# CVEs published 2013-03-06 9 CVEs were published on March 6, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-1819](https://cve.now/CVE-2013-1819.md): The \_xfs\_buf\_find function in fs/xfs/xfs\_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to (no CVSS) - [CVE-2013-0200](https://cve.now/CVE-2013-0200.md): HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hp (no CVSS) - [CVE-2012-5770](https://cve.now/CVE-2012-5770.md): The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, w (no CVSS) - [CVE-2012-5939](https://cve.now/CVE-2012-5939.md): Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency (no CVSS) - [CVE-2012-5942](https://cve.now/CVE-2012-5942.md): Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Man (no CVSS) - [CVE-2013-1048](https://cve.now/CVE-2013-1048.md): The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for (no CVSS) - [CVE-2013-1140](https://cve.now/CVE-2013-1140.md): The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an ext (no CVSS) - [CVE-2013-1635](https://cve.now/CVE-2013-1635.md): ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl\_cache\_dir directive an (no CVSS) - [CVE-2013-1643](https://cve.now/CVE-2013-1643.md): The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.