageIBM Scale Out Network Attached Storage (SONAS) 1.3 before 1.3.2.3 requires cleartext storage of...3.5 Low
- linux kernelThe clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a...7.2 High
- cogentdatahub cascade datahub, cogent datahub, datahub quicktrend +1 more +3 moreThe DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7...7.1 High
- cogentdatahub cascade datahub, cogent datahub, datahub quicktrend +1 more +3 moreCogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub...7.5 High
- cogentdatahub cascade datahub, cogent datahub, datahub quicktrend +1 more +3 moreCogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub...5.0 Medium
- cogentdatahub cascade datahub, cogent datahub, datahub quicktrend +1 more +3 moreStack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7...7.5 High
- cisco hosted collaboration solutionCisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration Mediation (HCM) in Cisco...5.0 Medium
- ibm ims enterprise suiteThe login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext...5.0 Medium
- ibm netezza performance portalHTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list...4.0 Medium
- transware active\! mailTransWARE Active! mail 6, when an external public interface is used, allows local users to obtain...1.9 Low
- tigertextThe Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for...5.0 Medium
- c2enterprise c2 webresourceCross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote...4.3 Medium
- postgresqlPostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8...10.0 High
- postgresqlPostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and...10.0 High
- invensys wonderware win-xml exporterInvensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files...9.3 High
- schneider-electric modicon m340 bmx noc 0401 firmware, modicon m340 bmx noe 0100 firmware, modicon m340 bmx noe 0100h firmware +9 more +11 more** DISPUTED ** The Schneider Electric M340 PLC modules allow remote attackers to cause a denial...5.0 Medium
- schneider-electric magelis xbt hmiThe Schneider Electric Magelis XBT HMI controller has a default password for authentication of...10.0 High
- schneider-electric modicon m340The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated...4.0 Medium
- schneider-electric modicon m340, modicon premium, modicon quantum plc +2 moreThe FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340...8.5 High
- schneider-electric modicon m340, modicon premium, modicon quantum plc +2 moreCross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111,...6.8 Medium
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION...4.0 Medium
- postgresql, canonical ubuntu linux +1 morePostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17,...8.5 High
- postgresql, canonical ubuntu linux +1 moreArgument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x...6.5 Medium
- mozilla firefox, seamonkey, thunderbird +7 more +9 moreInteger signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as...6.8 Medium
- mozilla firefox, thunderbird, thunderbird esr +2 moreBuffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17...7.2 High
- mozilla firefoxMozilla Firefox before 20.0 on Android uses world-writable and world-readable permissions for the...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreUntrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0,...6.9 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird...10.0 High
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreThe System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x...10.0 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal...5.8 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5,...4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_management.enablev4 is used...4.3 Medium
- Show moreLoading…