# CVEs published 2013-04-24

16 CVEs were published on April 24, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1956](https://cve.now/CVE-2013-1956.md): The create\_user\_ns function in kernel/user\_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists… (no CVSS)
- [CVE-2013-1957](https://cve.now/CVE-2013-1957.md): The clone\_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT\_READONLY flag… (no CVSS)
- [CVE-2013-1958](https://cve.now/CVE-2013-1958.md): The scm\_check\_creds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for… (no CVSS)
- [CVE-2012-5218](https://cve.now/CVE-2012-5218.md): HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass… (no CVSS)
- [CVE-2012-6140](https://cve.now/CVE-2012-6140.md): pam\_google\_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file… (no CVSS)
- [CVE-2013-0540](https://cve.now/CVE-2013-0540.md): IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate… (no CVSS)
- [CVE-2013-0541](https://cve.now/CVE-2013-0541.md): Buffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before… (no CVSS)
- [CVE-2013-0542](https://cve.now/CVE-2013-0542.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0… (no CVSS)
- [CVE-2013-0543](https://cve.now/CVE-2013-0543.md): IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux… (no CVSS)
- [CVE-2013-0544](https://cve.now/CVE-2013-0544.md): Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before… (no CVSS)
- [CVE-2013-0565](https://cve.now/CVE-2013-0565.md): Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server (WAS)… (no CVSS)
- [CVE-2013-1088](https://cve.now/CVE-2013-1088.md): Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the… (no CVSS)
- [CVE-2013-1195](https://cve.now/CVE-2013-1195.md): The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does… (no CVSS)
- [CVE-2013-1214](https://cve.now/CVE-2013-1214.md): The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins… (no CVSS)
- [CVE-2013-1217](https://cve.now/CVE-2013-1217.md): The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to… (no CVSS)
- [CVE-2013-3268](https://cve.now/CVE-2013-3268.md): Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.