# CVEs published 2013-03-13 27 CVEs were published on March 13, 2013: 0 critical, 2 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2013-0312](https://cve.now/CVE-2013-0312.md): 389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence. (no CVSS) - [CVE-2013-1469](https://cve.now/CVE-2013-1469.md): Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (no CVSS) - [CVE-2013-0646](https://cve.now/CVE-2013-0646.md): Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x (no CVSS) - [CVE-2013-0650](https://cve.now/CVE-2013-0650.md): Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183. (no CVSS) - [CVE-2013-1371](https://cve.now/CVE-2013-1371.md): Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 (no CVSS) - [CVE-2013-1375](https://cve.now/CVE-2013-1375.md): Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 (no CVSS) - [CVE-2013-0074](https://cve.now/CVE-2013-0074.md): Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which (CVSS 7.8, KEV) - [CVE-2013-0079](https://cve.now/CVE-2013-0079.md): Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory al (no CVSS) - [CVE-2013-0080](https://cve.now/CVE-2013-0080.md): Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for cont (no CVSS) - [CVE-2013-0083](https://cve.now/CVE-2013-0083.md): Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2013-0084](https://cve.now/CVE-2013-0084.md): Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypa (no CVSS) - [CVE-2013-0085](https://cve.now/CVE-2013-0085.md): Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2013-0086](https://cve.now/CVE-2013-0086.md): Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensit (no CVSS) - [CVE-2013-0087](https://cve.now/CVE-2013-0087.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS) - [CVE-2013-0088](https://cve.now/CVE-2013-0088.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS) - [CVE-2013-0089](https://cve.now/CVE-2013-0089.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS) - [CVE-2013-0090](https://cve.now/CVE-2013-0090.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (CVSS 8.8) - [CVE-2013-0091](https://cve.now/CVE-2013-0091.md): Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that (no CVSS) - [CVE-2013-0092](https://cve.now/CVE-2013-0092.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS) - [CVE-2013-0093](https://cve.now/CVE-2013-0093.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS) - [CVE-2013-0094](https://cve.now/CVE-2013-0094.md): Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web (no CVSS) - [CVE-2013-0095](https://cve.now/CVE-2013-0095.md): Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a (no CVSS) - [CVE-2013-1285](https://cve.now/CVE-2013-1285.md): The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, an (no CVSS) - [CVE-2013-1286](https://cve.now/CVE-2013-1286.md): The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, an (no CVSS) - [CVE-2013-1287](https://cve.now/CVE-2013-1287.md): The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, an (no CVSS) - [CVE-2013-1288](https://cve.now/CVE-2013-1288.md): Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that (no CVSS) - [CVE-2013-2558](https://cve.now/CVE-2013-2558.md): Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service (reboot) or possibly have unknown othe (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.