cve.nowby Sazabi

CVEs published March 12, 2013

32 CVEs were published on March 12, 2013: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 32
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 32
Now in CISA KEV: 0
Fix available: 3

Most affected products

org.apache.cxf:cxf: 1
org.apache.cxf:cxf-rt-frontend-jaxrs: 1
org.apache.qpid:qpid-client: 1

Medium, low and unrated 32

CVE-2011-1164Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier…UnratedMar 12, 2013
CVE-2011-1165Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically…UnratedMar 12, 2013
CVE-2011-4966modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the…UnratedMar 12, 2013
CVE-2012-5629The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP)…UnratedMar 12, 2013
CVE-2012-5633The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor…org.apache.cxf:cxfUnratedFix availableMar 12, 2013
CVE-2012-5659Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9…UnratedMar 12, 2013
CVE-2012-5660abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable…UnratedMar 12, 2013
CVE-2012-6115The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate…UnratedMar 12, 2013
CVE-2013-0168The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage…UnratedMar 12, 2013
CVE-2013-0239Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows…org.apache.cxf:cxf-rt-frontend-jaxrsUnratedFix availableMar 12, 2013
CVE-2012-5509aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable…UnratedMar 12, 2013
CVE-2012-6076Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended…UnratedMar 12, 2013
CVE-2012-6117Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for…UnratedMar 12, 2013
CVE-2012-6118The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum…UnratedMar 12, 2013
CVE-2013-0252boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8…UnratedMar 12, 2013
CVE-2013-0275Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or…UnratedMar 12, 2013
CVE-2013-1049Buffer overflow in the RFC1413 (ident) client in cfingerd 1.4.3-3 allows remote IDENT servers to cause a denial of service (crash) and…UnratedMar 12, 2013
CVE-2013-1423(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs.php, (3) deb-specific/fileforge.pl, (4) deb-specific/group_dump_update.pl…UnratedMar 12, 2013
CVE-2013-1468Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack…UnratedMar 12, 2013
CVE-2013-1667The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and…UnratedMar 12, 2013
CVE-2013-1794Buffer overflow in certain client utilities in OpenAFS before 1.6.2 allows remote authenticated users to cause a denial of service (crash)…UnratedMar 12, 2013
CVE-2013-1795Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service (crash) via a large list from…UnratedMar 12, 2013
CVE-2012-4446The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without…org.apache.qpid:qpid-clientUnratedFix availableMar 12, 2013
CVE-2012-4458The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory consumption and server…UnratedMar 12, 2013
CVE-2012-4459Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a…UnratedMar 12, 2013

Show all 32 entriesShow fewer entries