# CVEs published 2013-04-04

14 CVEs were published on April 4, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0125](https://cve.now/CVE-2013-0125.md): Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2013-0128](https://cve.now/CVE-2013-0128.md): The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file e-mail message with… (no CVSS)
- [CVE-2013-2302](https://cve.now/CVE-2013-2302.md): TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to… (no CVSS)
- [CVE-2013-1899](https://cve.now/CVE-2013-1899.md): Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to… (no CVSS)
- [CVE-2013-1900](https://cve.now/CVE-2013-1900.md): PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates… (no CVSS)
- [CVE-2013-1901](https://cve.now/CVE-2013-1901.md): PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated… (no CVSS)
- [CVE-2013-1902](https://cve.now/CVE-2013-1902.md): PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure… (no CVSS)
- [CVE-2013-1903](https://cve.now/CVE-2013-1903.md): PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly… (no CVSS)
- [CVE-2012-4710](https://cve.now/CVE-2012-4710.md): Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers… (no CVSS)
- [CVE-2013-0663](https://cve.now/CVE-2013-0663.md): Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340… (no CVSS)
- [CVE-2013-0664](https://cve.now/CVE-2013-0664.md): The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC… (no CVSS)
- [CVE-2013-2761](https://cve.now/CVE-2013-2761.md): The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module… (no CVSS)
- [CVE-2013-2762](https://cve.now/CVE-2013-2762.md): The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it… (no CVSS)
- [CVE-2013-2763](https://cve.now/CVE-2013-2763.md): The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.