# CVEs published 2013-04-16

14 CVEs were published on April 16, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2832](https://cve.now/CVE-2013-2832.md): The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized… (no CVSS)
- [CVE-2013-2833](https://cve.now/CVE-2013-2833.md): Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2013-2834](https://cve.now/CVE-2013-2834.md): Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows… (no CVSS)
- [CVE-2013-2835](https://cve.now/CVE-2013-2835.md): Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows… (no CVSS)
- [CVE-2012-3022](https://cve.now/CVE-2012-3022.md): The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly… (no CVSS)
- [CVE-2012-4829](https://cve.now/CVE-2012-4829.md): IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle… (no CVSS)
- [CVE-2012-5415](https://cve.now/CVE-2012-5415.md): Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption… (no CVSS)
- [CVE-2013-1187](https://cve.now/CVE-2013-1187.md): The Connection Manager in Cisco Jabber Extensible Communications Platform (aka Jabber XCP) does not properly validate login data, which… (no CVSS)
- [CVE-2013-1193](https://cve.now/CVE-2013-1193.md): The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM)… (no CVSS)
- [CVE-2013-1197](https://cve.now/CVE-2013-1197.md): The XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to cause a denial of service (jabberd… (no CVSS)
- [CVE-2013-1937](https://cve.now/CVE-2013-1937.md): Multiple cross-site scripting (XSS) vulnerabilities in tbl\_gis\_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote… (no CVSS)
- [CVE-2013-2303](https://cve.now/CVE-2013-2303.md): Sleipnir 4.0.0.4000 and earlier on Windows allows remote attackers to spoof the SSL lock icon and address-bar colors via unspecified… (no CVSS)
- [CVE-2013-2304](https://cve.now/CVE-2013-2304.md): The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote… (no CVSS)
- [CVE-2013-2760](https://cve.now/CVE-2013-2760.md): Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.