CVEs published March 8, 2013
16 CVEs were published on March 8, 2013: 0 critical, 1 high.
- Published
- 16
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Red Hat OpenStack Folsom for RHEL · Red Hat Enterprise L… +1
- 2
- jquery · jquery-rails +1
- 1
- spree
- 1
- spree_auth_devise
- 1
High 1
Medium, low and unrated 15
- CVE-2011-2504Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Tro
- CVE-2011-4969Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to injjquery · jquery-rails +1
- CVE-2013-0249Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1
- CVE-2013-1050The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, w
- CVE-2011-3201GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, wh
- CVE-2013-0266Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to…Red Hat OpenStack Folsom for RHEL · Red Hat Enterprise L… +1
- CVE-2013-0308The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN)
- CVE-2012-4066The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which
- CVE-2013-0401The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earli
- CVE-2013-0402Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and ea
- CVE-2013-1488The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to exec
- CVE-2013-1491The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier,
- CVE-2013-1656Spree Commerce 1.0.x through 1.3.2 allows remote authenticated administrators to instantiate arbitrary Ruby objects and execute arbitrary cospree
- CVE-2013-1762stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer convers
- CVE-2013-2506app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updspree_auth_devise