cve.nowby Sazabi

CVEs published March 20, 2013

29 CVEs were published on March 20, 2013: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 29
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 29
Now in CISA KEV: 0
Fix available: 4

Most affected products

typo3/cms-core: 2
command_wrap: 1
curl: 1
fastreader: 1
mini_magick: 1
puppet: 1

Medium, low and unrated 29

CVE-2013-1875command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL…command_wrapUnratedMar 20, 2013
CVE-2013-2615lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell…fastreaderUnratedMar 20, 2013
CVE-2013-2616lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in…mini_magickUnratedFix availableMar 20, 2013
CVE-2013-2617lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.curlUnratedMar 20, 2013
CVE-2013-0711IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service (daemon outage) via…UnratedMar 20, 2013
CVE-2013-0712IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon…UnratedMar 20, 2013
CVE-2013-0713IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service (daemon…UnratedMar 20, 2013
CVE-2013-0714IPSSH (aka the SSH server) in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of…UnratedMar 20, 2013
CVE-2013-0715The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service (CLI session…UnratedMar 20, 2013
CVE-2013-0716The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service (daemon crash) via a crafted URI.UnratedMar 20, 2013
CVE-2013-1750Heap-based buffer overflow in RealNetworks RealPlayer before 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to…UnratedMar 20, 2013
CVE-2013-1640The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before…UnratedMar 20, 2013
CVE-2013-1652Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote…UnratedMar 20, 2013
CVE-2013-1653Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when…UnratedMar 20, 2013
CVE-2013-1654Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does not properly negotiate the SSL protocol…UnratedMar 20, 2013
CVE-2013-1655Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via…puppetUnratedFix availableMar 20, 2013
CVE-2013-2274Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the…UnratedMar 20, 2013
CVE-2013-2275The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and…UnratedMar 20, 2013
CVE-2013-0232includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via…UnratedMar 20, 2013
CVE-2013-0332Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a ..UnratedMar 20, 2013
CVE-2013-1766libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified…UnratedMar 20, 2013
CVE-2013-1842SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x…typo3/cms-coreUnratedFix availableMar 20, 2013
CVE-2013-1843Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and…typo3/cms-coreUnratedFix availableMar 20, 2013
CVE-2012-5938The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and…UnratedMar 20, 2013
CVE-2013-0977dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files…UnratedMar 20, 2013

Show all 29 entriesShow fewer entries