# CVEs published 2013-03-06 9 CVEs were published on March 6, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-1819](https://cve.now/CVE-2013-1819.md): The \_xfs\_buf\_find function in fs/xfs/xfs\_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users… (no CVSS) - [CVE-2013-0200](https://cve.now/CVE-2013-0200.md): HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1)… (no CVSS) - [CVE-2012-5770](https://cve.now/CVE-2012-5770.md): The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm… (no CVSS) - [CVE-2012-5939](https://cve.now/CVE-2012-5939.md): Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application… (no CVSS) - [CVE-2012-5942](https://cve.now/CVE-2012-5942.md): Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery… (no CVSS) - [CVE-2013-1048](https://cve.now/CVE-2013-1048.md): The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13… (no CVSS) - [CVE-2013-1140](https://cve.now/CVE-2013-1140.md): The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an… (no CVSS) - [CVE-2013-1635](https://cve.now/CVE-2013-1635.md): ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl\_cache\_dir directive… (no CVSS) - [CVE-2013-1643](https://cve.now/CVE-2013-1643.md): The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2013-03-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.