# CVEs published 2013-03-28

35 CVEs were published on March 28, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0553](https://cve.now/CVE-2012-0553.md): Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a… (no CVSS)
- [CVE-2012-5216](https://cve.now/CVE-2012-5216.md): Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka… (no CVSS)
- [CVE-2012-5879](https://cve.now/CVE-2012-5879.md): An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to… (no CVSS)
- [CVE-2013-1142](https://cve.now/CVE-2013-1142.md): Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial… (no CVSS)
- [CVE-2013-1143](https://cve.now/CVE-2013-1143.md): The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through… (no CVSS)
- [CVE-2013-1144](https://cve.now/CVE-2013-1144.md): Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via… (no CVSS)
- [CVE-2013-1145](https://cve.now/CVE-2013-1145.md): Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled… (no CVSS)
- [CVE-2013-1146](https://cve.now/CVE-2013-1146.md): The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a… (no CVSS)
- [CVE-2013-1147](https://cve.now/CVE-2013-1147.md): The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a… (no CVSS)
- [CVE-2013-1148](https://cve.now/CVE-2013-1148.md): The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS… (no CVSS)
- [CVE-2013-1492](https://cve.now/CVE-2013-1492.md): Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a… (no CVSS)
- [CVE-2013-1747](https://cve.now/CVE-2013-1747.md): channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for… (no CVSS)
- [CVE-2013-1861](https://cve.now/CVE-2013-1861.md): MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier… (no CVSS)
- [CVE-2013-2290](https://cve.now/CVE-2013-2290.md): Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before… (no CVSS)
- [CVE-2013-2690](https://cve.now/CVE-2013-2690.md): SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2012-6550](https://cve.now/CVE-2012-6550.md): Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2013-0240](https://cve.now/CVE-2013-0240.md): Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating… (no CVSS)
- [CVE-2013-1799](https://cve.now/CVE-2013-1799.md): Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts… (no CVSS)
- [CVE-2013-1808](https://cve.now/CVE-2013-1808.md): Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty… (no CVSS)
- [CVE-2013-2266](https://cve.now/CVE-2013-2266.md): libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX… (no CVSS)
- [CVE-2013-2494](https://cve.now/CVE-2013-2494.md): libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors… (no CVSS)
- [CVE-2013-0935](https://cve.now/CVE-2013-0935.md): EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows… (no CVSS)
- [CVE-2013-0936](https://cve.now/CVE-2013-0936.md): Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP… (no CVSS)
- [CVE-2013-2717](https://cve.now/CVE-2013-2717.md): Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM)… (no CVSS)
- [CVE-2013-0916](https://cve.now/CVE-2013-0916.md): Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attackers to cause a… (no CVSS)
- [CVE-2013-0917](https://cve.now/CVE-2013-0917.md): The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via… (no CVSS)
- [CVE-2013-0918](https://cve.now/CVE-2013-0918.md): Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows… (no CVSS)
- [CVE-2013-0919](https://cve.now/CVE-2013-0919.md): Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or… (no CVSS)
- [CVE-2013-0920](https://cve.now/CVE-2013-0920.md): Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial… (no CVSS)
- [CVE-2013-0921](https://cve.now/CVE-2013-0921.md): The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it… (no CVSS)
- [CVE-2013-0922](https://cve.now/CVE-2013-0922.md): Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic… (no CVSS)
- [CVE-2013-0923](https://cve.now/CVE-2013-0923.md): The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via… (no CVSS)
- [CVE-2013-0924](https://cve.now/CVE-2013-0924.md): The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file… (no CVSS)
- [CVE-2013-0925](https://cve.now/CVE-2013-0925.md): Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a… (no CVSS)
- [CVE-2013-0926](https://cve.now/CVE-2013-0926.md): Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.