# CVEs published 2013-03-15

15 CVEs were published on March 15, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2371](https://cve.now/CVE-2013-2371.md): The Web API in the Statistics Server in TIBCO Spotfire Statistics Services 3.3.x before 3.3.1, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 al (no CVSS)
- [CVE-2013-2372](https://cve.now/CVE-2013-2372.md): Cross-site scripting (XSS) vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5 (no CVSS)
- [CVE-2013-2373](https://cve.now/CVE-2013-2373.md): The Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 does not properly (no CVSS)
- [CVE-2013-2492](https://cve.now/CVE-2013-2492.md): Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote att (no CVSS)
- [CVE-2013-0248](https://cve.now/CVE-2013-0248.md): The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for upload (CVSS 6.8, commons-fileupload:commons-fileupload)
- [CVE-2013-0960](https://cve.now/CVE-2013-0960.md): WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2013-0961](https://cve.now/CVE-2013-0961.md): WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2013-0966](https://cve.now/CVE-2013-0966.md): The Apple mod\_hfs\_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode charact (no CVSS)
- [CVE-2013-0967](https://cve.now/CVE-2013-0967.md): CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java (no CVSS)
- [CVE-2013-0969](https://cve.now/CVE-2013-0969.md): Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically prox (no CVSS)
- [CVE-2013-0970](https://cve.now/CVE-2013-0970.md): Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL (no CVSS)
- [CVE-2013-0971](https://cve.now/CVE-2013-0971.md): Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial o (no CVSS)
- [CVE-2013-0973](https://cve.now/CVE-2013-0973.md): Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the- (no CVSS)
- [CVE-2013-0976](https://cve.now/CVE-2013-0976.md): IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory c (no CVSS)
- [CVE-2013-2560](https://cve.now/CVE-2013-2560.md): Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.